Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa
File:                     f1a94dda-f220-3073-b4a9-f61ce74f2305.roa (raw, json)
Hash identifier:          q/AwACrTxTrQjpV4ncnncMXf51zTRMYTMYCXrQ1qul8=
Subject key identifier:   F5:6C:2D:E2:EC:A0:49:13:3F:89:40:25:0A:90:4B:77:06:9B:1A:56
Certificate issuer:       /CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42
Certificate serial:       010D0C9F4328584BB02D01A125E87B7DF1099A00
Authority key identifier: 2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     31989
IP address blocks:        66.179.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:01:a1:25:e8:7b:7d:f1:09:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37bfcea0-cd68-469f-9e84-ccc3f1f40b42
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=945ba8c5-4be5-4067-9361-3f1f6723437c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:9e:a6:ea:61:71:e1:82:08:9e:3d:6d:bb:
                    7c:9c:a6:3d:54:04:4b:a1:2a:3b:8c:dd:d2:42:ff:
                    c0:59:58:b3:0a:2a:6b:b1:58:92:3c:4a:03:04:c8:
                    08:c4:3a:cc:43:39:cb:c0:10:f9:ac:58:89:47:60:
                    87:d9:99:ff:8d:18:c0:87:7f:0c:bc:39:53:25:d5:
                    f1:25:5d:1f:43:59:02:46:81:27:e4:d2:37:45:d5:
                    3b:7a:5b:1c:27:a2:11:8a:06:1a:7f:50:34:03:7d:
                    4e:2a:dc:e1:70:a1:e2:0c:0e:8f:5e:9a:fb:8f:98:
                    02:1d:78:ef:fd:1e:ef:98:69:0e:1d:16:fd:57:26:
                    2b:38:86:5b:99:d5:39:9a:fa:ca:8c:d3:03:46:3e:
                    c3:3f:88:fa:d2:dd:6d:bc:44:ce:74:66:e8:8e:51:
                    1a:df:a8:ed:cd:b2:62:1b:96:a3:b9:55:a4:72:ee:
                    0f:37:a7:c4:52:73:92:69:2f:9e:42:6f:ca:68:63:
                    51:98:f6:30:14:b4:12:aa:79:f3:9c:dc:2e:3c:b5:
                    df:c1:7b:c0:14:45:c9:38:1f:6f:51:b3:4c:23:fd:
                    fe:9c:c0:59:2e:35:fa:6c:9d:49:89:d2:95:6b:1b:
                    ed:27:c8:5e:96:51:ca:1e:cd:68:6e:c9:16:7f:f7:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6C:2D:E2:EC:A0:49:13:3F:89:40:25:0A:90:4B:77:06:9B:1A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/f1a94dda-f220-3073-b4a9-f61ce74f2305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.crl

            X509v3 Authority Key Identifier:
                keyid:2B:91:ED:DC:2E:8C:FC:19:63:EA:4E:59:69:E8:3A:E9:AE:89:AB:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/37bfcea0-cd68-469f-9e84-ccc3f1f40b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4b:3b:19:cd:1e:a9:d9:88:08:16:7d:d4:09:18:51:14:e0:
         4f:1f:46:1b:48:ac:99:b0:fe:6f:ea:ec:a4:01:62:d0:2e:f4:
         c3:2b:2f:95:76:11:e9:d6:71:61:2e:89:82:ca:d8:73:c6:94:
         4f:d0:18:07:94:d2:e3:24:3b:75:1c:73:26:68:7e:b1:fe:7b:
         00:96:cb:39:4a:af:f5:c5:8d:d9:8b:22:35:a9:da:d6:c9:77:
         17:ac:c7:c9:d2:91:fa:b9:be:3b:34:0a:77:ef:a7:6c:62:5e:
         2d:d9:46:2e:b2:62:56:95:d7:f9:7c:69:61:1c:cb:27:67:00:
         cc:c3:ce:d0:9e:e9:a4:a4:00:a8:1b:ac:ae:3f:da:00:5b:6e:
         8f:18:27:67:35:59:8c:5b:08:61:6b:d6:41:86:f0:9a:12:83:
         b3:dd:f0:81:3d:7c:cf:b8:36:55:70:4a:97:94:e0:03:2f:90:
         9b:16:f4:26:69:da:b4:46:1d:5c:e1:25:74:e1:d0:61:c0:ca:
         02:bb:ec:fc:b3:16:33:7e:8b:d3:52:5c:d1:e5:d1:37:c6:59:
         68:6e:4f:c7:da:6e:65:5f:10:c2:40:9f:fe:fe:2b:a6:ae:6f:
         fc:57:53:c8:c8:8b:36:3a:c6:06:32:df:a5:94:4b:72:3a:1b:
         59:de:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:50 2025 by rpki-client