Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa
File:                     0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa (raw, json)
Hash identifier:          uNK7ThVXCT6Jcl7K2Ss8s6gvde0EASQoFqjC7COPa8Q=
Subject key identifier:   7A:19:A1:86:E4:3F:ED:7C:CE:89:42:97:55:6D:26:02:BC:B1:D7:63
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BEF2BE8A18489EF6F5F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     54288
IP address blocks:        66.160.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ef:2b:e8:a1:84:89:ef:6f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=e987203a-2ed5-4839-a884-d308754fdb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:2a:10:aa:f2:4a:f0:3d:7e:0f:d6:cc:55:
                    bd:f8:6c:96:f7:18:88:84:9c:1a:87:01:ba:6f:85:
                    fa:bd:9a:a0:a4:a5:01:f7:7e:12:56:ce:6f:2f:59:
                    80:90:03:8e:e1:ca:dc:02:cd:05:77:fc:e2:2f:2d:
                    c5:2d:4e:c9:52:00:80:d1:4a:4a:32:97:9d:b9:b3:
                    9f:32:ed:8a:93:e4:51:7b:e4:de:ac:50:c8:1c:06:
                    cf:2c:ff:7a:e9:2d:b6:af:2a:06:88:a5:b8:81:ea:
                    56:aa:6e:e8:03:31:88:8e:6b:fe:4e:8e:80:e3:dd:
                    c9:e5:62:05:f0:da:00:d7:dd:4a:5a:68:31:cf:fc:
                    13:0b:c0:65:67:31:1b:d3:2f:34:5d:7d:6d:9f:86:
                    1c:90:04:64:e6:8c:f1:18:9c:88:46:0e:74:3c:58:
                    fa:91:5e:d9:da:2b:12:92:e5:46:d8:8f:7f:0b:94:
                    d9:30:e0:49:29:a6:98:55:c0:93:71:03:24:71:db:
                    64:b9:c9:6d:47:83:b4:e9:56:f9:84:e6:e4:b2:37:
                    7f:75:fd:e4:ee:1d:52:1e:a2:05:c6:82:16:e4:53:
                    28:96:ac:31:fb:b9:ba:ed:c4:9b:52:ac:2d:42:60:
                    bf:87:57:d2:56:d7:b4:78:b0:b9:37:35:b6:00:a1:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:A1:86:E4:3F:ED:7C:CE:89:42:97:55:6D:26:02:BC:B1:D7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fafb759-5d6b-3fc1-a75b-e4a6792528e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8c:ce:79:97:8b:21:a7:cf:48:51:e6:7a:ad:65:e6:94:de:
         96:ef:6b:37:99:2b:0e:74:ab:ac:69:27:54:34:7b:13:80:06:
         9c:7c:a8:7d:30:33:c6:92:e1:50:ff:93:68:69:9c:95:df:9d:
         19:ae:04:9e:c1:ae:3d:5e:95:2c:15:85:68:cb:cc:b4:8b:09:
         90:c5:12:dc:dd:8a:b9:6e:88:3a:f1:e3:16:b1:da:aa:a1:ae:
         5a:1f:13:20:c9:01:9e:18:38:51:47:96:df:00:74:ec:2d:85:
         7a:ed:08:8d:9a:2d:f7:10:e8:33:31:a7:0d:0b:7a:a3:94:05:
         36:9b:53:e6:09:b0:95:73:3f:46:f6:90:9f:e9:1a:15:cf:65:
         e8:9b:4d:3e:6c:fa:4d:a3:97:4c:57:6b:50:7e:ac:46:fe:94:
         8c:3b:d5:aa:75:7c:e6:42:2d:d5:36:a1:9f:4c:9c:a4:b4:4e:
         d6:25:55:40:a9:9a:11:8e:2e:fc:1f:31:12:0d:59:e4:72:6b:
         ce:dd:cb:b6:db:75:41:24:f4:ad:33:5e:53:be:ca:fc:0d:38:
         b9:4a:04:61:23:b1:27:20:05:bd:d4:9e:53:ff:02:99:4c:11:
         87:8a:4e:5e:40:48:09:92:20:89:ab:41:39:e7:bc:ec:d0:d2:
         55:91:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:33 2025 by rpki-client