Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
File:                     88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa (raw, json)
Hash identifier:          SASobjGtUE8tUWy4lIaAQvto3O8ShhHMWlm7bqcKUN4=
Subject key identifier:   75:4C:72:9E:C7:FE:6F:B9:FE:04:CB:7A:0C:B3:B1:AF:53:8B:DF:37
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B970CE92EADDF50E41AE3C880
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     12129
IP address blocks:        66.103.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e9:2e:ad:df:50:e4:1a:e3:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=9bbed90f-026d-429e-8bb1-a845fb65c918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:f7:db:4f:dd:5c:db:32:7c:1e:1d:cc:bb:
                    f7:17:18:3d:4e:9e:a0:7e:30:b0:39:ae:ce:a8:82:
                    49:48:37:72:d6:f7:0a:50:5f:2d:1f:df:7d:a5:f9:
                    98:f5:89:db:08:f0:88:d4:13:c3:45:77:ff:b6:70:
                    8c:3d:7f:76:5e:e3:bc:94:70:40:b0:75:ef:e4:e2:
                    99:7c:ce:34:9d:3b:18:2a:35:6d:7a:b4:d8:9b:ad:
                    69:49:56:a1:e3:74:8e:6a:79:38:d0:0b:7e:bc:07:
                    91:10:4c:7d:80:a5:39:d0:43:88:c3:eb:5e:e5:3d:
                    20:8a:c8:7e:bb:98:86:a3:77:9a:58:1d:f4:69:54:
                    82:20:55:f4:99:30:c2:12:58:8d:61:f6:6a:e0:f6:
                    1c:62:58:d2:23:8e:09:36:cc:b3:02:08:34:3d:6b:
                    7a:f5:86:2b:95:21:aa:8a:de:cf:bb:36:85:b1:7a:
                    48:4b:a8:ad:af:bc:b6:c2:e7:26:11:c1:36:8c:18:
                    19:fa:60:6d:84:fe:e7:0d:90:b1:a9:f1:38:43:08:
                    c9:8c:cb:7e:ed:a1:d7:5a:2a:2e:62:82:a6:1e:16:
                    8a:35:e0:dc:e1:ad:84:b9:de:eb:16:09:b9:5c:49:
                    42:21:4d:3b:8a:5e:6e:3a:ab:87:f3:d6:92:ca:4f:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4C:72:9E:C7:FE:6F:B9:FE:04:CB:7A:0C:B3:B1:AF:53:8B:DF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:11:94:ee:17:08:11:65:34:b9:c4:68:70:86:66:7e:9b:c3:
         30:4e:41:1d:fd:b9:27:92:4d:ed:ad:16:c6:dd:78:4c:d5:1b:
         c3:fd:06:20:1e:0f:22:8c:2b:b3:4d:c1:4a:94:98:8a:13:03:
         d8:cb:f0:98:80:c5:97:81:f3:e2:ae:a4:74:77:89:45:3f:0f:
         dd:3d:6a:57:d1:09:7f:a3:75:fb:40:82:9b:00:6b:8a:84:61:
         f1:80:74:59:33:cf:8e:38:ab:2f:5d:8d:25:7e:8e:ec:a3:dc:
         b7:7f:27:b5:76:68:80:83:12:0a:d2:e2:80:8b:61:eb:46:75:
         ac:8a:ae:a0:05:61:38:f1:7e:7f:3e:e0:b8:f6:f4:38:dd:d8:
         e5:f7:85:3c:ad:f4:57:19:df:9d:48:e5:6c:de:c9:3b:90:c3:
         06:0e:85:3b:cd:4e:c9:5c:81:24:b4:a6:d6:0b:b4:8d:fb:95:
         b3:67:de:30:4b:00:6d:a1:29:36:b4:3a:bc:7a:5e:ff:11:59:
         96:46:1a:3e:85:5d:83:d2:2a:e6:0d:51:63:80:30:0a:3b:52:
         63:9d:64:30:4e:38:2f:97:8a:64:bb:dc:ec:f5:72:52:5a:88:
         c7:89:aa:a9:5b:dd:01:6f:ff:1c:b0:cb:05:02:c3:1e:b5:62:
         0f:06:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:50:51 2025 by rpki-client