Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a54e0cce-82d6-37b1-9d60-a550f54ea218.roa
File:                     a54e0cce-82d6-37b1-9d60-a550f54ea218.roa (raw, json)
Hash identifier:          8/z8+WdnLV4QfVgSeS4XEM9agxUSn4OVoicrod3M+p4=
Subject key identifier:   7B:2B:D0:13:25:CB:B2:2A:0A:E8:CC:FD:E8:E1:80:4B:2B:A6:4C:7A
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584AB91B7EB3D716723337EF5680
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a54e0cce-82d6-37b1-9d60-a550f54ea218.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     33717
IP address blocks:        66.171.118.0/24 maxlen: 24
                          66.171.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:7e:b3:d7:16:72:33:37:ef:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=370e971d-b9b9-4981-ba95-a218f979598e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:a0:1b:f8:45:3b:65:8c:7e:ff:5a:c6:f7:
                    92:65:27:af:23:2c:2d:5a:32:8c:8d:49:2d:08:c7:
                    6e:d6:35:f5:6c:ff:60:be:20:4e:fd:a5:75:cd:27:
                    73:d2:f1:3b:61:9e:7b:42:f6:29:76:cb:1b:60:01:
                    0e:48:f7:cf:a7:5e:b7:ab:ca:ae:ad:38:d5:cc:0c:
                    17:0e:6e:09:bc:70:72:30:e1:7a:a1:c0:c3:d0:1e:
                    d7:ba:b6:b7:23:6b:26:be:ea:80:01:98:e1:92:97:
                    2f:1b:71:6a:c3:55:06:0e:9e:d1:27:62:dc:dd:52:
                    23:3f:f6:73:13:39:7d:99:be:6a:51:20:dd:a2:81:
                    f7:ee:de:7c:5c:a5:2d:4d:b2:3b:a0:a5:cd:3b:c7:
                    ec:0d:58:97:89:c8:6f:48:2d:9d:89:77:82:63:be:
                    c2:54:ad:dd:1b:98:32:9b:63:f1:25:2d:b6:ac:dc:
                    69:2c:4a:93:8c:a6:96:e5:60:28:d6:c5:8a:fc:a7:
                    72:0a:2d:4a:df:64:6a:33:9f:d3:64:92:7b:16:5a:
                    d5:39:a2:7d:e5:5b:9c:ce:9e:ab:b2:ec:02:b1:68:
                    66:69:07:74:37:0c:0d:75:5c:6b:62:47:68:76:cb:
                    b3:dc:21:7e:3c:02:6d:4e:1b:1d:a7:26:dc:95:cd:
                    fb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2B:D0:13:25:CB:B2:2A:0A:E8:CC:FD:E8:E1:80:4B:2B:A6:4C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a54e0cce-82d6-37b1-9d60-a550f54ea218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:9c:de:aa:42:3b:83:0e:72:a5:52:47:f7:ac:ec:31:63:
         c5:60:3f:c3:9b:9d:13:4b:22:95:f5:0a:59:0c:b9:ef:36:df:
         27:82:f1:fa:db:ab:30:aa:e5:49:a3:b0:86:3b:17:a1:a1:9c:
         ee:06:46:3a:a3:71:9a:40:a5:33:aa:cb:e5:d9:3f:9c:ef:a3:
         0d:4d:b2:3f:45:88:cc:24:f6:6b:d6:07:73:14:6d:13:b3:66:
         56:a6:cb:9e:a4:40:42:d5:99:e3:c4:78:dc:61:60:b6:33:26:
         fe:64:fa:41:19:e9:76:14:12:91:1a:40:f4:f3:78:d3:94:5c:
         d7:8a:69:5b:a7:46:0f:42:c5:b9:6d:74:1a:54:11:87:86:35:
         a5:32:72:ad:77:4a:87:35:f6:9a:91:10:53:76:65:6c:2b:27:
         e6:21:99:4e:d6:80:65:97:d1:a2:ac:e2:07:d5:c5:ac:4a:a6:
         29:f8:ac:df:08:1a:b3:bc:df:c9:d8:0a:fe:b9:e4:8c:90:b2:
         9e:8b:9b:63:62:4b:32:00:d7:e6:17:ec:d2:07:d8:a8:e0:75:
         db:ae:55:2b:8c:a8:42:0f:b4:e6:80:b2:93:4e:6c:16:2a:45:
         91:b2:77:02:31:c9:d1:b1:52:4d:3f:77:96:dd:54:2c:d4:58:
         cf:e2:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:48 2025 by rpki-client