Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/106d4534-03ff-3b5a-adfd-574a34670068.roa
File:                     106d4534-03ff-3b5a-adfd-574a34670068.roa (raw, json)
Hash identifier:          W+angBj16MqzZ8EEC+X/vgYqF5HBeWRMcPMGKjP0Udg=
Subject key identifier:   C4:61:F0:FC:58:12:B1:D9:E4:F6:72:FD:F7:FA:74:B4:F9:94:31:C5
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F4328584A90A0C61D98E27B2A9A966B00
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/106d4534-03ff-3b5a-adfd-574a34670068.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     16789
IP address blocks:        137.66.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c6:1d:98:e2:7b:2a:9a:96:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=11e8db4b-d48c-4eb9-8f7f-1a58113fe5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:46:ca:b7:8b:d7:30:fd:81:b8:6a:84:61:
                    b0:c9:2c:55:11:f4:a7:8b:fc:c8:07:9c:4b:1e:b3:
                    f8:36:a1:f4:58:a8:bc:69:4a:9d:5c:77:6d:58:52:
                    2f:75:b8:fd:da:81:97:e5:5d:8a:5a:05:71:80:05:
                    5b:d3:8c:c3:9f:62:0b:57:1f:67:82:f7:b8:ac:be:
                    49:ae:90:4b:6e:cf:0d:30:c1:36:24:33:a0:35:cb:
                    19:e5:67:16:79:96:77:06:20:4a:a8:20:07:af:f0:
                    b2:82:8d:11:00:43:13:f4:b6:26:00:61:14:35:65:
                    b9:3a:ad:cb:57:6c:f3:0c:00:5a:b5:0d:81:ae:3a:
                    a4:9f:c9:c9:f0:a6:90:12:e7:31:8b:c3:c5:b7:f1:
                    35:e2:ce:de:01:50:da:de:f2:37:c7:29:b8:d6:66:
                    cd:50:24:16:79:f8:42:4f:6a:e9:e9:a8:c1:f4:bc:
                    b1:e4:8c:c7:ea:39:16:91:4e:73:c4:31:20:84:08:
                    21:53:0c:df:47:f4:ef:e3:db:51:a2:93:f0:d8:86:
                    a8:55:d9:88:e3:20:8a:8b:1e:1b:4b:89:3c:b5:bd:
                    d6:eb:3c:39:a7:3b:dd:0b:3d:07:80:61:3e:cf:67:
                    c7:00:70:6a:ce:16:fc:00:43:8b:66:e8:ca:be:7f:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:F0:FC:58:12:B1:D9:E4:F6:72:FD:F7:FA:74:B4:F9:94:31:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/106d4534-03ff-3b5a-adfd-574a34670068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.66.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c2:ba:20:e2:b5:48:4c:8e:d5:94:0e:6c:b1:6a:e6:43:57:
         c9:e1:da:7e:be:a1:88:9d:1d:72:7e:f6:61:11:03:41:ce:1c:
         f1:ba:d4:b0:d5:c1:5a:cf:fd:d3:46:52:68:dd:a2:89:26:1f:
         2a:5a:d7:4b:cc:b6:15:dd:97:94:9b:c8:c8:f9:20:a8:d2:53:
         ec:b7:e1:ba:7e:e8:cf:ac:0a:bd:2d:86:4a:b3:79:11:f9:c0:
         a1:50:18:c6:e8:22:5d:cb:8a:e6:45:85:20:dd:63:4e:85:19:
         a5:a6:e6:3d:f3:53:74:05:cc:6f:dd:75:f5:1e:34:12:e9:d0:
         e2:ca:93:a6:9a:5c:36:f3:a5:f5:83:0f:f1:f9:eb:57:1b:a2:
         13:a7:58:78:b3:99:18:92:ef:6c:ec:5b:2b:3b:cd:61:bc:6a:
         f1:73:55:45:e9:3e:4c:93:9a:cb:00:df:b8:b1:93:63:15:4c:
         f8:5d:bb:80:27:83:78:c5:1e:a5:a4:fb:ee:11:d6:53:b3:81:
         a6:88:c6:99:54:66:83:54:49:f3:43:79:99:77:60:2d:5a:36:
         cf:53:30:32:c1:77:d2:a2:26:a7:40:c0:a8:68:38:79:30:e2:
         39:28:99:02:a0:ab:13:a9:ff:4b:5b:56:0c:1a:72:dd:11:86:
         13:fa:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:06 2025 by rpki-client