Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa
File:                     0708b39d-1d52-36df-8431-01f06fe04df4.roa (raw, json)
Hash identifier:          1UYTJxid+uAEfvKRO4Xyv2/G30BgerO5orlFMjbr1jM=
Subject key identifier:   35:C8:A4:23:BD:C7:64:EB:B0:DC:3A:50:51:FA:E2:FD:65:12:0E:8F
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584A14656CF5033FA087BD6E7C00
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     396905
IP address blocks:        66.187.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6c:f5:03:3f:a0:87:bd:6e:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=46650844-6ae2-4256-afeb-656833e4e36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:16:a2:1a:59:15:c4:1c:ed:dd:f8:b1:44:
                    be:87:ce:44:4c:6c:ac:42:e2:69:9c:76:3b:05:4b:
                    f3:02:7f:e5:5c:b3:13:6d:5d:33:09:df:e1:12:e3:
                    11:ba:13:e0:05:ff:56:be:95:ca:f1:55:43:d5:5c:
                    47:87:53:5a:c3:d7:f6:be:88:d5:b9:5f:1f:d8:4b:
                    18:84:f4:5b:f9:70:ac:b2:bd:10:e7:4f:b0:0c:66:
                    57:fe:99:16:4a:e8:a8:13:f8:fb:ac:8b:0c:0c:bf:
                    bf:03:0e:1e:04:e0:04:28:9b:27:53:e7:8d:a0:be:
                    f3:49:ee:31:fd:72:84:9d:45:9d:43:88:56:07:f4:
                    db:81:74:57:0f:e2:4b:f8:b4:d8:eb:12:c9:5f:5f:
                    68:d0:96:cd:18:7a:6e:57:f9:89:34:b1:db:2f:7c:
                    b6:a8:50:82:bc:22:2d:1a:88:44:7d:3f:43:b1:30:
                    8b:7e:3d:1e:6a:99:6d:0a:24:e3:0e:b9:de:01:7d:
                    c3:77:51:97:35:18:f3:6a:a5:5a:ec:47:a6:42:c2:
                    3b:de:d9:d7:47:80:19:d5:59:3d:b6:0b:18:2c:a1:
                    49:25:35:5b:8f:cd:3b:20:ba:4c:7e:d5:ad:0a:fb:
                    0a:16:60:ef:b9:1d:38:61:05:ce:5d:b2:8a:ce:1b:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C8:A4:23:BD:C7:64:EB:B0:DC:3A:50:51:FA:E2:FD:65:12:0E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/0708b39d-1d52-36df-8431-01f06fe04df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1b:42:7f:15:19:70:e4:72:74:2d:be:ba:ad:6f:04:d4:3f:
         b6:73:f7:7d:f0:03:8e:c2:d2:46:7d:80:2c:9b:0c:c7:d7:80:
         13:7e:46:24:21:c9:30:d7:f2:4c:20:a3:a0:54:a3:67:0f:de:
         8c:fd:81:c2:cb:77:e6:95:46:f7:00:94:4b:7c:0b:5d:9f:86:
         40:9c:f6:07:9a:50:71:28:b6:b2:21:e4:73:fd:7d:b4:83:5c:
         0f:54:b9:52:fb:f3:fe:c2:20:46:1c:d4:41:a4:8d:3f:d3:61:
         d3:19:f0:1b:ad:ae:4b:17:ff:3b:fc:a9:d4:0e:5b:d5:fd:07:
         dc:df:e2:1d:9b:b8:28:2f:02:21:67:71:80:73:f4:69:49:8e:
         2a:2a:fe:54:6b:67:95:02:44:d9:17:e4:76:38:40:31:0f:2a:
         fc:80:69:97:97:43:b5:83:6e:ce:e9:fc:12:21:6d:b5:77:43:
         63:76:26:ae:97:8b:33:dd:0d:eb:92:70:80:dd:06:41:95:7e:
         7b:70:c5:42:6f:2d:98:e6:c4:a5:da:30:63:31:f9:ea:96:f1:
         8c:5f:ee:9c:a8:57:17:2e:f4:c0:1c:c7:35:cb:62:21:4a:59:
         ec:3a:c7:6b:49:e0:1f:d8:8c:b0:b4:89:ce:5b:0d:70:93:f6:
         e9:2e:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:36 2025 by rpki-client