Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa
File:                     5e67808e-f879-39fb-96e6-9d7194cb0487.roa (raw, json)
Hash identifier:          t1iEBVE3+Kn4EKuwhEPtbQtxDS5PO5SRuvIvHlmVuHY=
Subject key identifier:   CD:CC:AF:62:80:17:B6:7F:66:DD:93:0B:1B:1B:54:54:11:9F:EA:CB
Certificate issuer:       /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
Certificate serial:       010D0C9F4328584AB91BA7785676E888E3035E70
Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     7018
IP address blocks:        66.207.176.0/24 maxlen: 24
                          66.207.177.0/24 maxlen: 24
                          66.207.178.0/24 maxlen: 24
                          66.207.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a7:78:56:76:e8:88:e3:03:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=eb0ea08d-53bb-46cc-8a15-3981a711c02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:43:1b:5c:dc:7e:cf:15:86:89:48:82:bb:
                    58:da:48:b2:a7:4e:90:ba:05:8c:42:bb:a7:16:d8:
                    cb:d4:a3:31:62:36:0a:f7:de:16:06:0d:0d:72:da:
                    c1:ea:48:81:71:5c:58:ee:63:cd:f6:4b:a7:18:ba:
                    0a:10:ae:7a:5e:e5:34:80:5e:8d:98:91:fd:12:c4:
                    c5:2f:fb:40:55:3a:1f:b7:88:a6:df:3e:4e:34:fc:
                    f5:19:df:ce:8d:4d:2b:9b:0c:c6:c3:01:43:9c:b0:
                    a5:fa:71:9f:cd:c2:90:db:63:74:93:bc:d1:7c:4f:
                    c1:cd:95:76:fb:da:cc:1a:cc:0c:37:42:a7:8b:93:
                    ae:9f:be:da:71:41:e1:98:16:00:28:3f:5f:4d:c7:
                    bf:79:e7:74:de:fb:e6:93:f1:20:c1:ae:d0:f0:ba:
                    43:87:fc:5b:38:6d:30:4d:5a:f2:20:f4:c6:19:cd:
                    65:6d:6b:f0:70:3b:a4:bd:25:04:17:a8:8f:4b:86:
                    5c:cf:df:f1:9d:ae:be:b2:a9:2e:d4:bb:da:1a:95:
                    a8:b1:36:e8:03:89:f1:a2:4e:d3:27:fc:01:06:0b:
                    7e:35:e1:ae:03:c2:19:c1:10:a4:a5:db:e6:96:c6:
                    d5:f0:15:5f:de:9b:7b:57:df:ef:71:b8:e2:b4:4d:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:AF:62:80:17:B6:7F:66:DD:93:0B:1B:1B:54:54:11:9F:EA:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl

            X509v3 Authority Key Identifier:
                keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c4:23:d8:4e:82:51:61:cc:87:3d:30:58:3b:3b:b1:ce:eb:
         4c:ed:f3:17:0e:c7:0d:48:ca:c7:e5:28:7f:70:0d:9a:b7:65:
         84:ef:17:a3:88:82:13:f4:3f:1e:ff:0e:8b:00:8d:9d:a3:d5:
         13:59:28:e1:f1:fe:aa:af:db:da:de:70:e7:08:69:77:ce:16:
         93:a6:cd:01:b3:55:f6:15:08:c8:f5:80:b6:d1:62:7b:5a:ee:
         33:14:03:5f:66:10:c5:82:c4:31:ee:3a:84:80:dc:67:b9:ac:
         16:4a:e7:d6:aa:fd:5e:3f:e6:51:6e:67:19:cb:2b:19:a1:65:
         60:47:a0:75:d9:02:77:42:e3:56:b7:db:39:b0:fb:79:c4:cb:
         e9:b8:03:e6:d8:b4:57:44:e2:72:60:b2:97:d2:5e:14:f7:02:
         6f:6f:8c:24:b1:d2:81:7b:73:c3:f0:0d:e7:58:47:0c:93:2c:
         51:9e:fd:99:ea:f9:9f:bf:26:a0:42:2e:bd:c3:fa:46:fd:63:
         f3:a3:42:e8:ed:8f:0b:d9:b8:1b:40:cc:3a:75:04:79:26:ba:
         d5:30:ea:6a:ca:dc:88:3c:47:ce:ca:4e:82:a3:3d:29:1b:fd:
         8d:5e:fd:e3:20:73:6c:8b:74:60:8c:81:3c:b7:55:44:c7:15:
         62:41:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:22 2025 by rpki-client