Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59042463-bf0a-38ce-8b18-765f34c7265e.roa
File:                     59042463-bf0a-38ce-8b18-765f34c7265e.roa (raw, json)
Hash identifier:          HdaOTRNBNXgwSaSRpsMNMKJ14KuONXNNBm5dvvkP+mM=
Subject key identifier:   43:F7:2C:DE:34:51:F7:56:D1:20:92:04:DD:C2:74:0B:B8:BB:AE:E0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A9636526AB092A296BEE61B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59042463-bf0a-38ce-8b18-765f34c7265e.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        174.66.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:52:6a:b0:92:a2:96:be:e6:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=7578fa5d-0252-4db7-bc16-a35e8bc99f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:6b:b5:c1:09:0a:3f:58:fb:ee:59:a0:8b:
                    55:97:8f:8f:09:59:7e:2f:36:cf:30:75:5f:6a:fe:
                    64:53:f1:64:70:f9:3b:7d:02:6d:6e:09:37:fd:a5:
                    85:a9:10:59:24:24:c2:0c:dc:25:1d:98:88:55:a9:
                    7f:6e:52:41:30:30:87:4f:26:f8:41:77:2f:0d:db:
                    b6:f5:9a:33:df:5e:03:74:a6:a2:d9:2a:98:0e:3c:
                    81:2b:5c:d7:f2:99:50:a1:92:ff:6e:db:df:5e:5d:
                    af:fc:ec:31:ef:20:b5:1c:72:ee:0b:5d:ea:fd:f4:
                    0c:b8:8d:4a:67:5e:c4:19:de:b2:56:e7:3f:52:bd:
                    27:6d:e6:a4:a1:25:89:8c:e8:f8:41:24:6d:43:ce:
                    5b:a4:c4:2f:77:50:52:07:bf:ef:c1:65:04:14:45:
                    77:2b:1c:08:ed:01:ed:6d:01:6a:d8:b6:bb:c6:c9:
                    3c:3b:91:84:b2:66:7b:ff:02:69:14:f5:49:3c:03:
                    10:69:18:0d:32:13:8c:8a:c5:dc:37:85:ef:f8:79:
                    50:08:f1:60:b5:3e:20:b2:38:2b:3f:03:ba:ce:63:
                    1f:cd:16:95:07:a5:a6:58:53:6c:f4:46:0a:da:81:
                    34:35:f9:78:0d:00:07:3a:ad:e3:0f:b0:a9:a5:b1:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F7:2C:DE:34:51:F7:56:D1:20:92:04:DD:C2:74:0B:B8:BB:AE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59042463-bf0a-38ce-8b18-765f34c7265e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.66.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:03:c8:42:cd:54:d1:85:73:c1:89:d7:7f:29:a8:a9:41:
         75:ed:eb:f6:cc:57:ec:dc:c5:f7:1b:a9:18:c5:4c:b6:87:29:
         cb:59:b5:e6:da:51:df:da:8d:0a:92:9d:f7:d3:44:4a:ab:99:
         65:fb:d4:53:53:24:62:07:fe:2c:ab:6e:37:b8:3a:58:a1:a2:
         d8:3e:3d:db:c3:07:f8:cd:62:45:08:79:87:cc:8a:b1:5f:cf:
         68:7b:75:cd:9e:91:08:40:ed:51:6f:ce:48:08:fd:84:0e:4f:
         f5:0f:b8:5a:a3:3b:b3:1b:8e:1e:85:46:23:fa:89:e7:29:f9:
         c0:40:d5:12:3c:8e:fc:96:cd:6f:f9:e5:89:9a:ce:c6:36:7e:
         c0:c5:d4:3f:dd:ab:3d:89:23:52:7d:99:69:3b:a2:87:21:a4:
         f5:bc:8a:b9:a0:00:6d:e0:b8:83:53:ff:3a:71:be:89:02:6b:
         a0:4c:c4:f1:63:ed:06:0e:22:0a:bf:e8:ad:bf:4e:3d:36:49:
         3e:55:a0:13:99:cd:25:87:62:81:be:a1:32:d6:23:6d:0f:f3:
         22:a6:a8:37:74:68:f7:f7:c3:a6:e1:ce:87:64:40:f9:dc:45:
         11:52:0e:9e:88:fc:d3:5c:f0:bf:94:90:92:49:ff:17:8b:e1:
         16:2d:28:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:24 2025 by rpki-client