Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa
File:                     f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa (raw, json)
Hash identifier:          rWMopCVDEHXckuGXEybQzZa3XGG0s2XvOPN5CeDAUMI=
Subject key identifier:   71:CB:0F:03:1B:9B:E3:83:F4:A0:B6:A5:0A:BA:88:3B:1E:C6:F7:5C
Certificate issuer:       /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
Certificate serial:       010D0C9F4328584A2C201FEC400AA3FAB5AEF580
Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     852
IP address blocks:        198.162.68.0/23 maxlen: 24
                          199.175.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1f:ec:40:0a:a3:fa:b5:ae:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=84386abb-4087-4f45-add9-39a259d1e0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:35:de:7b:bc:0a:89:07:de:c1:5a:05:af:
                    ab:db:49:e6:9e:dd:bf:39:88:2e:9a:62:1e:38:7e:
                    8c:69:f5:3b:75:c8:6b:eb:29:22:2c:95:08:e5:ee:
                    9b:f7:91:1d:3b:c2:49:ff:06:54:3b:1e:64:fd:91:
                    d5:ac:ff:08:bc:57:b2:81:a7:3f:c5:9b:76:67:fa:
                    f0:26:a9:29:c7:bd:92:af:62:bf:2b:c7:b0:ed:5f:
                    25:ef:13:03:a9:cf:9c:93:7d:d9:1e:90:13:b1:e8:
                    17:d9:c8:bf:30:69:3b:8c:cc:40:d6:8e:6b:7b:10:
                    ab:31:16:58:20:e9:13:fd:4d:e8:64:af:08:bd:d4:
                    d2:f2:28:6e:f6:a5:aa:90:53:3e:2d:2f:03:98:27:
                    1d:d5:7d:fd:fd:ff:35:52:fa:b7:7b:31:92:30:61:
                    47:a3:aa:b0:3c:e9:0d:4c:e1:0b:09:f7:9c:d3:9f:
                    41:ad:15:a0:df:65:9d:4c:70:67:f3:7b:d9:47:2e:
                    db:ff:fe:8d:e6:09:be:d5:d1:c3:96:06:9d:fd:0b:
                    c4:b3:bb:e4:f2:73:de:b5:93:a0:f7:83:4c:e1:ef:
                    b1:11:d7:42:10:37:28:7c:44:1d:d8:2e:e9:64:57:
                    bd:84:16:30:d9:7b:73:5b:27:88:3c:f6:51:06:b4:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CB:0F:03:1B:9B:E3:83:F4:A0:B6:A5:0A:BA:88:3B:1E:C6:F7:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.68.0/23
                  199.175.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:04:e6:79:23:c6:86:a9:f5:9c:cb:82:66:c2:d6:cc:b9:af:
         d9:29:a6:db:35:6f:ed:a7:e2:8a:1d:c4:b3:6c:8b:e8:d2:23:
         c2:e3:cd:ae:ed:e9:ed:85:7d:92:df:08:a0:87:7f:c1:5b:48:
         12:95:1f:8b:aa:20:0f:27:12:4a:98:72:e6:c3:e0:57:25:57:
         3f:59:47:dc:d7:c0:50:8c:37:a6:b9:70:d1:79:f9:d5:54:2c:
         e3:5b:52:31:c6:67:7e:7b:b9:86:39:36:19:99:92:b6:68:f7:
         40:f6:35:50:81:b5:e8:82:6a:91:3a:ae:a1:7d:b0:2e:aa:78:
         65:90:f0:46:4d:7e:3f:cc:79:d2:f1:bb:72:84:a6:8c:4c:8f:
         9c:29:d1:31:63:a4:b1:bc:3e:0b:8c:87:e3:e8:46:9e:59:b5:
         ae:4e:71:96:27:bf:d8:49:1a:a4:31:9a:be:f1:0d:43:13:64:
         c2:d2:c1:0a:23:43:46:1c:51:15:a2:85:1e:27:40:2c:6c:ea:
         d0:79:2c:10:53:75:73:9c:b4:06:bb:ab:e7:6f:65:57:2e:42:
         73:98:25:e0:1c:eb:57:16:dd:b8:23:c2:b9:9f:fa:db:30:24:
         ef:23:ff:de:1e:33:c4:23:32:d9:e6:93:79:17:ed:90:4c:08:
         cd:47:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:02:54 2025 by rpki-client