Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/66b541b0-25dd-3821-87bf-548208b06065.roa
File:                     66b541b0-25dd-3821-87bf-548208b06065.roa (raw, json)
Hash identifier:          QNS6SKKcSV1g4IsZsOeVSV1Zk2eo+RB6RE+cvuRGDsI=
Subject key identifier:   80:F6:D3:F1:A6:15:51:4E:56:3D:3D:2F:E5:F7:53:6E:13:32:D9:FF
Certificate issuer:       /CN=61076595-f39c-462e-b686-d3fcac2df32b
Certificate serial:       010D0C9F4328584A857600534EC2FDE4FA1BD880
Authority key identifier: 34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/66b541b0-25dd-3821-87bf-548208b06065.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     36222
IP address blocks:        199.201.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:00:53:4e:c2:fd:e4:fa:1b:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61076595-f39c-462e-b686-d3fcac2df32b
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=0c36cec5-7950-4f5b-a2a9-e3ed1bc74822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:c4:11:2b:ba:eb:ff:f6:9e:b3:b2:ec:48:
                    72:cd:d9:22:eb:a8:dc:e3:80:84:f0:14:f4:73:1b:
                    c2:94:4e:66:ca:4b:37:6c:ee:01:c0:17:41:19:c4:
                    d3:f2:3b:5c:bf:a8:6d:cb:16:82:ef:5c:39:69:29:
                    84:a7:36:06:37:82:9d:2e:98:30:7c:d0:fa:e0:d7:
                    d9:f3:67:61:6e:8f:d1:a7:1f:1b:8d:90:7c:05:8c:
                    6b:95:86:ab:f0:7b:6a:77:00:fa:cf:b4:34:94:92:
                    56:c9:32:56:43:80:6a:eb:4a:fc:46:e7:9c:12:4e:
                    67:30:e7:51:eb:41:14:79:40:ab:fc:2b:2b:27:c2:
                    41:dd:4b:d7:33:8c:f6:dd:d4:9b:bd:54:3a:49:9e:
                    5f:63:71:9c:8c:36:2e:bc:26:dd:75:b0:fd:34:0a:
                    1d:88:69:26:88:62:08:c3:9e:77:3a:00:53:d4:55:
                    98:a6:4d:be:32:eb:ea:6f:aa:cd:c3:97:e9:a0:b5:
                    b6:8e:bf:86:4f:16:f7:79:f1:66:c8:ac:74:c8:3c:
                    12:8e:7e:ee:28:11:f7:b6:03:08:20:8a:29:c3:15:
                    3a:d2:43:2f:23:b5:9e:44:4c:a0:b5:28:b7:de:f5:
                    d8:79:6c:1a:b4:a8:2b:48:2b:68:e5:e2:f3:24:76:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F6:D3:F1:A6:15:51:4E:56:3D:3D:2F:E5:F7:53:6E:13:32:D9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/66b541b0-25dd-3821-87bf-548208b06065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:af:76:8d:c7:5b:67:ed:31:dc:29:cd:61:94:10:9b:41:cd:
         b5:bc:c1:2e:fa:2e:54:7f:c4:c5:76:ed:a6:9c:20:9b:2c:90:
         97:88:b1:8d:c2:76:d4:3c:a3:b1:6b:e1:3a:48:bd:f6:9a:17:
         a2:c5:8a:bf:62:17:24:77:74:f9:ae:47:2d:3f:95:e1:3b:ad:
         21:29:bd:cb:90:f3:db:00:cd:c3:79:54:10:30:f6:40:3c:98:
         d8:05:09:93:b9:45:f1:52:54:3d:6b:1a:32:f5:e6:24:af:ba:
         79:cd:90:01:b1:43:04:df:99:95:58:ab:47:8e:7d:3d:01:82:
         6c:99:17:eb:f5:f9:97:e9:b6:24:ac:d6:2f:74:64:3b:a5:2c:
         6e:08:69:f4:e7:d4:1f:26:e5:02:3f:ee:4c:bd:ea:f1:41:17:
         c7:64:4b:b6:df:a7:9d:32:f1:c1:52:9c:f3:dd:c7:39:94:e9:
         48:20:8e:88:01:2c:ad:8a:f0:b9:6a:c2:d3:22:40:7a:11:8c:
         33:b3:cd:19:21:0e:0a:0a:e1:10:28:f4:cd:23:6a:b6:2d:a3:
         a6:ec:4f:25:c2:57:2c:b5:5f:31:c0:1f:79:04:59:dd:9b:72:
         f6:36:b2:6f:52:82:5f:58:9c:60:36:6b:3c:79:f9:5b:6a:5d:
         49:0a:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:50:39 2025 by rpki-client