Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa
File:                     11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa (raw, json)
Hash identifier:          I2tOcDW2HRhxaiuvH7dFHg1dq/bmxwalDxqefB67Tbo=
Subject key identifier:   C0:37:38:07:2B:32:A0:19:59:94:DF:16:E1:55:EC:FF:C9:AE:78:0C
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584A7E7B60573B064F72DC1E3EC0
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     33635
IP address blocks:        66.36.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:60:57:3b:06:4f:72:dc:1e:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=be9d38b5-3243-47e6-8188-828cefa4eebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:41:6d:18:2e:9a:74:d1:73:18:62:84:11:
                    41:4c:ac:94:3e:74:74:0a:c2:c0:af:fd:bc:89:77:
                    ce:6a:de:fc:42:18:ae:4c:d9:8b:4f:6d:88:d3:0e:
                    99:ee:40:3d:85:14:98:24:3d:0c:d7:70:d7:c1:85:
                    85:d4:22:78:32:57:3b:8e:87:82:5c:16:8f:c1:f2:
                    5a:ce:b1:97:80:a2:d1:3a:30:da:ac:c5:76:14:38:
                    85:a1:0c:fb:0a:81:ea:af:2b:77:cb:5f:96:eb:37:
                    d3:7e:50:e3:e0:3c:ef:c1:2c:30:35:ff:a9:68:d5:
                    1a:cd:a0:7d:6b:6d:27:37:09:c4:f5:10:0e:2c:db:
                    20:6b:d3:e2:28:8b:cd:8d:80:fc:d4:32:be:c8:a5:
                    69:69:47:9f:6e:9c:cb:5a:29:7e:5c:69:94:05:bc:
                    2b:53:fa:18:83:82:a2:7c:4a:0a:dc:44:47:1e:af:
                    9d:bc:95:84:6a:8c:c9:83:41:ed:1c:90:22:5e:e1:
                    76:c9:7d:02:39:16:15:99:90:c0:56:98:6e:a0:56:
                    bb:5b:f3:78:b5:5b:3a:00:ea:e1:99:7d:54:bd:3c:
                    76:58:1c:f0:72:76:5e:6d:93:e4:b8:e9:15:4c:63:
                    bb:e4:af:f9:47:ef:43:05:52:0b:8b:ca:a9:f0:70:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:38:07:2B:32:A0:19:59:94:DF:16:E1:55:EC:FF:C9:AE:78:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:55:75:5c:ab:65:85:76:8c:4f:25:4b:c0:06:31:1d:2c:
         ea:21:86:3c:da:86:6c:09:0b:e5:05:52:3f:aa:bf:10:ee:24:
         d3:30:57:30:bf:b6:fd:d1:2d:62:0a:c1:9e:86:19:3f:3b:69:
         0a:20:e3:d3:da:81:a7:65:b7:cd:9d:69:e7:c8:a7:16:2b:db:
         27:ea:4e:af:3a:66:56:40:c9:a3:43:5d:5e:21:8c:b0:10:fc:
         39:29:db:88:a2:d2:68:b5:fc:1f:44:a6:6b:fa:66:01:b1:b7:
         47:2f:8e:44:99:26:98:39:98:43:e1:d0:41:d2:21:7e:de:28:
         1c:54:2e:f7:26:e1:7b:87:25:10:a5:e4:77:13:86:bf:a4:f6:
         57:5b:fc:5b:89:23:d7:7c:9b:dc:83:9e:af:a3:52:ab:12:70:
         4a:6c:92:ef:18:09:d6:7a:fb:40:9a:f4:ba:1b:fb:3f:05:70:
         d1:c7:50:43:20:9d:1b:b1:da:05:38:55:5b:d2:60:6f:36:b3:
         47:3a:e8:b4:f9:b4:fe:c5:78:f9:79:66:df:06:8a:99:98:57:
         60:c5:a4:d7:cc:48:df:56:6a:b0:0f:e7:5a:0a:18:0d:d1:ac:
         16:a4:9b:4e:e6:a9:21:53:e1:d6:b6:8a:6c:3d:d4:db:7b:71:
         df:fc:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:46 2025 by rpki-client