Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/86de727b-71d6-3fa8-9776-fa4526fe6dae.roa
File:                     86de727b-71d6-3fa8-9776-fa4526fe6dae.roa (raw, json)
Hash identifier:          dzzXQdtW9C6WUth9Zgrhm4T+XO+tpJ0HBcnQXdFF6EA=
Subject key identifier:   F9:13:C5:5D:02:D1:6D:43:57:30:A2:15:4E:73:4C:97:3B:62:8C:EE
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584A7E7B6009300F08637FA0D900
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/86de727b-71d6-3fa8-9776-fa4526fe6dae.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     33635
IP address blocks:        66.36.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:60:09:30:0f:08:63:7f:a0:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=0eb19395-6fa2-4265-87dd-fc9eea9ba5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:78:83:db:d2:f1:30:2f:16:06:a3:45:2d:
                    7f:b4:b3:19:d9:0c:19:56:e0:86:9c:f6:4a:27:5e:
                    5e:5b:ae:62:06:39:e6:f6:bd:8a:7a:30:c2:3c:68:
                    bf:48:ae:62:0a:85:ea:ff:98:45:78:a3:9a:9e:d8:
                    3c:10:9a:d0:fe:ad:f9:8a:6a:be:3d:97:5d:ea:02:
                    b0:d3:cc:09:d2:40:51:ba:b7:9b:28:c5:89:35:af:
                    7a:8a:c4:5c:4f:ad:4a:94:3f:f5:de:a2:39:db:99:
                    df:bd:17:e8:9c:e7:1e:49:41:dc:ac:ce:c7:cb:eb:
                    b9:9e:b9:48:90:28:b1:4a:ef:9d:a5:da:83:71:44:
                    75:47:fb:6d:4d:f0:4e:0d:68:a0:f7:30:45:72:0e:
                    3f:7f:3a:70:d9:d0:0f:34:aa:14:73:62:94:6b:fa:
                    02:67:b5:3b:b2:80:eb:e1:47:0d:df:58:97:93:94:
                    ea:10:51:2f:c5:5a:f2:64:89:04:c4:fc:d7:62:95:
                    cf:e3:3d:c3:60:45:ad:67:3d:2a:79:93:f8:53:8d:
                    6e:d4:c3:d2:3c:f3:f6:69:b6:10:7a:9e:49:a4:d4:
                    25:29:a8:24:e5:65:fb:ee:06:d8:b5:e3:8b:f2:be:
                    b2:48:4c:2f:3e:7f:45:0f:74:e4:9a:44:ae:a4:55:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:13:C5:5D:02:D1:6D:43:57:30:A2:15:4E:73:4C:97:3B:62:8C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/86de727b-71d6-3fa8-9776-fa4526fe6dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:37:1d:1e:1c:d8:c4:d5:71:ba:2b:e7:17:f4:82:00:d6:84:
         ae:bc:eb:da:85:41:9b:2a:13:7a:3c:b9:5b:5e:fb:e1:69:85:
         c5:f9:c8:0f:3a:fb:69:f8:6a:e8:06:21:6f:7e:18:bd:cc:59:
         3d:e4:ef:d9:32:74:af:ce:41:e9:e2:06:63:5b:35:77:b8:7d:
         78:39:2c:9a:4f:10:63:39:61:06:52:cf:02:ab:5c:a1:42:43:
         d2:d5:2b:8d:81:89:21:c3:d4:5f:87:68:75:7a:a8:25:c6:6a:
         74:fe:7b:61:c0:4d:db:39:7b:82:8d:61:a3:e9:05:c7:d3:41:
         80:a2:1f:c7:9c:0b:01:ca:01:75:28:7f:d7:af:d8:17:29:67:
         4e:50:dd:25:8f:d0:08:b1:62:e1:74:88:26:e1:a4:85:42:3a:
         53:83:8c:9d:d1:29:37:90:2a:76:12:e9:7e:1e:cf:98:40:43:
         23:00:00:76:23:4c:a5:6c:98:12:06:dc:c7:f4:ba:b8:75:a0:
         b7:6f:33:19:ff:62:bc:57:cc:de:ca:05:c8:29:d0:cb:25:50:
         0a:25:e2:ad:c1:ef:ec:7f:00:46:2b:d0:9a:e4:aa:57:98:26:
         50:b9:e9:4b:7d:85:0c:ae:be:94:32:7b:41:d6:5d:ee:57:68:
         76:ab:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:45 2025 by rpki-client