Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a0af65b-8118-3843-8460-680b46d61ff2.roa
File:                     3a0af65b-8118-3843-8460-680b46d61ff2.roa (raw, json)
Hash identifier:          48lpQ5XWfKwrBOzgV2x+gLPbDFaEIVlNpeAFCvbGLD8=
Subject key identifier:   46:DE:BC:A1:74:31:0C:7C:6E:5E:FE:4E:48:10:8B:8A:FA:12:90:A9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B07B7150961F29D3A380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a0af65b-8118-3843-8460-680b46d61ff2.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        66.25.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b0:7b:71:50:96:1f:29:d3:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=01f9d81e-4cae-4199-92ef-8e1f7e88e83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:3a:a9:11:2a:4f:32:90:36:85:e9:f9:09:
                    55:14:6b:81:0c:e0:bb:cb:f7:2e:2b:6f:7d:d4:9b:
                    ac:c9:9b:7a:1b:a1:35:c1:e0:e7:24:a0:4c:2b:87:
                    40:9a:8c:90:4d:2b:f9:eb:cf:6e:8a:17:bc:69:74:
                    bd:eb:a6:bb:a8:3a:01:c1:9c:02:7a:60:8a:1c:12:
                    10:50:6b:24:3d:d0:6d:1e:55:a1:57:94:18:fc:03:
                    20:31:d3:1e:ba:69:5a:14:53:72:7f:b9:f9:96:a2:
                    7f:08:40:9c:d6:bb:f6:55:cf:36:18:c7:99:2c:64:
                    ee:0e:ab:ad:49:13:61:66:d3:44:6f:ca:c8:6d:de:
                    91:e8:11:1c:69:86:0a:1d:25:40:b4:f7:44:55:87:
                    75:a2:74:61:92:4f:7c:74:9b:7a:d7:17:9d:02:72:
                    35:6a:ea:8c:be:73:31:48:d3:25:93:3e:06:03:fe:
                    de:57:56:77:73:59:3b:9f:ba:6f:df:a0:38:60:de:
                    be:43:df:6a:43:cd:1b:b0:d1:e8:6a:e4:d9:fa:6d:
                    cf:28:8a:14:8f:4a:3b:ba:45:f2:e2:68:f6:c0:63:
                    c4:7f:f5:f5:e3:3c:e7:3c:bc:77:5a:10:3b:fa:31:
                    42:63:f1:f9:98:0e:58:55:74:d2:f6:0d:5f:b5:1a:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DE:BC:A1:74:31:0C:7C:6E:5E:FE:4E:48:10:8B:8A:FA:12:90:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a0af65b-8118-3843-8460-680b46d61ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.25.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:39:03:36:9d:83:7b:53:ba:4a:8d:82:d4:2a:33:d8:48:9d:
         0b:c5:62:07:b9:45:24:66:2b:76:4b:c6:dd:43:49:59:66:84:
         44:52:d1:e6:df:d7:11:d3:19:38:24:34:46:8c:b9:af:c7:e2:
         b2:bd:43:d6:ca:97:00:5c:ea:f0:c6:e2:bf:5a:92:0c:e2:9e:
         10:ae:82:0a:76:f6:0f:3b:91:ed:ed:6f:d9:9e:75:2b:f4:7f:
         d2:79:58:58:7b:f8:76:57:3d:3f:4e:75:a5:97:d8:92:08:b7:
         ee:12:cf:8d:bd:6d:14:33:b6:3a:b7:b7:c5:b1:22:7e:95:4c:
         1f:bf:8d:71:5c:ae:5a:ff:46:8f:59:fe:95:66:04:28:53:bf:
         6d:3a:bf:03:a2:ce:62:f6:a8:2a:cc:7d:b6:00:70:4c:ed:5d:
         ce:f5:e1:2d:5a:19:ad:43:d6:a0:a1:3f:73:09:c2:0e:f2:79:
         3d:73:d3:75:8d:65:d8:43:95:69:cb:d6:25:8e:23:13:76:f8:
         01:d4:4c:0f:02:5f:ce:d7:43:14:08:51:0a:a0:c5:93:78:f7:
         6f:98:17:53:04:19:99:df:2d:92:d2:54:86:19:50:94:55:e8:
         af:d0:e6:fc:5c:30:c1:45:e0:ae:45:22:d5:da:d9:96:2e:0b:
         bf:90:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:49 2025 by rpki-client