Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596db589-466c-3bfd-a364-0325795ebac6.roa
File:                     596db589-466c-3bfd-a364-0325795ebac6.roa (raw, json)
Hash identifier:          6hCg0CaMc5pLYaJlo4vL4jNWUrT50+Gpt3h9JYqx9uc=
Subject key identifier:   F2:AA:36:CB:9E:C8:A3:29:18:8D:4A:72:34:00:61:6B:CA:EF:19:BD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16180CC69664C55E4C77F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596db589-466c-3bfd-a364-0325795ebac6.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        66.61.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:80:cc:69:66:4c:55:e4:c7:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d3dc7819-c9a1-4820-b7bc-bdf5fa5d7357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:07:70:a1:fb:d8:39:88:48:76:63:cd:3c:b0:
                    c1:85:77:37:76:c1:07:6b:ce:d4:98:bb:dd:13:0b:
                    f9:c5:c9:40:e1:9f:4b:87:47:5e:af:18:49:01:76:
                    58:5d:03:7a:29:4e:7e:52:04:4f:7f:df:65:49:d0:
                    35:07:ad:54:65:b7:a5:03:f5:58:5f:48:7b:8f:e1:
                    37:7e:3c:63:81:71:ec:00:ce:0a:21:ed:26:c2:d9:
                    2d:f5:78:3a:8d:88:79:3b:a7:a7:f9:64:e6:3a:ef:
                    99:ba:be:9b:3d:7d:dc:1e:38:e8:ed:33:99:88:ef:
                    d3:ab:d3:38:7e:fe:d2:60:ed:e6:3f:a3:8e:6b:86:
                    d6:1c:85:ba:e1:ff:73:ea:51:53:f8:0e:14:80:32:
                    5f:5a:e5:75:31:15:ff:0a:a7:76:e9:80:95:44:6c:
                    33:94:cd:c2:e4:af:16:62:ad:f5:d9:4a:c0:82:2c:
                    06:7a:38:d3:46:04:4d:cb:98:a5:a3:e8:4f:13:46:
                    c6:3c:f4:67:8f:33:10:10:01:c2:f7:8c:f3:65:ae:
                    d0:ea:d6:82:0f:bb:0f:16:1f:50:fe:65:b6:d5:ed:
                    33:e6:9f:94:d5:9b:c6:9d:2b:ee:63:64:12:3e:bd:
                    c7:9a:2b:be:70:9b:09:f5:67:4d:93:b4:96:8b:39:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:36:CB:9E:C8:A3:29:18:8D:4A:72:34:00:61:6B:CA:EF:19:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596db589-466c-3bfd-a364-0325795ebac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:06:5a:07:7e:e7:f7:0c:93:71:96:f0:78:ce:f7:fb:c5:b1:
         be:c8:25:ca:c4:c2:b1:9f:13:d6:0a:60:56:23:5f:db:83:77:
         fa:83:41:7f:7c:57:a4:f6:e1:48:7d:99:1f:31:48:dc:73:b6:
         4f:da:a4:8d:ab:27:8d:63:da:74:cb:02:99:78:0b:8a:d5:0b:
         a2:86:15:e6:5c:a8:46:d2:ae:93:34:2a:26:9e:86:29:38:59:
         80:e5:56:ba:ad:63:b7:ce:b5:99:76:c8:80:0e:6a:81:35:70:
         b0:cf:39:87:0b:86:f0:ef:d7:75:ad:58:36:92:18:63:19:cf:
         21:ae:ba:2d:4d:07:ee:48:af:0e:c9:29:6f:e7:20:7a:f1:83:
         c0:cd:ac:d4:4a:aa:da:0d:66:a0:ca:5e:f3:f6:a3:56:e9:c0:
         d1:8c:ea:39:05:98:b9:52:b7:9c:0b:00:18:aa:2d:05:08:94:
         15:2c:59:f9:73:f5:ec:f6:45:09:7c:ae:19:0a:ef:18:85:4d:
         c4:ef:c0:65:00:7f:09:ff:d2:8a:13:2f:6c:86:42:c6:e1:d0:
         70:00:da:0f:d2:fe:88:60:11:97:d9:1a:7f:02:a5:20:1e:27:
         b9:1d:7a:84:7f:65:9f:d3:e2:aa:3a:da:a3:be:4a:1a:e5:bf:
         67:22:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:02 2025 by rpki-client