Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/6c125428-8457-35eb-8562-1db9f7e74758.roa
File:                     6c125428-8457-35eb-8562-1db9f7e74758.roa (raw, json)
Hash identifier:          p+5w4nQ4Oc5Dfa3h3kgzknpwqxCyumKLmVH2tsJT8SU=
Subject key identifier:   C9:EC:4C:41:56:10:09:32:C3:F3:4C:94:89:F5:D6:F1:D3:E5:CD:72
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584AB220BE13D252C668D26D0980
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/6c125428-8457-35eb-8562-1db9f7e74758.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     6453
IP address blocks:        66.110.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:be:13:d2:52:c6:68:d2:6d:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=7f6a14cd-be81-4d30-b96b-f1cb85bd143a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:d2:6c:19:83:da:5c:d6:4e:1e:43:1d:bb:
                    36:92:28:34:57:84:cf:25:9c:2b:ec:d0:8c:b7:4e:
                    e4:71:d4:12:e8:ec:5b:c0:f0:30:f5:bb:b1:1f:48:
                    f8:e5:e5:85:bb:1e:48:85:7e:9c:c7:85:cd:fa:8b:
                    39:e5:a4:b4:02:41:01:d3:b0:36:11:88:dd:5c:c0:
                    c7:9e:e0:0c:10:0e:b7:2a:7d:6e:e9:25:89:66:b7:
                    78:d3:9f:2f:23:c0:bf:c4:bc:4a:4d:2d:aa:65:e3:
                    f2:0d:a4:21:cb:c0:e3:e3:1d:f2:4f:0c:f9:b5:cf:
                    1e:c8:c8:18:39:58:c9:fa:f5:95:7b:87:4d:5b:32:
                    47:8e:1e:0a:ae:8b:9d:b6:80:37:1c:70:83:d2:93:
                    a7:43:ea:c9:4e:da:34:bc:7c:08:4c:ac:4d:e9:ec:
                    b3:c8:d3:d1:99:85:d8:26:a7:09:ef:c9:48:a3:ae:
                    e0:33:c6:c7:8c:07:d7:4d:b8:49:29:1b:f6:fc:fc:
                    88:a1:be:f9:3c:82:f0:a4:c2:4e:3b:a3:9b:36:0d:
                    b9:d0:67:b1:b2:3c:0d:c0:ff:a5:6b:48:f5:7f:42:
                    38:f7:e0:a4:5d:31:19:f2:f7:87:3e:16:c8:cc:1c:
                    fe:70:1f:b2:58:54:81:ed:25:3c:51:d8:f9:dc:c9:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EC:4C:41:56:10:09:32:C3:F3:4C:94:89:F5:D6:F1:D3:E5:CD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/6c125428-8457-35eb-8562-1db9f7e74758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:4e:ac:64:d5:73:b7:6a:9c:b6:7d:a4:6e:69:40:6e:85:
         05:3e:33:bc:e1:2f:c3:14:be:38:17:88:27:13:f6:da:10:43:
         f2:07:d1:78:9a:aa:ed:af:28:65:73:19:21:ed:f2:2a:9a:0e:
         bd:71:0c:07:75:70:e6:e2:60:ec:14:97:d4:27:c6:4c:85:5a:
         3c:e6:a7:24:31:5a:93:7d:da:05:13:22:63:e3:1c:e4:6b:87:
         24:ee:51:97:bc:c2:c2:5b:43:f8:96:36:4e:31:16:59:25:53:
         9e:c1:6b:6e:f6:da:33:47:48:5a:12:55:64:ee:9f:50:80:c9:
         cd:5a:99:6b:24:1f:27:30:a8:8f:e8:7b:7e:55:9b:d2:40:10:
         c8:10:77:33:e4:6d:35:d9:d2:ec:64:f0:d0:4f:f1:af:71:bb:
         c6:61:23:94:1a:11:99:ef:a4:e9:05:03:ad:c5:1a:79:80:af:
         48:e0:e4:a8:f2:f9:c6:63:52:68:80:21:63:03:c5:23:0f:82:
         90:97:70:d4:95:e6:9d:25:6a:08:30:68:8f:e0:5e:6b:fd:00:
         66:f8:1a:39:ec:b5:f5:f2:3e:3a:20:60:45:5d:05:90:e3:8d:
         54:28:af:9f:f3:0d:c8:9a:84:b2:98:2e:64:f5:2f:0d:3f:49:
         00:1f:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:04:01 2025 by rpki-client