Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa
File:                     e93b652e-f4e2-3292-b364-76a41c761a27.roa (raw, json)
Hash identifier:          F6uGy7AEkKWVEHND8ZcY3z61HaAXT2OHIsN8qZuMg4Y=
Subject key identifier:   BF:5B:4F:B9:78:B9:28:A2:64:27:92:EF:C2:DA:A5:0E:BC:81:72:E4
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584AB220BDE7E1EDBF5C11D78480
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     6453
IP address blocks:        66.198.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:bd:e7:e1:ed:bf:5c:11:d7:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=b51fcfef-8b25-40ac-bb55-9d2d5488b919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:36:f8:2a:ec:2f:e7:59:56:8e:db:be:cd:
                    46:8d:ed:53:28:a3:8a:a5:77:55:24:8a:9e:40:06:
                    7d:d2:ad:75:17:42:3a:d8:0b:94:c8:26:e3:24:a7:
                    80:3c:13:74:d3:b5:ad:85:60:4c:93:63:5f:ce:4f:
                    e9:72:82:0f:d9:e4:a7:34:02:4a:89:8c:26:55:c1:
                    8b:6b:45:6e:97:cc:a3:63:28:3a:e4:56:bb:73:27:
                    b9:51:4a:88:1f:cc:9c:41:15:a6:46:5d:ac:50:c6:
                    43:02:ee:2c:aa:fb:53:e1:bb:a3:0e:e4:79:32:3c:
                    3b:48:8a:5e:d3:68:b1:9a:9f:3e:9d:3e:9a:a5:9e:
                    78:01:49:e6:1b:3f:61:4c:62:58:fc:d4:8f:63:86:
                    80:06:f6:f6:a0:d3:6f:4b:cd:ec:f4:80:fe:12:88:
                    63:47:e4:eb:0c:5e:8b:36:48:89:96:88:50:d5:3b:
                    68:cc:37:42:f2:40:ac:9a:07:5d:1d:3d:48:d6:6d:
                    01:7e:b8:bc:5f:fc:47:1c:ba:b3:10:81:c2:06:20:
                    cb:06:84:0e:8c:3f:72:95:25:08:43:cb:21:56:40:
                    1d:ca:ad:f6:6f:37:17:8e:ac:bb:96:12:ae:8b:22:
                    80:40:2c:12:3c:7a:4f:36:47:bc:89:20:67:d5:5d:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:4F:B9:78:B9:28:A2:64:27:92:EF:C2:DA:A5:0E:BC:81:72:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e93b652e-f4e2-3292-b364-76a41c761a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:fe:fb:49:90:0c:6f:fc:3d:9e:ab:ad:3d:f2:4d:7c:8a:
         78:e4:0d:c1:9f:3e:21:e7:08:5f:fd:c8:07:ed:91:8b:54:f8:
         2f:db:de:e1:75:09:a7:35:f1:9b:a1:bb:73:ea:4b:3c:d4:df:
         86:1d:3d:9e:8f:39:28:d6:bf:06:65:05:64:42:76:bc:59:9b:
         07:89:45:ef:4d:70:b7:b5:cb:d9:ca:d1:ed:5a:a2:07:f1:7e:
         8e:b9:35:17:dd:8c:e9:e0:2e:a3:26:9c:2a:64:ba:c0:c8:1f:
         13:61:99:0b:6b:f0:26:38:f9:b6:2d:8c:05:8e:1f:23:ad:79:
         a0:59:91:57:8f:0c:51:73:b7:ca:4b:99:0d:ec:10:a0:5b:b5:
         db:3b:e8:11:9a:ef:be:bd:5c:e0:13:fd:ae:76:a5:ca:1f:b1:
         8a:c4:5e:ec:e7:be:22:d6:85:86:c4:a4:f7:c5:9c:30:24:96:
         78:b1:f7:99:55:a3:a8:6e:9e:e4:20:3c:48:d2:cd:2a:06:12:
         e6:03:b0:7c:17:65:4e:5c:de:82:1a:67:c8:c7:5b:ea:37:b0:
         61:cd:30:d8:17:6b:3d:6d:fb:b9:3f:3c:b0:27:b4:f7:26:be:
         a3:f5:eb:f5:b9:a4:a6:fb:b7:79:66:84:66:76:79:75:79:84:
         bb:01:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:05 2025 by rpki-client