Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/53f30093-f429-355b-bb90-dfe3af2203bf.roa
File:                     53f30093-f429-355b-bb90-dfe3af2203bf.roa (raw, json)
Hash identifier:          85J1lYbMFWDRvyhfHhwPd0e0heCSu6KLgNB4E5VEs44=
Subject key identifier:   B3:EC:65:F5:E5:BF:31:59:F9:D5:DB:0B:5F:63:20:D5:77:1B:29:6F
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F4328584AAE26809C79A2E1C60C515AC0
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/53f30093-f429-355b-bb90-dfe3af2203bf.roa
Signing time:             Tue 29 Jul 2025 14:49:00 +0000
ROA not before:           Tue 29 Jul 2025 14:49:00 +0000
ROA not after:            Mon 27 Oct 2025 14:49:00 +0000
asID:                     26677
IP address blocks:        66.97.27.128/27 maxlen: 27
                          66.97.27.160/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:26:80:9c:79:a2:e1:c6:0c:51:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Jul 29 14:49:00 2025 GMT
            Not After : Oct 27 14:49:00 2025 GMT
        Subject: CN=3c7d393e-97d4-4666-b99c-4b2b354ea39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:39:2d:46:4a:99:d5:af:a2:f3:14:c3:d5:
                    b8:11:35:3a:af:06:a4:25:fb:ca:69:96:91:3b:99:
                    33:e4:33:f3:0a:33:5b:73:dc:80:62:ca:a5:51:3d:
                    c5:93:a9:c3:10:ac:7e:4c:f5:27:48:8f:c0:f8:e8:
                    8c:9d:a5:86:21:f6:4b:d0:e7:82:ee:79:54:a1:cb:
                    c4:0f:3f:b7:41:dd:3e:7e:34:7e:c4:53:69:89:2e:
                    e7:b0:1a:f7:f2:7f:f9:7d:0d:fb:fc:ed:e9:a8:79:
                    31:c1:77:39:95:44:bb:07:70:38:ed:42:f7:66:25:
                    e0:32:ac:01:91:a2:33:4a:54:2c:05:6c:03:81:b3:
                    42:96:72:de:8a:67:47:8d:3c:62:a6:c1:89:5a:d8:
                    c9:5e:48:aa:d3:97:65:4a:49:f9:d4:90:72:0a:2c:
                    b2:ec:06:a8:22:37:19:87:a6:b0:e9:db:60:25:c5:
                    88:ef:38:09:98:40:9b:07:03:36:45:6b:62:c0:f1:
                    c8:df:aa:3b:6c:4e:1c:e4:77:0c:77:a0:aa:d0:85:
                    eb:e5:df:34:25:da:0d:fd:35:f5:61:0c:06:1b:9e:
                    10:1d:e4:07:cc:68:66:c1:3f:ca:77:9d:ec:44:5f:
                    d9:8f:ce:68:83:0b:a5:2e:6d:a5:84:93:1a:39:51:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:65:F5:E5:BF:31:59:F9:D5:DB:0B:5F:63:20:D5:77:1B:29:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/53f30093-f429-355b-bb90-dfe3af2203bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.27.128-66.97.27.167

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:e5:c4:c9:f6:55:95:7c:6d:c8:64:82:69:7a:3d:e6:70:
         86:aa:f8:86:fd:b1:6a:a1:e5:f4:fb:63:4c:e0:30:d0:79:28:
         52:fd:50:90:8f:60:b3:91:dd:72:42:a4:90:41:a7:43:92:cd:
         d5:1e:8b:dc:61:ec:1e:69:42:34:a8:c3:bc:68:96:9d:9f:2e:
         f2:a1:c8:50:fd:76:5a:e0:23:41:80:31:8d:d8:5f:18:f9:af:
         61:09:8e:cb:5f:a4:be:ff:43:32:bf:78:bb:b5:dd:67:ed:7f:
         97:58:7b:46:01:4d:dc:5d:ca:e4:5d:95:ac:9f:77:aa:03:b1:
         77:7e:57:4c:80:4d:52:5b:c9:bd:94:a0:ed:7a:82:4f:5d:bf:
         4f:f2:82:dc:7f:0d:64:f9:39:d5:b4:27:f1:ef:2a:87:10:2b:
         46:d5:32:a6:91:c8:c1:d4:11:cb:cf:d0:24:dd:7f:1d:cb:95:
         49:d2:b8:8f:56:4f:54:a8:22:ea:9b:2d:b8:38:0c:43:16:04:
         92:c0:2a:bf:6f:6a:7d:eb:6b:af:05:fb:19:12:eb:df:96:f5:
         83:28:e9:61:0b:0b:1a:c8:cb:59:34:f2:a1:81:cb:c5:b0:74:
         56:06:03:df:8f:b2:bd:b4:cb:61:19:cc:5b:39:8f:ba:47:08:
         3b:05:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:09 2025 by rpki-client