Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa
File:                     e38b3713-7424-3f1d-a9e9-72d69242e5df.roa (raw, json)
Hash identifier:          4Dy3pIE0oNC5HD8I/sgohM6oMhvxlmCWyzhpAZhn2ps=
Subject key identifier:   DD:55:06:EB:FF:28:2A:FF:5F:26:2B:33:22:95:36:6A:A2:38:82:2E
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584AB4EB77BF798A89FEA397F910
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     8560
IP address blocks:        66.179.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:77:bf:79:8a:89:fe:a3:97:f9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4cbd1923-d59e-49b2-bb51-d5f07bd1613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:70:37:2b:f3:62:a5:55:7e:59:b7:03:f2:
                    ad:41:7c:c9:fa:20:b5:08:ff:37:14:25:60:9d:d4:
                    c6:6e:81:b1:0c:4a:e6:2b:8b:16:68:11:ba:ce:58:
                    97:16:42:4a:44:9e:f6:f0:0e:74:6b:d9:a1:72:0b:
                    40:9f:34:ce:08:7c:9e:b3:62:d0:ea:96:b0:89:01:
                    b2:3d:c0:e2:4f:ab:09:f6:96:77:47:9a:e4:dd:45:
                    7e:70:fd:3b:1a:50:62:4e:2a:8c:7d:4a:15:ad:70:
                    fb:9a:71:27:46:25:2b:a2:85:70:dd:00:fc:2b:b5:
                    bb:b6:d9:2c:14:d1:33:eb:7c:98:b5:7d:e9:0d:b9:
                    6c:6d:02:65:0b:cf:c0:6e:e5:ba:6b:50:4b:21:24:
                    e7:ea:c0:c4:e9:67:00:e1:60:4a:cb:49:25:bc:f6:
                    91:ac:88:0f:d2:32:7d:25:e8:4f:2f:c4:fa:dd:bd:
                    9f:df:e7:ea:6d:1b:89:8b:39:ec:7f:ba:00:5c:ea:
                    6d:48:b4:02:23:67:6a:ab:59:ba:f4:63:23:14:03:
                    d0:4b:98:f7:22:a9:41:90:f7:6e:2b:e9:6f:3c:fc:
                    1f:a3:76:6a:4b:99:12:7a:67:d4:47:aa:bf:6c:4e:
                    2f:a2:be:bc:90:f8:ec:5a:c8:1a:65:9f:52:6e:d9:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:55:06:EB:FF:28:2A:FF:5F:26:2B:33:22:95:36:6A:A2:38:82:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:54:11:8d:7b:66:1d:a1:0c:95:7e:f7:eb:c1:01:5f:8e:9e:
         0b:7b:14:49:ae:85:8b:42:84:1e:c9:94:a4:1b:67:37:d8:78:
         cb:38:63:c5:e8:a1:3d:0d:f7:0c:65:83:8e:ea:2d:0c:cc:c9:
         08:51:86:a7:3e:62:de:97:d3:f6:b9:d6:72:57:37:42:8e:3e:
         02:81:0d:88:49:5b:f0:8b:98:d8:c1:96:02:cd:fb:d0:6a:3b:
         1f:8d:9a:b2:77:f5:34:43:a5:63:0c:a9:90:5a:be:e3:eb:6c:
         1b:da:90:09:a6:17:47:c6:87:42:1a:37:05:da:d7:6a:73:6f:
         bf:60:bc:b1:9b:cf:aa:63:61:61:74:b3:21:01:91:a4:3a:ec:
         02:7c:0c:d0:da:66:3c:ea:3c:42:ad:28:8c:36:69:d3:f2:06:
         e1:88:b6:10:16:3e:b3:15:73:8c:76:d4:a7:7b:ed:dd:46:38:
         35:e3:43:c6:32:2c:0e:79:06:1a:c9:0e:f0:82:54:07:fa:59:
         a9:37:59:b7:59:bd:21:58:ba:72:b6:cb:58:8c:fb:bc:c1:49:
         13:b6:9d:cb:4f:72:71:f1:03:24:2e:5e:ac:09:e1:6a:03:68:
         cb:74:e6:95:77:d0:07:b5:f0:45:83:36:65:b9:be:7d:ae:fc:
         eb:76:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:01 2025 by rpki-client