Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa
File:                     ba09dfad-31a3-31a1-8d98-b0cec5949829.roa (raw, json)
Hash identifier:          pmxm2ndNZowoVcJnb4eJ1AzbLqGQorzBWCqam6SxkEc=
Subject key identifier:   7B:52:B5:2F:4A:25:B2:E8:89:3D:5E:D9:34:2C:32:AF:DC:8A:A0:EC
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584A1895407079E9252AF032E338
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     30041
IP address blocks:        66.218.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:40:70:79:e9:25:2a:f0:32:e3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=0d10d7ab-8493-43c1-ad92-4f5853675306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:f0:67:4e:49:53:7e:af:55:36:8e:58:c0:
                    21:b3:e7:4e:9e:b3:43:4d:95:2c:6c:97:dc:00:d4:
                    f7:9b:fb:49:6d:55:9b:c9:19:f2:02:66:87:c5:a0:
                    a3:21:ad:67:3e:ac:c9:a5:ee:56:7c:3f:5c:2d:18:
                    e2:b9:44:2b:29:69:53:43:28:e2:ee:33:9f:3f:a0:
                    26:aa:ca:79:45:0c:e0:75:84:15:ee:3d:ef:04:6d:
                    a7:f0:33:7b:f3:a4:bd:70:7e:8f:fd:44:67:18:fb:
                    73:4b:33:b2:ec:5b:9f:d2:bc:fc:97:19:04:0b:69:
                    60:8a:2a:59:ac:a9:a5:66:05:05:85:27:f9:77:ed:
                    d7:fa:d9:90:2c:86:ec:84:84:99:f8:06:b6:73:d1:
                    c2:6c:79:cb:25:e3:b4:e6:d9:cd:62:93:11:2e:34:
                    54:dd:0b:b7:0b:6e:0a:54:00:23:de:60:e5:b9:d0:
                    9e:2b:df:bf:ac:d9:36:fb:c6:0a:af:84:1f:40:b9:
                    19:a7:86:35:b7:de:a1:03:c5:f5:7d:66:d5:66:87:
                    51:19:10:40:55:fe:23:41:b6:c7:64:b5:f7:32:20:
                    57:21:f9:98:57:c3:6d:8d:6b:e9:52:67:0b:73:dd:
                    87:0d:4f:d1:44:f4:0a:08:f5:b2:59:ea:78:cb:52:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:B5:2F:4A:25:B2:E8:89:3D:5E:D9:34:2C:32:AF:DC:8A:A0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:6d:41:06:1f:2f:a2:ac:44:b9:53:f4:95:11:56:b1:48:
         6d:98:a6:d0:24:f1:8c:4f:dc:24:02:8d:e8:0a:f8:cf:09:4e:
         2f:25:bd:7b:90:c9:81:d3:34:d1:bd:c5:f1:15:41:9c:03:d1:
         77:1c:41:96:79:40:ab:44:27:54:cc:57:f5:14:9f:09:68:19:
         01:8d:d9:ed:d0:d6:b1:95:96:4a:c2:36:6d:37:28:a7:d2:32:
         31:2f:89:b3:fa:a5:35:4b:65:ce:e6:4b:bb:c1:36:16:1f:91:
         1c:75:24:ed:b2:d5:71:bc:25:b0:6b:95:0c:03:22:1d:b3:13:
         fb:73:72:89:06:d6:49:66:3b:3f:38:a9:e9:08:ee:e2:17:9b:
         38:9f:1a:15:f5:9a:1f:7f:49:69:29:78:42:96:f6:97:1f:cf:
         3c:40:b4:36:34:fd:1a:5e:0c:7e:ed:82:28:2e:be:da:0d:62:
         40:94:44:27:06:e4:b8:f1:d0:5a:79:ca:df:7d:38:ea:e9:28:
         1d:da:d8:54:35:0a:08:3c:a4:0b:ce:c3:bd:c2:5e:ff:4b:25:
         0b:94:e1:e7:bb:f6:37:8e:d3:73:f1:cf:80:25:05:e1:08:cd:
         b3:e8:fd:96:0d:39:23:d8:2a:60:50:29:36:9f:65:df:0d:b0:
         8c:d3:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:51:08 2025 by rpki-client