Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
File:                     5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa (raw, json)
Hash identifier:          DW/Pv46tqoDs+2jm1f3KxDz7Y6r2VSi737d3KUEpjRg=
Subject key identifier:   61:0F:DB:9C:F5:62:41:2D:B5:6A:84:31:8D:7C:93:76:7D:F8:A4:E6
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584ABD4B7D9FF946093A93129E80
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16509
IP address blocks:        66.22.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:7d:9f:f9:46:09:3a:93:12:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=69a83145-d33b-409b-bafc-9987f998b569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:1f:b6:7c:1b:34:8b:32:3f:f5:82:ab:e6:
                    a7:75:72:7b:7e:f3:c0:3c:25:ea:9e:71:b1:a7:a2:
                    b6:77:71:86:c0:c0:42:37:ef:f8:5e:9e:d3:ad:62:
                    9c:05:cf:e6:cb:9b:4f:90:9f:03:db:df:19:99:92:
                    2d:a7:eb:7d:22:64:15:ed:04:32:5a:f9:94:89:01:
                    a4:53:13:5c:dc:0d:39:35:cc:ee:43:ce:1e:54:a5:
                    9d:55:e6:c0:9b:c7:38:23:bc:54:5b:23:c7:64:e5:
                    e8:04:81:e5:92:45:db:7d:74:ec:42:0b:5f:bc:58:
                    e4:5e:07:60:ab:96:87:b5:d3:7b:3a:87:11:f7:39:
                    46:b5:88:0b:f3:5a:71:4e:57:14:69:f1:38:27:c7:
                    bd:53:73:fc:b9:9e:c9:43:fc:f4:3f:71:e3:6a:50:
                    64:75:24:24:be:fa:b3:e2:49:85:a2:6e:be:81:7f:
                    a1:f3:67:57:37:0f:98:50:d4:bf:23:69:2f:0d:22:
                    4f:bb:dd:48:96:25:b6:d1:26:f2:d1:2a:b1:32:5d:
                    67:8d:fb:df:2b:a5:ed:d3:71:1e:52:2b:1d:aa:b7:
                    90:49:ed:1a:85:91:12:4a:b6:39:a3:c8:3d:d5:9a:
                    9f:ed:a1:c7:17:ea:f6:62:c9:fe:9f:cc:22:59:b9:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0F:DB:9C:F5:62:41:2D:B5:6A:84:31:8D:7C:93:76:7D:F8:A4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5a4f6c8b-ca35-3056-98c3-f88b0b1b631f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e1:ee:65:b0:31:df:5f:68:43:f7:a6:26:b6:55:78:e6:af:
         79:bc:0e:31:ed:d0:12:ef:88:2d:a1:03:72:e6:72:a8:36:a3:
         f0:69:bb:69:de:1e:36:8b:bf:b5:95:38:ab:37:b9:85:b0:9e:
         7d:5b:90:71:85:c1:5a:1a:19:0b:b8:5d:b9:47:fc:22:e7:43:
         a7:7a:89:3f:6f:c9:b5:3a:c0:c5:39:8a:fb:b6:48:40:2a:d7:
         a6:bd:6b:d2:41:6e:0e:fc:c9:bd:da:ca:04:f7:20:d3:3a:d7:
         d0:8f:63:c5:3c:e1:f5:ce:6f:5d:b9:f0:01:7b:c2:cb:4d:9f:
         fe:d8:6f:a5:a4:5f:28:7b:c8:05:bc:23:22:10:09:02:97:d6:
         84:36:2e:05:b2:e7:fd:8e:eb:33:c8:0b:95:3c:ad:d7:de:e7:
         db:19:24:91:b9:8d:fd:ab:5b:11:87:7d:e0:ec:42:65:f6:cb:
         58:05:9a:f1:b6:f5:c0:12:32:92:cc:e0:a2:72:0c:4e:5a:ca:
         69:2d:47:04:82:61:56:3a:c1:c9:d4:b1:6d:42:43:06:5b:63:
         70:67:41:97:00:cf:fd:00:06:b6:ba:96:fc:8d:66:3c:40:a7:
         64:43:d9:39:37:61:3b:5c:45:fd:55:e4:b5:2a:09:0c:3a:c1:
         77:1b:77:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:43 2025 by rpki-client