Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
File:                     7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa (raw, json)
Hash identifier:          3NSzqs/0q2r7Yyf9pX/VJB/3tQ5NDQvLNUpnzH27P08=
Subject key identifier:   5D:73:26:A7:18:A4:BD:D6:77:5B:5F:EC:5F:6A:F7:77:D8:41:BE:94
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584A2D858B07D16828B4D9BC29A0
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     12684
IP address blocks:        66.119.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8b:07:d1:68:28:b4:d9:bc:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=0699d3a1-9023-41fd-ad34-aa6fc81b38ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:74:cc:2f:f2:81:59:8d:f1:94:45:15:53:
                    a3:6b:e0:d3:cb:e7:f1:8a:30:04:e3:9e:6a:a6:f6:
                    57:6b:26:67:4b:a2:11:0a:a8:72:98:34:43:8b:1e:
                    ad:66:bb:b3:85:9f:12:b2:13:dc:58:44:2c:2d:d4:
                    01:ff:81:91:57:31:c6:64:86:17:6b:46:0c:be:e2:
                    92:15:f7:0c:99:14:e9:04:6f:a2:73:79:bd:f4:22:
                    0a:d4:e4:7b:25:6d:44:33:f9:10:e2:62:ef:4a:c7:
                    90:bd:f9:8b:f5:a2:67:2e:67:d9:90:54:7c:1f:c6:
                    58:01:fc:bb:9e:e7:b3:0e:d6:74:81:5d:21:fe:41:
                    06:2b:67:61:13:5d:fa:2a:f0:03:a7:6e:8d:a0:87:
                    f3:d8:52:e6:62:9f:e2:57:a4:87:bb:17:ac:34:e2:
                    cc:b5:8a:ce:01:6e:1b:2a:1f:13:67:05:e9:e8:63:
                    f7:9d:0f:ac:a7:ae:f1:cf:b1:db:6b:40:ab:33:dc:
                    fa:77:2a:8d:64:0d:c5:62:4c:14:5c:a4:b5:a2:04:
                    f4:87:44:50:68:ee:88:20:6f:c9:85:73:9f:14:b1:
                    70:4d:a5:98:36:5b:db:5d:82:db:84:15:15:88:11:
                    6c:a9:16:27:c0:6a:69:74:7d:43:04:2d:a8:d6:f6:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:73:26:A7:18:A4:BD:D6:77:5B:5F:EC:5F:6A:F7:77:D8:41:BE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:41:f0:e2:a2:32:ba:92:2a:f3:73:ef:66:89:d5:e4:a3:
         1b:bc:36:96:cb:65:92:77:2b:8e:fc:f1:f8:1a:21:19:a0:0d:
         ea:03:a2:d0:dc:1d:85:e6:66:90:7b:01:24:72:9c:c6:4b:ed:
         0a:0d:0e:8d:5f:c8:56:cb:3b:99:d8:14:ae:3a:8c:8c:d4:11:
         67:e1:02:86:2c:13:14:47:4a:47:78:8a:4b:c4:d4:0c:89:14:
         99:be:85:97:26:75:3c:e8:89:b3:9f:b3:0f:68:a6:7a:2e:87:
         59:8b:72:83:d0:1f:ea:e5:2d:90:28:4f:83:9e:0b:d7:6d:1c:
         7c:0f:b4:17:8c:37:c0:fa:7d:07:16:72:20:b4:7c:94:67:fe:
         48:40:7b:73:56:c0:41:e7:25:e4:21:2f:ed:94:81:97:a8:20:
         10:53:cb:0f:98:cf:78:9c:f4:76:57:e4:43:88:00:b3:3e:de:
         e4:20:41:9b:aa:d6:ea:c1:6b:37:89:52:30:cc:11:a5:69:80:
         1d:f8:9e:9f:c7:22:99:98:f7:3a:f1:ea:58:e0:0b:9e:2c:ab:
         39:c3:72:e9:c0:3a:2c:a2:e1:1f:76:11:01:13:cf:05:37:45:
         a2:50:16:fb:e7:e5:6c:00:4f:ac:b0:4f:24:4a:41:47:64:e0:
         70:a9:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:02 2025 by rpki-client