Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
File:                     2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa (raw, json)
Hash identifier:          S325bPcYmK7h2hGOXqe7zr3jW5ookEHZJO9vjkf1vz4=
Subject key identifier:   70:45:3A:7D:2C:E0:0E:EB:20:54:C8:5F:2A:7A:19:C2:F0:66:3A:3C
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584AADF119007A8DAD4BF1199180
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     11260
IP address blocks:        66.103.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:19:00:7a:8d:ad:4b:f1:19:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=bcd3a391-be10-4859-be71-40028dff5204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:10:8f:eb:12:de:8c:f1:cd:0a:82:c6:65:
                    9a:6b:22:44:a1:e2:7f:b0:64:25:43:e0:fc:92:86:
                    61:40:fb:26:08:47:27:a7:bb:aa:76:7d:73:b5:ef:
                    3b:46:ab:53:ef:9c:bf:e2:6e:18:f6:b2:85:66:8f:
                    7e:3c:54:68:ff:6b:df:f6:11:06:ad:f4:9b:db:3d:
                    94:d5:c0:82:a1:89:9d:78:06:59:26:e8:b4:70:31:
                    65:68:54:61:32:66:ab:b4:5a:c9:f2:fd:a8:80:76:
                    71:81:2d:9d:a3:ee:dc:65:71:db:62:05:36:e5:44:
                    91:c9:02:0d:fb:cc:5c:57:44:2c:63:1d:ef:8e:ce:
                    16:15:79:61:5e:12:e9:3c:64:3d:d8:76:4b:37:82:
                    e8:ac:06:5d:08:15:ee:cc:df:f6:b2:bd:75:9e:de:
                    fa:09:be:6b:fc:99:40:99:ba:7f:5e:dc:29:d4:67:
                    ac:87:a3:5d:f1:2e:ea:e6:27:67:ee:26:4d:4b:06:
                    85:fa:f2:d5:72:51:10:9c:26:ca:6f:dc:8d:46:af:
                    ec:0e:43:f6:1f:55:53:f4:e3:60:35:5f:ed:3f:2b:
                    3d:ad:33:5e:3b:41:3b:c6:8a:97:f1:05:a7:a8:c9:
                    56:08:0d:34:c0:f5:f7:b0:ac:37:a4:a6:90:40:03:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:45:3A:7D:2C:E0:0E:EB:20:54:C8:5F:2A:7A:19:C2:F0:66:3A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:05:5f:84:0e:a8:b5:1d:72:93:48:ca:33:49:51:07:9d:2c:
         18:38:41:98:90:ed:c0:c3:fc:24:aa:c6:fe:18:ad:46:64:3e:
         d7:80:e1:b7:84:59:c9:e3:06:cc:b6:dc:78:ed:67:c5:b7:07:
         7f:20:d7:85:4e:82:9e:e4:a0:14:79:2f:66:c0:2e:40:5e:02:
         28:59:e0:66:4f:15:b0:05:08:bf:3b:44:64:26:8c:06:6c:a4:
         f0:8d:43:2b:8b:4d:8b:65:82:4e:ab:6f:8c:d0:ef:27:2b:92:
         cc:bb:df:0a:da:a5:98:da:0e:69:0b:d4:1a:aa:b8:ba:24:29:
         b1:c8:5d:dc:19:78:fd:ad:a3:99:50:f5:63:72:d9:03:6a:dd:
         6b:f7:5f:44:65:09:11:61:bf:7c:4c:fe:47:3e:bb:e2:89:ed:
         7e:db:66:ea:a2:db:d9:ca:99:34:61:0e:7d:0b:cd:9a:64:cf:
         92:c0:21:27:7c:39:6a:17:c1:98:31:18:37:79:96:46:16:af:
         a5:19:da:67:7b:ce:26:55:23:6a:b9:ea:27:78:71:ab:0e:6d:
         2e:8f:c2:d5:f1:57:f5:10:0b:8b:93:54:31:7e:c9:f8:f1:fe:
         b4:1e:12:4f:c9:08:9c:a9:48:9c:62:db:a5:6d:ff:dc:ef:df:
         fc:67:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:17:14 2025 by rpki-client