Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
File:                     43af431e-7b03-3ec6-be32-6f902fc55c65.roa (raw, json)
Hash identifier:          6cHbyWyhpxqLXro1sTSEmhU8IVZ4VkwewgjqIeuZjgk=
Subject key identifier:   1E:6A:A5:5D:A8:2A:0A:BB:6F:26:FB:52:89:43:60:8A:32:1C:83:DD
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584A9BCB6A38A1EF050600C2C400
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     10865
IP address blocks:        66.129.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6a:38:a1:ef:05:06:00:c2:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=60923eec-11c2-4302-a234-5a6451bd66bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:be:dc:ab:d0:66:7d:4e:b9:6c:85:c1:a9:
                    47:48:9a:fe:29:b9:cd:6d:cf:03:32:38:6c:aa:75:
                    93:7f:05:36:84:52:bd:55:ad:ee:7f:89:8e:6f:23:
                    c4:bc:03:70:fc:fd:4a:d3:f6:ed:21:0a:a9:6b:ce:
                    ff:c7:2c:14:ed:3a:c1:27:2a:0f:a0:27:30:8c:4b:
                    d5:b5:f3:62:43:83:d6:01:1c:a4:28:a3:f9:7e:29:
                    b3:fe:a7:4f:fd:30:20:95:0d:f8:a8:a6:ed:b7:4a:
                    72:8c:d1:2c:f3:5a:31:d1:ad:92:ad:ae:2b:e8:94:
                    43:f2:df:b9:33:d7:4e:4d:c8:50:21:b2:27:7e:33:
                    93:5a:2e:1a:9c:41:db:50:14:44:15:9c:d9:72:0c:
                    92:14:6d:fa:58:d3:bf:ee:79:bd:60:47:aa:b6:7b:
                    ff:1e:5f:ba:da:34:e9:d2:6d:22:b3:8c:46:5a:e6:
                    7c:ec:f5:0c:da:d5:3e:68:a0:1a:c8:46:6d:ab:2a:
                    e7:c2:3e:b9:ee:f3:8d:cc:34:17:29:76:21:7b:f2:
                    13:af:56:d1:14:4b:61:97:bf:da:48:f6:8a:8b:6e:
                    5b:b5:f3:75:37:5e:ef:38:d6:77:69:60:74:3a:04:
                    64:8b:3a:30:15:09:a0:12:f0:21:f3:2f:b6:34:55:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6A:A5:5D:A8:2A:0A:BB:6F:26:FB:52:89:43:60:8A:32:1C:83:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a5:9a:3e:14:a4:86:80:60:3f:1a:37:a4:33:69:0c:50:d8:
         8c:3f:fb:bc:8f:47:3e:e4:70:13:96:d8:20:65:ec:2f:54:8e:
         65:9d:aa:45:6a:f7:74:60:68:73:e4:5d:5f:af:5b:55:1e:5c:
         f7:c7:a0:01:76:f9:f5:15:a3:8d:03:e2:90:77:b5:aa:ce:c7:
         c6:5e:54:12:41:93:0d:bc:34:96:34:b5:5f:c6:cb:ec:ff:af:
         10:67:9e:3c:7c:d8:eb:a6:64:0c:60:78:d3:f8:18:bf:ac:9e:
         95:95:07:c0:6d:fb:88:6c:32:9a:31:d8:46:f6:18:18:0e:5d:
         3b:3d:a7:a5:fe:7f:10:56:ae:82:e8:2e:2f:be:2a:3d:ab:41:
         29:0c:4f:2c:46:06:39:33:e9:15:d1:1f:24:90:8f:ab:e8:b5:
         cb:3c:6f:54:9a:61:02:c3:eb:e4:5d:34:ec:b5:df:93:4a:c7:
         80:bf:28:ed:9c:30:7f:8a:72:6a:75:b7:6c:19:e0:fd:26:86:
         e7:d0:22:c8:7f:69:fa:84:e8:87:c1:58:46:8c:04:56:a9:db:
         4d:ae:ee:f2:53:c5:95:a6:05:bc:5c:19:3b:78:62:21:90:6b:
         54:6a:53:82:42:7a:ed:df:cf:ad:a5:56:fb:12:49:c1:ca:99:
         9a:6a:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:08 2025 by rpki-client