Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/bcba8930-3882-3d8c-b129-0e040d76a5e5.roa
File:                     bcba8930-3882-3d8c-b129-0e040d76a5e5.roa (raw, json)
Hash identifier:          /BMf9UaQ0CVQg1xKx5i4h+x8wv/zq/++UqZPYslMyYg=
Subject key identifier:   29:1D:E4:35:76:B2:06:E9:C1:56:4B:E3:90:89:1D:BE:D0:FB:27:12
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584A87129E45A86CE12AAD3BB180
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/bcba8930-3882-3d8c-b129-0e040d76a5e5.roa
Signing time:             Tue 15 Jul 2025 14:52:24 +0000
ROA not before:           Tue 15 Jul 2025 14:52:24 +0000
ROA not after:            Mon 13 Oct 2025 14:52:24 +0000
asID:                     1403
IP address blocks:        66.254.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:12:9e:45:a8:6c:e1:2a:ad:3b:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul 15 14:52:24 2025 GMT
            Not After : Oct 13 14:52:24 2025 GMT
        Subject: CN=a50aa027-532f-4140-bcff-493c133313c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:ce:4f:41:e3:32:35:d0:50:46:1d:bb:21:
                    78:77:12:89:53:9d:be:0b:70:be:b3:59:16:16:07:
                    63:f0:28:5e:11:05:05:d3:ae:ce:e6:ce:19:d0:09:
                    f1:36:7c:59:6c:ee:3e:59:c8:52:ac:dc:90:e6:ff:
                    35:e8:20:b9:f5:30:89:d8:af:a6:4e:5e:0f:ff:7c:
                    10:ab:25:ff:83:f0:6d:f8:08:af:61:12:74:5d:37:
                    4c:79:aa:82:20:5a:d5:63:58:e0:30:fd:84:30:f3:
                    50:d1:eb:42:e6:94:48:9c:a1:15:bf:e5:2c:e5:9e:
                    d7:83:dc:26:b2:5f:73:07:0e:a1:39:e3:68:6d:71:
                    39:bd:44:9c:af:38:99:8b:e5:4b:42:0c:1e:33:15:
                    2e:71:2e:af:0b:12:3f:4b:66:90:3f:51:a8:30:f2:
                    44:9e:96:83:e8:3d:b0:19:44:36:1f:b8:55:84:d4:
                    3b:6d:ff:45:5b:45:1e:e8:c9:94:aa:e9:de:64:e3:
                    85:e4:a6:2a:34:69:f9:b4:55:be:a7:bd:79:9e:45:
                    bf:c0:d3:80:73:cb:f2:d3:08:cd:a6:00:c9:e0:0e:
                    0e:96:d7:da:06:d8:50:99:8e:61:99:ca:7e:b2:c7:
                    1d:dc:a9:45:b9:50:f1:7a:a2:ca:2e:db:1d:cc:7a:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1D:E4:35:76:B2:06:E9:C1:56:4B:E3:90:89:1D:BE:D0:FB:27:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/bcba8930-3882-3d8c-b129-0e040d76a5e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:76:c5:a1:af:79:51:95:03:8f:35:d2:3c:69:37:a8:2f:
         60:08:47:e1:87:36:e3:84:de:5d:0c:04:ea:db:ca:8e:ec:35:
         78:a3:54:86:d1:fe:74:37:e9:7f:ef:e6:e9:b6:ff:e4:a6:98:
         f3:88:19:ff:9e:66:ac:a0:7f:e7:3a:18:46:89:1c:87:35:26:
         94:00:45:ea:7f:04:75:27:c5:93:c8:9a:8a:0c:d9:72:96:d3:
         17:c6:9d:12:bb:0e:81:63:79:55:d1:32:60:c2:65:d3:94:29:
         6a:d0:d0:b3:49:d1:1d:69:82:6a:1a:51:00:8e:91:8b:25:9b:
         bc:8a:81:c0:36:65:f4:11:d3:30:38:1f:30:f7:5a:29:8a:9a:
         79:57:2d:ed:f0:83:28:14:17:cd:23:6b:f4:d6:65:72:d7:be:
         69:af:2a:f0:24:ef:9e:15:7b:3c:7a:de:c9:e9:64:9f:44:09:
         b4:22:47:47:31:2a:71:e6:d0:e8:4f:fe:06:70:00:11:67:1c:
         5a:a8:58:e9:36:5e:f6:ae:11:e0:18:d0:a0:0c:ba:3f:29:61:
         55:b5:30:88:ee:88:bb:90:9b:56:36:56:1b:24:c1:98:b0:55:
         24:e7:a2:db:38:fe:4c:f2:5c:67:83:bb:3a:fd:07:4a:ab:b3:
         c0:31:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:02 2025 by rpki-client