Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/d32f3728-367e-3c1b-8f84-52028bc0ff73.roa
File:                     d32f3728-367e-3c1b-8f84-52028bc0ff73.roa (raw, json)
Hash identifier:          ux1PbzAhdvKFi+FQB6QQ/UQ0t2sp5CS9+X9jVWfpG00=
Subject key identifier:   79:55:F0:BC:F4:07:E4:E3:95:18:F3:93:62:5A:0D:67:C5:CC:82:C0
Certificate issuer:       /CN=0bed6185-186c-4da8-9253-7f61731aef25
Certificate serial:       010D0C9F4328584A268AA87D8B2A132BF74E6580
Authority key identifier: 40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/d32f3728-367e-3c1b-8f84-52028bc0ff73.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     11613
IP address blocks:        66.33.33.0/24 maxlen: 24
                          2602:fab3::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:a8:7d:8b:2a:13:2b:f7:4e:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bed6185-186c-4da8-9253-7f61731aef25
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=09f6530b-1fa3-4fcb-bd70-5709a3fc9414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:d6:7a:1b:a8:94:f6:bb:21:e7:5a:3a:d2:
                    a1:c6:2d:b5:04:df:d6:c5:6b:96:d1:56:bc:83:9d:
                    03:a0:c8:1c:9c:76:ea:ce:93:70:d6:b9:53:11:fb:
                    24:de:fa:eb:9f:f8:f3:e1:d8:a8:d6:2b:0f:01:8c:
                    30:e2:1d:50:f8:88:52:11:ef:15:bc:74:d5:15:f2:
                    c0:b6:d4:c0:9f:f1:87:65:dc:e3:c6:08:9e:6f:f6:
                    9b:14:5c:b4:19:64:78:32:fd:3f:14:42:2c:2f:dd:
                    9b:5a:9e:fa:9e:c6:45:d3:f7:84:c8:f3:b3:5c:87:
                    cb:71:3d:d9:fb:3e:20:86:dc:ff:d3:a7:70:33:e4:
                    fc:92:13:c6:50:a0:db:26:35:89:fb:e9:fb:66:13:
                    bd:a1:dc:b0:67:60:41:75:a2:89:fe:9d:32:f0:aa:
                    41:32:0d:05:79:83:ac:47:85:3a:a9:e3:01:f9:af:
                    5d:51:6e:3d:60:f0:ea:b3:cc:1b:8d:83:ad:3b:aa:
                    26:7b:8e:be:f3:d5:98:93:f8:69:d5:c7:18:a4:d4:
                    e7:7e:12:13:7c:d5:50:61:a1:d8:9c:a2:55:4a:9e:
                    a4:4c:f0:d2:7d:a4:ee:41:1a:01:4d:98:1f:e2:04:
                    fd:91:99:99:ef:39:4d:00:bf:94:60:5b:08:64:52:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:55:F0:BC:F4:07:E4:E3:95:18:F3:93:62:5A:0D:67:C5:CC:82:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/d32f3728-367e-3c1b-8f84-52028bc0ff73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl

            X509v3 Authority Key Identifier:
                keyid:40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.33.0/24
                IPv6:
                  2602:fab3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:68:ce:d5:6b:22:eb:79:1c:60:76:3b:78:8c:4d:46:91:dd:
         6a:c0:de:3e:dd:58:ac:a6:fb:92:85:3c:7e:7b:fc:7f:95:bb:
         ad:10:14:7e:1e:65:aa:14:a2:29:5a:c0:6e:5c:05:42:2b:25:
         b8:a6:6a:55:b1:1e:f9:09:19:ff:7b:da:0f:d3:e5:11:6e:a9:
         4c:59:db:c9:f6:91:8f:3f:1b:ed:51:30:9f:5a:9c:c0:79:b5:
         ac:13:fb:39:3c:87:dd:99:a8:5e:60:23:a3:83:cf:d1:97:5c:
         3b:83:e2:67:93:fa:57:d2:20:f1:15:01:4e:59:9b:25:c1:6f:
         87:48:ff:77:69:97:d1:9d:76:e6:fc:4f:e5:2b:ec:af:bf:59:
         fb:89:db:57:4b:68:c1:1d:1b:5f:97:f4:ac:38:ae:ff:85:16:
         fb:d4:b0:ea:09:75:6a:d4:1f:b2:23:59:bf:ac:95:79:6a:7b:
         1c:71:63:17:71:71:df:cf:00:b9:06:92:48:5d:0d:74:8a:11:
         40:7c:e3:07:0a:58:2a:35:19:7e:ae:f2:30:e1:a9:bf:74:5e:
         68:9b:cd:cd:3c:b0:b1:d4:40:a0:30:e3:11:61:e5:2d:a2:8e:
         b8:17:67:03:58:91:79:87:7a:a2:85:a3:a9:72:f4:fd:83:48:
         21:0a:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:45 2025 by rpki-client