Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa
File:                     0fbc7760-8d2d-3877-bbbe-559392540a69.roa (raw, json)
Hash identifier:          OlrTuKVqJCcdUsqUsuEMIu97aTl2AUCj3MfqldOg0WE=
Subject key identifier:   74:98:28:B3:41:0C:BF:F3:0C:3D:BF:1E:27:BE:FA:6F:9B:0A:27:C7
Certificate issuer:       /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial:       010D0C9F43285849CE9A5A116E50CD3508464180
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     63290
IP address blocks:        66.245.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5a:11:6e:50:cd:35:08:46:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=968f6769-b10e-4c08-8697-fdc7c2e73b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:b8:23:d7:15:b1:09:5c:55:f2:55:08:47:
                    42:1d:4f:e7:91:f2:3c:b6:54:32:aa:7b:8c:36:05:
                    ab:b4:66:0b:69:8b:8c:ed:ab:fb:45:45:de:4a:f5:
                    95:1c:3f:f4:f3:de:84:97:03:67:55:34:bb:fe:36:
                    ea:75:20:84:00:36:0c:8b:dd:56:eb:b9:c0:e6:67:
                    92:f0:6f:8f:a8:8e:7a:f0:c8:8a:80:bd:b4:08:2b:
                    1b:af:ed:25:40:bf:31:6b:72:b7:b4:58:24:d4:8a:
                    2b:30:9e:66:b7:a5:1d:c5:ed:e8:a2:66:30:6d:10:
                    19:ad:38:25:ec:e2:b9:6c:0b:44:b1:4d:a1:55:05:
                    a1:ee:20:cb:ad:5b:15:0d:96:f6:8a:22:62:5d:4a:
                    5d:24:97:70:30:6f:46:2a:71:5c:60:a3:5b:61:10:
                    53:e7:84:e8:62:3e:9a:f6:c8:2b:b9:c2:b5:94:80:
                    e1:81:04:eb:c5:3a:e6:cb:bf:4b:f1:18:5c:8e:62:
                    7e:45:3d:be:2f:4c:17:21:72:e8:fb:b6:5e:ec:ef:
                    0c:e0:18:f1:4a:1f:6e:16:b9:91:7b:46:90:cc:63:
                    2d:36:fe:ed:16:90:c4:d2:ce:ee:0a:e7:46:d3:5c:
                    88:a5:be:80:73:69:29:37:62:d9:78:85:0e:e0:5c:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:98:28:B3:41:0C:BF:F3:0C:3D:BF:1E:27:BE:FA:6F:9B:0A:27:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl

            X509v3 Authority Key Identifier:
                keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:73:45:70:c7:55:9b:f9:91:8d:a6:d7:f7:29:d9:01:30:
         d0:69:23:9d:a8:b4:42:01:28:bc:51:33:c9:b9:f1:29:09:e1:
         ea:01:ab:50:41:b3:57:fc:c7:db:c0:e5:76:40:1f:72:77:d0:
         94:a2:04:d5:e9:6f:f9:5b:95:10:de:24:8c:62:eb:b6:53:e8:
         d4:46:ca:73:26:38:6a:1d:d5:68:c2:af:c7:52:60:7e:31:86:
         4d:3c:8c:8b:ec:f7:a9:c8:fc:f4:6f:4b:a6:af:0f:7b:ec:5b:
         57:9f:27:3a:60:49:2e:6a:9b:fa:7a:fd:73:d6:9f:ce:d5:c0:
         78:e4:48:40:75:e2:03:20:21:70:c0:59:ae:d0:fa:c5:94:44:
         c9:95:e4:27:64:b6:2a:ad:38:27:7b:42:7f:b1:bd:e8:54:07:
         5a:48:2e:af:3d:90:07:8a:ef:e2:73:58:99:6d:d2:7e:71:2d:
         67:d5:44:34:4a:35:cb:29:00:d5:0b:27:e4:db:ab:c5:17:7e:
         41:f9:72:46:17:01:10:3f:b9:ea:93:52:dd:d9:1c:e8:cf:08:
         d4:ce:12:80:f0:ed:0f:6e:e4:10:0a:5e:e5:3c:35:2e:4a:79:
         ee:18:aa:ba:59:a7:b5:50:5a:08:55:15:55:2a:9c:fb:21:3c:
         18:9b:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:53:44 2025 by rpki-client