Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa
File:                     c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa (raw, json)
Hash identifier:          Axi63aolCzHML16BlaDTKi1WYYRF2FkwMBIR/GXcLxg=
Subject key identifier:   F0:4F:91:6B:F1:47:57:2C:DD:D5:FB:4A:14:F5:54:44:2B:E6:44:15
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584A9BCB6EBE957E48BE449A3D00
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     400610
IP address blocks:        66.219.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6e:be:95:7e:48:be:44:9a:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=0e53e853-4654-47e5-add3-032545d06334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:dc:45:40:33:1c:83:0e:1f:03:5c:62:a7:
                    53:ab:c7:fb:9d:3d:7f:28:ea:b7:d3:92:11:33:98:
                    24:de:00:d9:03:d4:84:ca:5f:38:fc:9c:94:22:eb:
                    30:75:19:88:97:d9:ef:9e:39:54:41:92:82:4d:8b:
                    65:aa:e4:89:c2:1f:2b:7a:69:db:7e:31:f1:b3:95:
                    c4:cc:5f:11:9e:52:39:74:8d:0e:9f:e5:88:f9:42:
                    f7:be:89:c6:b9:e5:b3:35:46:b6:23:d8:77:b8:48:
                    ac:af:3c:19:dc:83:c3:31:83:a0:d1:16:45:44:4f:
                    e4:2e:ba:a5:dc:84:97:0d:f6:e2:8e:d7:8a:4b:d4:
                    34:8b:e7:8b:6e:3f:40:d4:ad:44:88:42:15:a3:39:
                    31:71:5d:00:45:70:f2:17:f4:3f:2f:71:02:16:f2:
                    1d:5f:ba:bf:5d:3d:65:08:45:41:69:32:42:84:06:
                    7f:3e:1b:35:99:09:91:ba:40:30:88:be:85:75:8b:
                    c7:30:f7:7e:bc:ef:a9:1f:17:e3:eb:60:68:d9:84:
                    fa:00:01:da:81:81:37:a0:4d:d0:83:c7:ad:c1:2b:
                    ab:0d:73:65:05:6b:27:ad:d6:d7:bc:18:6c:74:33:
                    c8:d0:46:85:0c:48:54:02:3a:8c:39:05:3a:dd:31:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:91:6B:F1:47:57:2C:DD:D5:FB:4A:14:F5:54:44:2B:E6:44:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/c656a03d-64a4-38aa-b0d4-7954c1e7e076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:53:34:89:8b:fb:b1:99:6c:28:b4:0c:66:9e:27:26:5f:5d:
         c9:15:42:18:48:00:be:46:b9:a5:e0:03:6e:c7:db:2f:d8:3b:
         5b:18:45:25:26:84:80:ed:de:eb:42:ca:43:3f:0e:86:15:89:
         c9:b7:cc:b6:d0:d2:84:de:62:c9:d9:32:b0:92:58:c8:be:98:
         5c:2f:06:c4:84:84:82:1b:50:53:d5:68:45:f4:6b:a8:93:a4:
         91:f9:a5:0d:ac:5f:48:be:fe:46:32:05:c5:95:64:29:9b:a4:
         ed:14:5f:0b:60:09:6a:82:15:da:bf:29:a8:57:a5:cc:09:d3:
         7b:b5:d3:5a:6a:73:ab:bd:1c:43:55:c8:9a:ef:32:30:c0:19:
         43:b4:4d:a0:d6:53:d9:e9:42:bc:8c:b9:26:c8:7a:02:c3:3c:
         18:f5:2a:3b:f4:ab:81:00:ca:52:10:7f:2d:4a:e1:87:24:65:
         2a:c8:43:77:fa:6f:54:a8:f5:c9:7d:94:63:b4:f9:ac:bf:24:
         a7:59:ff:02:7b:3f:06:61:df:77:b7:c5:0c:15:6b:d1:db:c9:
         fd:f4:8e:0a:25:d5:d3:78:37:5d:ed:b5:d9:47:f6:cd:19:09:
         00:a4:e2:f6:32:8a:ea:b5:71:b2:29:3b:b4:53:02:36:15:e1:
         3e:3b:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:31 2025 by rpki-client