Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa
File:                     fcf651bf-062d-3478-a5f1-a3f894589147.roa (raw, json)
Hash identifier:          jvgQhjIUNbRmG5dAmqzvgB5UaEOj8UvF2fZrCrjDXYI=
Subject key identifier:   B9:75:DD:A7:23:46:30:67:6D:02:E4:C0:5D:F6:7B:61:D7:27:9C:C2
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584A9BCB6E65A958B833E91322C0
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     400610
IP address blocks:        66.219.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6e:65:a9:58:b8:33:e9:13:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=fbc4cdc8-ab57-4db5-a3df-d846db29b0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cc:47:09:c5:f6:3f:67:12:71:54:60:1c:5d:
                    75:b9:5d:e3:3a:7a:d0:52:21:ca:4b:f9:2a:ee:ca:
                    7f:36:7e:92:20:56:1d:4f:d7:b1:48:f8:aa:28:4e:
                    54:07:65:54:83:77:1d:de:77:46:c6:54:69:45:f7:
                    bc:b8:d3:9f:bb:32:ad:88:2e:7a:5a:93:ba:6c:e8:
                    ab:78:fd:b0:26:ea:fb:b1:50:f9:90:97:1e:9e:4c:
                    8f:ce:57:9b:fa:bb:0f:90:9f:f7:e4:90:69:cc:8a:
                    f8:ab:43:01:7b:56:cc:7b:7a:96:b3:f0:ff:71:a4:
                    24:f0:ac:9f:00:54:c0:ea:19:df:54:2f:98:84:bc:
                    5b:d9:bb:a1:1e:fd:23:f5:71:e5:a3:18:93:0a:4b:
                    f0:7b:54:41:6f:81:52:8b:9f:34:83:b8:db:07:fa:
                    d3:f1:9f:6a:58:1e:f7:48:c6:0e:f3:d2:b7:26:75:
                    ad:d9:6d:b8:40:8f:c9:1a:52:65:02:9b:d1:df:70:
                    03:a7:fc:b0:5b:4d:44:b4:ce:05:9f:18:bc:ef:0d:
                    54:79:83:31:ae:06:07:27:9c:1b:b1:ba:fa:fc:d9:
                    ae:c1:f0:7c:ec:1d:f6:e7:cd:a0:08:3c:70:89:35:
                    d7:49:01:54:20:40:00:9e:ad:5a:e2:bd:9c:7f:89:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:75:DD:A7:23:46:30:67:6D:02:E4:C0:5D:F6:7B:61:D7:27:9C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/fcf651bf-062d-3478-a5f1-a3f894589147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:a2:54:2d:4f:af:33:92:e9:5e:8c:db:b2:ee:9e:b7:1f:
         da:05:32:88:55:32:b5:28:ea:2e:6d:c5:6a:28:80:54:fa:39:
         d1:64:b0:10:4a:2b:6c:9c:ad:aa:a4:9b:14:e1:5a:72:1e:a9:
         8a:92:1d:e2:f6:ca:7c:59:a4:9d:be:93:57:00:f4:e9:e7:d3:
         f5:36:1a:9a:ce:dc:ca:51:ef:c8:52:56:1f:44:51:33:9d:4b:
         29:48:2f:56:89:b9:7d:cd:40:0f:ff:2c:3e:84:44:2d:a3:0e:
         08:e1:bc:47:5b:62:88:11:52:10:70:8f:4c:e3:90:28:30:33:
         10:21:9b:c6:25:4e:f8:0f:17:f2:81:2f:32:e9:64:59:62:cf:
         05:76:f4:15:bc:c3:57:2c:52:83:e4:59:cf:87:04:0f:31:f9:
         c6:45:42:b0:4a:27:10:ab:fd:04:7c:48:0b:6d:a8:1a:cd:a4:
         3a:cd:a1:60:a2:1e:18:41:56:1c:bf:da:67:e9:a3:7c:2d:67:
         d5:0a:80:55:32:41:95:ae:e4:b8:57:ad:2c:18:b9:78:ad:93:
         f6:40:43:dd:92:f4:56:36:4b:db:9a:87:b3:4b:36:87:52:b8:
         d7:8c:64:eb:4c:20:a2:ca:96:c2:bd:50:11:ca:d5:e9:49:8f:
         51:89:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:12 2025 by rpki-client