Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa
File:                     f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa (raw, json)
Hash identifier:          wnwCUe0+e4IZaZanGAbJFRC1HzqZ6rWRS5w2VI2bfG4=
Subject key identifier:   59:13:7B:3A:7B:F9:CE:57:99:5C:F5:B8:73:22:E8:CD:1E:E8:9F:0C
Certificate issuer:       /CN=66580030-eaac-4617-b624-3b0a2974a04d
Certificate serial:       010D0C9F4328584A31B5607D17225B1E72A0D340
Authority key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     26554
IP address blocks:        199.30.218.0/23 maxlen: 23
                          2607:4440:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:60:7d:17:22:5b:1e:72:a0:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66580030-eaac-4617-b624-3b0a2974a04d
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=5bd26184-744d-4808-bf61-855f2cfebecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:79:e5:be:3c:54:dd:b4:11:2d:a9:c6:ea:
                    56:e7:30:03:81:6a:cb:bd:54:25:a9:d8:f9:e9:90:
                    09:f2:65:84:d1:37:05:3d:dd:3e:e5:a0:28:92:bc:
                    a1:07:1f:26:a5:31:62:40:0b:65:d0:df:a0:fd:8f:
                    88:63:c7:6e:34:4b:0d:fa:88:a1:a7:13:66:13:67:
                    e1:ba:66:67:46:d8:8d:03:39:d5:3c:b3:79:74:14:
                    c2:cf:c5:8d:84:01:45:d6:56:1f:a6:f8:8b:ab:03:
                    fb:b7:73:2c:b1:c3:1a:fb:ce:6a:fe:11:ad:61:8d:
                    2e:7f:68:aa:9c:7d:b8:5a:8b:09:d4:82:0f:5c:fd:
                    31:c9:30:36:ed:0e:50:ea:e1:25:36:4d:5a:4f:e9:
                    62:0e:b7:e9:ff:e8:5c:61:b9:17:f7:93:68:27:d1:
                    5f:6e:0f:35:ee:e6:fd:b9:b7:ce:93:85:ef:73:41:
                    70:19:50:a9:c6:61:d5:e6:21:5b:10:53:6f:3c:77:
                    32:23:38:96:39:9d:ea:4e:1c:f9:3f:aa:27:77:ff:
                    97:f7:44:54:14:e6:1e:b7:ac:2c:00:0d:47:f5:59:
                    d0:e1:51:cd:91:23:61:46:90:5d:36:3a:49:be:d0:
                    7e:58:c6:e4:64:64:86:f1:ab:bf:1a:43:a0:a7:11:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:7B:3A:7B:F9:CE:57:99:5C:F5:B8:73:22:E8:CD:1E:E8:9F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/f25d9beb-999d-3ef9-bf4a-89ee02629e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl

            X509v3 Authority Key Identifier:
                keyid:7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.218.0/23
                IPv6:
                  2607:4440:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6f:75:08:bd:67:4b:80:5a:98:60:c8:9f:5f:dc:df:49:57:
         ba:62:e0:1e:38:76:05:b6:2c:4c:31:4a:47:52:25:59:07:6e:
         01:23:b7:6a:e6:9a:2e:64:33:99:c8:9b:32:15:1e:bd:8c:83:
         0a:81:7a:63:48:d2:2c:bb:40:4d:fe:95:d8:37:85:54:4a:4a:
         b6:79:2c:e1:a5:62:37:52:eb:3d:b5:ff:32:3e:50:0c:e4:54:
         07:09:71:8d:a7:d4:cb:ee:b7:b5:99:31:f5:54:9b:86:67:ae:
         66:ef:6d:67:be:41:61:1c:2b:d9:50:ef:2d:0f:bd:eb:15:d3:
         5a:1b:a4:4d:19:0f:b5:e1:16:be:eb:ac:49:ca:43:ad:80:36:
         66:3f:1c:7a:77:14:eb:48:36:f6:65:f5:72:5e:75:03:4e:71:
         4c:99:69:29:de:6e:b1:13:35:60:c3:97:8c:58:c6:bf:0d:da:
         1e:50:ac:5f:32:3a:08:a0:fc:64:7d:58:91:fe:35:2b:29:d0:
         7b:0b:d5:b3:3f:c6:60:22:7d:fa:ce:6e:20:28:1e:35:04:e3:
         50:95:a7:db:4f:3f:86:56:bd:54:ba:f7:3b:22:bd:de:2e:05:
         e3:79:87:77:3d:a1:51:d8:d2:93:55:04:e4:f7:46:ea:41:54:
         10:a4:77:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:33:15 2025 by rpki-client