Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa
File:                     9b2c6c8c-5808-3e93-99c4-ca1823759356.roa (raw, json)
Hash identifier:          nS5Q9mk9/5dBx1yXqNTfwIrDWHIilwNVBoOEUiaBtWM=
Subject key identifier:   FA:8F:EF:8B:61:4E:6D:CD:3D:6A:11:5E:F0:8F:EE:25:F6:E4:C2:B6
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584A71EB4F9F20962709F23AB700
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     10430
IP address blocks:        66.96.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4f:9f:20:96:27:09:f2:3a:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=ef78cd57-4519-44cd-8006-a76ec7a4c902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:70:73:3c:27:98:be:1a:a0:11:e1:18:a3:3f:
                    e8:13:94:9f:23:b8:fd:21:f5:db:dc:fb:c7:91:1e:
                    fa:43:cd:06:0b:74:0a:ab:6a:f0:a4:e5:ac:fa:66:
                    4f:ed:a6:d3:5d:d6:43:19:89:bf:3a:da:1a:ff:85:
                    e7:25:f3:44:94:ff:05:82:db:6c:4a:31:b3:a2:fe:
                    4a:49:01:28:c1:3d:4d:79:02:26:d0:85:d1:58:4b:
                    2c:9e:f0:ae:2c:78:2f:4f:53:a5:e7:c6:fd:f4:1b:
                    07:e6:d4:5b:fa:f2:37:96:ff:1f:f1:fc:fe:f4:28:
                    62:1c:d2:df:a9:d2:c4:4b:49:75:ca:4f:8b:bb:36:
                    1f:fc:66:dc:c9:37:61:97:93:94:42:12:ef:8e:58:
                    3d:1c:30:0a:f9:b9:54:7a:1e:7b:4b:89:44:30:66:
                    e2:1c:45:fd:70:65:4c:b9:61:0e:01:f3:d9:69:4f:
                    10:0a:da:b6:0f:d3:e2:ad:ce:d1:9d:70:35:2d:4f:
                    e6:79:58:88:78:64:2e:03:76:40:43:d7:32:20:d8:
                    c3:94:e4:96:63:a8:9d:49:57:a5:d4:69:3a:50:b1:
                    9d:7d:4e:63:3e:ed:46:96:fb:b3:e6:f8:03:73:8c:
                    1e:20:16:8b:4e:ef:b3:d0:a1:ee:37:bb:db:f5:8f:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:EF:8B:61:4E:6D:CD:3D:6A:11:5E:F0:8F:EE:25:F6:E4:C2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:4f:9c:3f:1d:14:45:1f:e5:08:34:b9:e3:45:bb:15:e8:
         70:28:02:ec:a5:62:af:b3:03:39:67:52:80:d1:39:b9:9f:45:
         db:f5:0a:46:2a:98:ab:dd:f0:da:b3:54:bd:e3:b5:7e:c0:22:
         80:c8:d5:64:14:77:5f:cc:6b:a7:aa:25:ce:a0:c5:9d:9c:31:
         b0:9d:e9:82:b1:52:22:17:05:18:8d:56:43:41:b6:1c:12:ea:
         24:8f:7c:e7:7a:de:e1:95:bb:60:3c:7c:29:e0:0c:cc:0e:3c:
         31:20:61:14:89:29:4b:b7:d6:00:0d:80:8e:a9:71:b6:3c:b5:
         68:38:db:05:79:67:4a:9b:09:8d:4f:47:b8:d5:17:12:ec:1f:
         60:3e:38:4e:86:f6:50:fc:a8:4a:f6:3d:d6:cc:e7:ba:8c:60:
         89:df:5c:00:77:bf:28:d5:71:d9:c3:ec:3e:10:bb:00:f6:7e:
         71:27:20:35:04:c1:ae:2e:a7:02:31:d6:f1:ab:7a:e8:78:7e:
         f7:cf:3a:9a:bb:70:5d:ce:7a:67:1d:1f:20:c3:a7:86:d2:a9:
         1a:7f:7f:15:79:90:30:97:07:cd:43:e9:88:88:96:63:5f:25:
         c4:47:12:e6:9e:a9:5b:c3:75:3b:fb:1d:8d:f1:ea:fd:56:97:
         ea:28:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:37 2025 by rpki-client