Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/f047514d-682a-3e4f-a2d2-8f4da833d705.roa
File:                     f047514d-682a-3e4f-a2d2-8f4da833d705.roa (raw, json)
Hash identifier:          5MngF1beCWNbDe4M+W6PoRjQeo/PddsseWU9sL6Qss8=
Subject key identifier:   C3:62:4A:C0:ED:84:FE:FD:0E:2D:D7:90:2F:8E:AA:23:54:92:75:1B
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584AA6F61EE490F93F5B5ED59B20
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/f047514d-682a-3e4f-a2d2-8f4da833d705.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     12208
IP address blocks:        66.248.208.0/24 maxlen: 24
                          66.248.209.0/24 maxlen: 24
                          66.248.210.0/24 maxlen: 24
                          66.248.211.0/24 maxlen: 24
                          66.248.212.0/24 maxlen: 24
                          66.248.213.0/24 maxlen: 24
                          66.248.214.0/24 maxlen: 24
                          66.248.215.0/24 maxlen: 24
                          66.248.216.0/24 maxlen: 24
                          66.248.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:1e:e4:90:f9:3f:5b:5e:d5:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=1c5b0982-5d90-4c23-9140-88e54d89ad07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:80:ff:fd:00:98:be:32:06:a4:dc:c3:67:
                    c0:14:75:08:a1:56:6a:cd:60:60:de:2b:be:66:36:
                    27:a9:79:51:4f:83:54:54:25:42:6a:c5:2c:b7:2d:
                    11:d1:05:30:6e:71:3d:fe:cf:7c:5f:ea:d9:86:c1:
                    3c:b0:78:ed:b1:71:5e:5c:c8:00:e8:08:1f:29:52:
                    48:95:26:a1:61:12:4b:99:d7:aa:4f:5a:15:6c:ca:
                    6b:f1:b6:50:c6:fb:26:50:35:52:f9:8b:4d:99:1e:
                    b8:37:67:d8:aa:12:fd:56:7b:69:a3:ec:9f:16:22:
                    a3:b4:c3:9b:c4:8f:4b:4f:b7:75:a5:ad:1e:c1:37:
                    c9:d9:8d:45:f5:a5:19:22:49:f7:d6:40:ba:8a:c1:
                    e5:92:79:a1:5a:7d:83:c7:c0:5f:79:f3:e3:8d:ab:
                    c3:7d:20:bc:8e:1f:f3:8a:8f:63:8e:d4:05:e9:c1:
                    a3:21:7a:8c:ba:37:d2:59:ad:8b:ec:36:e7:de:6b:
                    ed:e0:ff:f8:e3:7f:95:2a:35:12:2c:84:72:b5:cc:
                    47:ae:aa:b4:60:a1:55:9b:4e:9f:78:6d:a6:78:47:
                    d4:94:93:75:d1:6d:a1:f8:c7:d1:be:0f:a9:0a:15:
                    4d:40:94:03:0c:68:8d:22:0b:8f:8a:ff:21:aa:b0:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:62:4A:C0:ED:84:FE:FD:0E:2D:D7:90:2F:8E:AA:23:54:92:75:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/f047514d-682a-3e4f-a2d2-8f4da833d705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.208.0-66.248.217.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c8:c8:3f:90:9c:bb:3d:5d:7f:06:33:d0:00:58:2b:9d:a3:
         c3:b6:f8:50:d6:9e:eb:62:c2:e4:ac:59:4a:bb:42:a0:e9:99:
         7f:1c:9c:e3:f1:42:c6:e3:ef:65:c5:a8:db:9d:7e:4a:42:c4:
         98:01:8f:a8:f9:7b:46:08:f3:fa:06:4f:1a:69:4d:89:8f:b0:
         7c:8f:bf:7a:82:8a:5b:35:51:87:60:37:b5:77:52:8e:cc:b8:
         33:d8:57:0b:40:a2:cd:b6:27:96:bb:cf:0e:ab:4b:f5:a3:ce:
         80:66:6a:60:96:af:c6:3c:e3:8a:a4:d3:73:1d:39:8a:f7:78:
         05:a3:04:1e:9c:e2:bf:8a:25:b3:6d:d3:14:a2:bb:e7:cd:2a:
         5a:f6:6b:8c:44:47:05:49:c2:28:80:e2:c1:cb:33:40:b2:d5:
         4e:8d:c1:e6:23:29:53:07:f7:2d:ec:c7:1c:bd:57:97:a4:8b:
         9a:53:04:f5:09:4a:b0:76:2d:14:8d:82:8a:43:7f:54:fb:57:
         3d:c0:a3:07:4f:e3:ab:62:62:12:a4:93:22:eb:ca:af:ce:58:
         c5:5d:dc:b5:6d:b4:f9:a3:ca:66:a9:4f:91:38:03:a9:4b:cb:
         1a:32:4b:a5:9f:4c:ad:99:05:5b:7e:d8:53:9c:a2:00:e9:53:
         f0:0e:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:07 2025 by rpki-client