Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21c2d3c0-3695-3576-9074-9435e7b42723.roa
File:                     21c2d3c0-3695-3576-9074-9435e7b42723.roa (raw, json)
Hash identifier:          2roUVHRdjTrJUu4NlByQVVIA3hJyHXkzNfk1ZWTA4u0=
Subject key identifier:   56:19:7A:36:29:C5:83:2C:2E:EA:40:75:E2:A7:3E:58:B4:3C:64:9A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AAD84169E512B6628030B3580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21c2d3c0-3695-3576-9074-9435e7b42723.roa
Signing time:             Tue 29 Jul 2025 09:21:45 +0000
ROA not before:           Tue 29 Jul 2025 09:21:45 +0000
ROA not after:            Mon 27 Oct 2025 09:21:45 +0000
asID:                     5065
IP address blocks:        66.93.75.0/24 maxlen: 24
                          66.93.249.0/24 maxlen: 24
                          69.17.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:84:16:9e:51:2b:66:28:03:0b:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 09:21:45 2025 GMT
            Not After : Oct 27 09:21:45 2025 GMT
        Subject: CN=f592f6ed-25c9-4d92-962e-7dc1db9b29d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:56:f5:f1:4f:8b:c7:c3:00:fe:00:f4:95:
                    57:59:1e:2f:5d:55:dc:a2:ac:19:ab:9a:ff:e2:54:
                    3c:03:74:74:be:66:d0:1c:47:d1:2e:b1:90:09:2f:
                    33:11:e9:46:fd:c1:b9:1f:0c:31:5f:38:9e:3a:12:
                    35:7d:c9:06:e6:41:4c:37:04:9c:79:d8:c3:62:45:
                    91:2a:2f:e4:30:10:c9:ce:bc:19:fa:50:f3:be:c2:
                    ed:a2:28:b2:f2:44:4c:d5:91:24:dd:4d:9e:09:b0:
                    2b:ce:a2:0f:58:cb:27:5f:24:df:ab:34:2e:bd:3b:
                    ea:9a:26:60:58:d6:21:1e:ce:95:fb:ea:81:05:b1:
                    07:ff:5d:ab:03:63:c6:cc:2e:f2:3b:4e:96:42:59:
                    01:79:71:87:e7:20:0c:e6:c6:91:6e:14:c6:e3:a9:
                    0b:cc:cf:2f:b2:8e:72:ec:c2:7b:e2:92:8b:04:75:
                    12:80:7e:15:45:ef:7b:29:78:c5:cd:4c:d0:cb:03:
                    54:e3:2f:b3:6a:43:72:86:a5:7a:b7:bd:1a:9e:19:
                    43:cb:4b:ee:63:de:da:d5:03:dd:22:b2:cb:64:ef:
                    b2:cd:26:54:df:25:dc:3e:61:aa:73:c3:37:9f:42:
                    49:05:49:0f:45:c8:18:d1:fc:ea:02:63:40:b9:dc:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:19:7A:36:29:C5:83:2C:2E:EA:40:75:E2:A7:3E:58:B4:3C:64:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/21c2d3c0-3695-3576-9074-9435e7b42723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.75.0/24
                  66.93.249.0/24
                  69.17.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:8f:39:39:c5:09:f7:63:3c:af:ef:51:39:7c:09:61:c4:
         e5:bb:52:ce:95:97:cc:c5:3e:c2:ed:9a:41:f5:a3:e8:e2:c2:
         15:da:cf:0a:66:a6:66:c6:33:98:c4:ae:8e:20:11:c6:59:39:
         4c:8f:41:56:8e:00:53:c8:25:c9:60:70:e5:6a:01:37:38:4a:
         e0:12:72:f2:12:2d:04:7e:cb:19:bc:8a:e8:ef:e0:0d:26:d3:
         12:c7:d1:72:da:0a:8d:12:d9:49:8a:1d:b8:a9:1b:85:7c:ef:
         c7:2a:25:a3:08:17:a7:5d:6a:a1:6c:45:f9:55:68:20:f6:e0:
         8f:19:98:3f:13:26:6f:50:1b:99:b9:f0:be:59:90:ec:05:f2:
         06:81:7d:ab:75:75:c5:5e:06:53:ba:3c:f6:e8:05:18:c8:62:
         04:9e:05:28:fc:46:7e:ad:a8:07:05:eb:51:f7:93:c2:cc:63:
         f5:9f:8b:af:8e:27:49:a8:b5:e3:ce:90:1b:2e:b5:95:92:9c:
         05:a1:fd:0f:62:18:4d:17:f8:04:76:4c:3f:b8:41:cb:14:ee:
         80:9f:a2:dc:88:22:fc:f0:0c:34:ee:71:ac:b5:37:e6:8c:87:
         21:f5:dc:f5:d9:73:67:d9:85:ca:b3:6b:f5:b4:90:0f:23:74:
         15:57:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:43 2025 by rpki-client