Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa
File:                     efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa (raw, json)
Hash identifier:          fw50iPIggY7wCwXtA1M2PSdJq+vZE6iB6PH4uqcl0rE=
Subject key identifier:   9F:1D:C7:26:46:2E:E5:70:FC:56:46:14:15:6D:34:45:F8:06:53:D7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AA6F6237E09C23C309C716F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     199527
IP address blocks:        66.227.64.0/22 maxlen: 24
                          66.227.72.0/22 maxlen: 24
                          66.227.77.0/24 maxlen: 24
                          66.227.78.0/23 maxlen: 24
                          66.227.88.0/22 maxlen: 24
                          66.227.92.0/23 maxlen: 24
                          66.227.95.0/24 maxlen: 24
                          66.227.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:23:7e:09:c2:3c:30:9c:71:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=e8f27fb0-cba4-456d-b645-eecdb2250273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:96:02:57:35:ef:b0:78:8f:4e:80:89:22:
                    28:d1:51:20:27:b0:5c:a7:69:d7:f7:89:12:b9:21:
                    f3:e6:14:96:6d:b6:50:cf:b8:8e:b3:6f:d4:6b:60:
                    a9:02:a3:b3:bc:f6:e6:31:58:17:7b:70:a0:96:67:
                    78:61:3a:da:75:1c:51:18:11:6e:71:c6:95:3e:68:
                    ac:c0:5e:33:96:16:7d:cc:87:39:82:60:6c:40:12:
                    73:e6:56:dc:e9:f0:10:02:bd:1c:31:21:d2:b2:6d:
                    94:49:e7:a7:5d:77:b7:64:f3:09:f3:b9:03:77:29:
                    b6:8c:c5:52:e3:f6:d9:c9:02:df:4a:cb:a4:ff:75:
                    2f:77:6d:71:0d:08:df:66:23:72:d4:34:5b:5a:75:
                    64:4a:95:66:6b:93:5f:cb:bc:85:52:d8:16:d3:7e:
                    75:a0:1c:77:00:a5:c7:1f:43:60:70:90:87:a5:a0:
                    6b:f1:dc:9c:7c:d2:70:8a:b2:06:1f:2f:78:96:d4:
                    c1:8a:bd:28:03:84:e3:bc:af:60:9e:e1:35:a1:cd:
                    b6:65:7d:aa:3f:f3:6c:8b:9e:7e:f0:03:ff:49:41:
                    0f:58:84:9a:cd:91:a6:9f:67:67:d3:30:a3:5b:a4:
                    df:39:6a:d7:ac:fe:20:56:05:91:ee:12:8f:2f:33:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:C7:26:46:2E:E5:70:FC:56:46:14:15:6D:34:45:F8:06:53:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efb226c2-2d28-3b9c-bfce-f7d0d354f99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.64.0/22
                  66.227.72.0/22
                  66.227.77.0-66.227.79.255
                  66.227.88.0-66.227.93.255
                  66.227.95.0/24
                  66.227.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:03:42:90:76:ae:c3:3f:f3:9e:e7:85:35:ae:2b:7b:8d:cf:
         b2:f6:a2:94:70:69:09:3c:57:0b:81:d9:ef:f6:25:61:69:a0:
         52:44:6b:d7:56:48:64:b8:c7:c1:f6:87:75:90:6b:21:4e:20:
         26:b0:c4:3c:05:79:b0:00:cf:65:fa:1f:27:09:dc:65:12:90:
         df:9c:54:f5:87:69:b9:82:b1:9e:98:e0:b4:3b:da:68:c6:f2:
         ad:d4:f1:82:fd:d2:ea:46:a7:22:db:70:35:91:c6:10:08:33:
         6f:50:ff:e0:a0:5e:dd:7f:ec:f7:57:69:aa:22:0d:cf:f3:3c:
         dd:da:72:a0:5f:7d:ad:5f:6d:21:9b:bc:b5:48:25:49:a7:b6:
         9c:79:5c:e7:d8:95:e9:a5:ec:5a:ca:18:1a:ab:14:4a:29:36:
         91:e3:fa:64:6f:95:d7:74:bb:b2:33:5a:8b:62:92:24:ef:cd:
         06:4f:04:46:b1:db:ad:a9:db:0f:45:39:67:8e:01:b6:6f:a6:
         36:f5:f8:ad:50:b5:da:9e:c7:45:06:db:88:10:9f:f0:dc:00:
         2b:39:2f:1e:3b:f2:ea:b5:13:94:d2:db:74:57:a0:83:b5:0f:
         15:9f:95:74:d9:00:16:ff:1c:dd:10:dd:68:eb:a3:25:a2:ec:
         54:a8:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:02 2025 by rpki-client