Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa
File:                     6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa (raw, json)
Hash identifier:          ybG2G3Fikme4SPL6cQ3WB7o9/nMUHp9q9I9e1RW1sfA=
Subject key identifier:   AB:50:DF:00:65:BB:1E:C4:5B:4D:B1:0B:85:C5:AF:5C:46:21:E3:CF
Certificate issuer:       /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
Certificate serial:       010D0C9F4328584A189555908394DADCA65E6700
Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     394772
IP address blocks:        66.223.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:55:90:83:94:da:dc:a6:5e:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=1a6fdf87-055b-43e7-8dc6-3b0516b07b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:c5:05:95:1d:1a:77:c1:e1:96:67:3f:18:
                    40:00:bf:d7:bd:4c:0b:4a:4e:32:aa:02:b4:35:ac:
                    5d:e9:db:1f:2b:3d:24:db:c5:23:3d:68:25:17:34:
                    f5:49:9f:bc:d6:ae:ae:ae:99:a2:1f:67:b1:28:7f:
                    1f:66:61:cb:f1:8b:4d:05:5a:93:f4:e6:56:af:34:
                    97:dc:ab:1f:1d:25:d8:30:8c:9f:47:9b:8c:68:d3:
                    a0:f5:09:6e:9f:35:98:29:0a:fa:ef:29:b8:a9:c5:
                    31:f6:b6:b1:03:10:9e:e0:76:71:3b:a9:dd:d7:08:
                    18:0e:98:43:31:a8:23:29:1c:c1:b6:7f:d1:a7:bc:
                    3f:14:84:2d:f9:9a:a7:48:e9:f3:97:f0:98:9e:ea:
                    f3:30:21:63:6e:dc:35:e2:44:5f:09:e1:e0:de:6d:
                    57:92:28:66:42:58:f6:36:fb:51:c7:7b:c9:35:03:
                    db:80:4f:ce:61:3f:c4:8f:57:36:3f:c4:c7:43:65:
                    ed:4f:d8:50:f4:f0:9a:22:1c:e5:19:08:5b:80:05:
                    28:e0:90:60:50:c4:05:51:1d:d8:59:7b:3e:72:7e:
                    53:b6:e4:f5:57:6e:bb:c1:94:e1:46:91:ea:83:73:
                    99:74:df:90:25:7c:ec:18:01:4c:ec:18:cd:87:45:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:50:DF:00:65:BB:1E:C4:5B:4D:B1:0B:85:C5:AF:5C:46:21:E3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e8:a6:56:03:f1:5d:ed:65:65:28:1f:b4:08:e5:41:27:ca:
         3a:74:16:a5:29:19:05:a5:ed:bc:77:b1:fa:ca:c2:78:4b:14:
         50:12:c4:a9:74:05:dc:8c:b0:9d:45:9a:bb:b2:30:59:cf:cd:
         a9:57:36:8d:fd:0b:10:a8:f3:e6:a2:88:ab:cc:1c:98:7e:a8:
         cb:e9:ff:69:5f:ca:70:fe:84:f0:07:d6:b5:40:46:dd:13:a9:
         f1:47:a4:8e:84:c2:2e:6a:d4:4b:f3:7f:45:98:46:04:20:f5:
         50:58:07:a7:27:e6:80:8e:9a:e8:51:86:77:3b:f8:53:9f:0e:
         ae:62:09:e1:23:31:d9:fd:23:dd:67:ab:31:79:00:b6:22:6b:
         4f:db:45:0d:0e:f1:a2:f3:86:b0:5d:4e:38:37:63:33:e0:17:
         13:ae:a5:cc:4b:2e:e6:e6:0b:a7:d0:9f:76:c5:a9:6e:c2:5b:
         5b:8f:06:d8:7d:8b:84:48:f1:bd:9b:ce:e6:87:63:6c:17:d9:
         5a:ac:27:ae:89:b4:1d:75:75:16:4b:26:d8:38:c4:fc:4b:07:
         6e:ba:d1:33:58:46:cd:7c:fe:79:c9:8d:90:3d:c1:4a:18:f6:
         a1:e6:de:6b:c3:90:b1:fb:27:5e:68:d3:a8:69:ac:cc:57:8f:
         d4:07:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:13:06 2025 by rpki-client