Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa
File:                     c4773e03-263c-3fd4-ac68-b27851922a8b.roa (raw, json)
Hash identifier:          kEtKueyaTZH40P9P2OHGRnKOSv0MUlp+QTRvrJtLCgs=
Subject key identifier:   92:F9:A1:E5:E7:3E:0D:16:87:33:C9:48:FB:83:A8:32:6F:AB:8B:CB
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584ABD4B9628384777A59BE52B40
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     2734
IP address blocks:        66.35.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:96:28:38:47:77:a5:9b:e5:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=5c517f24-243d-4c6d-9f3d-cc0d8dda20e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:b4:5a:61:e8:3e:af:ec:1f:dd:08:a5:71:
                    80:b9:cf:f2:ce:bf:2d:5c:27:e1:b0:16:d7:57:89:
                    ab:5d:83:c0:bc:9a:f1:38:34:4e:24:8c:5b:62:2e:
                    34:18:c5:25:4d:8b:15:9e:46:d6:80:b4:7b:df:94:
                    1e:c2:e7:04:b6:c3:75:c2:ba:10:07:e2:0a:6e:3d:
                    62:64:d4:95:de:7f:c4:47:34:c8:fb:43:96:c0:db:
                    69:d5:18:9c:e3:09:2a:f8:75:8c:75:72:3f:c2:03:
                    86:cb:a7:55:88:91:06:a0:ca:28:f7:f3:a2:6b:11:
                    eb:96:0a:ee:10:ad:82:c6:6b:64:54:c0:3f:e0:be:
                    05:25:cf:a0:f4:5a:9e:ff:55:1b:1a:09:48:0a:e2:
                    38:db:7e:57:50:53:93:24:6b:2f:30:66:6c:49:b4:
                    be:ae:ac:e5:85:b1:34:51:e3:88:a2:4f:02:9e:c6:
                    61:11:36:da:6c:12:94:ac:70:e8:a7:a5:e6:14:ac:
                    d3:71:b8:51:fb:a5:1a:42:ed:08:02:de:fb:2a:21:
                    3c:6a:88:77:cf:30:a9:49:29:04:2e:99:7f:e7:c8:
                    2c:5b:19:ee:ec:ae:da:37:94:be:57:ee:75:2b:47:
                    37:34:b7:3d:5b:b0:02:42:54:90:67:95:9a:6c:2a:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:A1:E5:E7:3E:0D:16:87:33:C9:48:FB:83:A8:32:6F:AB:8B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:65:2a:c3:7b:27:22:6f:cb:09:22:58:d5:ad:7a:98:04:
         76:4b:f6:d5:7f:a2:0f:9f:ce:72:b7:fe:79:87:a6:77:e4:88:
         ff:c2:1e:21:d4:c2:de:fb:c6:ec:5b:88:09:a0:ab:48:33:19:
         70:7a:79:40:28:8f:39:1b:93:fe:c3:ee:1d:83:4c:68:fd:81:
         d7:2b:96:3e:8a:ca:78:b7:85:54:78:48:3f:e4:8e:ba:b5:e2:
         3c:49:37:ae:8d:32:94:57:bf:ac:57:5a:ff:f2:f3:57:5c:85:
         0e:81:88:2f:6f:d3:0c:33:d4:9e:dd:b4:e0:82:f4:6b:a2:59:
         6f:7b:29:50:28:36:a5:c2:5d:3b:3d:1d:7d:5e:4c:a3:f6:22:
         36:7e:0e:b6:02:a8:00:53:03:7f:93:3e:2f:ed:94:c7:7b:02:
         61:ba:b3:69:53:26:c2:08:fe:3e:ac:82:31:95:8f:1a:21:43:
         59:d3:af:57:bc:0a:82:ab:43:16:8c:0d:2a:a2:ff:b1:45:0b:
         4e:5d:1f:cc:3b:95:90:70:0e:23:27:5d:4e:82:71:0a:84:24:
         e1:f3:69:d0:b5:b4:3d:bc:12:50:2e:ce:00:34:89:96:41:ba:
         a4:e8:75:0c:70:72:74:01:dc:6e:60:e1:64:e9:68:df:ff:14:
         6a:f2:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:32 2025 by rpki-client