Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa
File:                     cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa (raw, json)
Hash identifier:          JiIedYskqhFWXqfBZxikIIBEeCdTO+rsddhpGyHAl14=
Subject key identifier:   73:1A:B2:06:45:13:86:F7:3B:6C:7D:78:D7:44:30:63:07:9D:73:91
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584ABD4B95EAFAE799777B55B280
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     2734
IP address blocks:        66.35.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:95:ea:fa:e7:99:77:7b:55:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=11ebae39-93fb-45a8-9268-203828f46443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:10:e9:b5:fd:d9:5b:75:f7:c6:e8:74:0e:
                    d9:dc:ac:0e:9f:71:83:9b:59:47:d3:9c:f8:ed:d7:
                    54:e0:27:3c:c7:45:b8:fc:21:77:17:77:db:f7:cd:
                    83:81:41:95:ca:e3:4c:43:3f:c0:cf:8a:b9:aa:4d:
                    4f:55:f7:23:56:9d:68:b1:1e:e1:d8:9d:ca:e2:8d:
                    47:ff:54:3a:6e:6a:8d:3d:30:76:9a:56:b2:16:ed:
                    8d:4e:d6:86:d6:2e:a0:bb:71:f6:1e:ab:cd:aa:32:
                    e0:03:f2:3e:c7:51:e1:00:e9:38:cd:4b:13:b7:60:
                    fb:de:1b:ec:57:c1:bd:70:d7:ec:df:4b:2f:4f:84:
                    8e:b6:55:1f:01:72:82:fe:63:ae:c8:43:d3:22:1d:
                    d6:58:bb:69:82:57:fb:de:3c:f1:7f:96:46:ac:f3:
                    79:f3:05:d5:ea:78:b3:97:85:61:03:b2:dd:58:59:
                    e1:45:0f:be:dd:5e:8c:15:89:39:a2:58:54:25:4b:
                    48:7a:31:52:d4:ef:2b:86:55:41:7c:4e:60:23:91:
                    66:68:95:45:30:8a:19:89:48:9d:02:4b:b6:16:32:
                    e9:11:f8:99:0a:a8:ad:71:66:2a:a6:83:43:09:2e:
                    f7:69:91:24:87:de:80:06:76:32:31:38:1b:08:be:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1A:B2:06:45:13:86:F7:3B:6C:7D:78:D7:44:30:63:07:9D:73:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cbd7eb99-d534-33bc-b1f1-61d07e2c973b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:46:50:0c:98:ed:97:53:f6:1c:5f:0f:45:63:b5:fe:70:2e:
         77:bb:01:02:93:fc:ce:79:97:00:22:f4:df:06:1d:e1:9f:d0:
         76:f0:8c:8e:a3:39:36:ff:f6:f0:dd:0c:0f:81:04:1a:21:cb:
         e6:2d:f4:d7:1f:39:87:1d:2d:ce:2b:cb:af:42:c5:f3:c1:d9:
         53:fd:4c:de:d9:f2:53:97:c8:e9:0f:02:b8:58:0f:15:ce:56:
         5e:3a:34:54:8f:ad:01:87:e7:a2:3a:f1:41:f3:db:2f:68:4c:
         9e:64:52:df:8b:dc:52:8d:13:f2:35:6e:89:32:9d:0f:03:9b:
         b5:32:1c:a8:5b:90:7a:21:96:4d:47:f6:21:49:29:a9:d8:1d:
         b9:79:30:57:c7:57:df:07:57:e1:47:02:33:df:cf:e4:a5:cd:
         83:d6:e0:b2:5f:8c:29:cf:23:69:40:92:17:d2:7e:ca:f9:1b:
         d6:99:15:44:57:09:f7:cf:09:75:43:e1:c5:d3:fc:e1:77:f5:
         01:1d:e3:04:55:1f:02:27:9c:42:f0:72:29:b5:bb:29:be:98:
         dd:af:ab:b3:01:73:d3:2f:58:45:84:39:ff:ef:5c:ad:14:42:
         ac:65:26:70:9d:23:e6:d4:04:a7:96:ee:cd:43:fb:1b:4c:2f:
         34:cc:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:13 2025 by rpki-client