Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
File:                     e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa (raw, json)
Hash identifier:          mcyJdn1ULwSEdn9zWQhxHQcu9XdgA+bpclQQO+Z2f7o=
Subject key identifier:   A8:A6:AE:FC:BB:89:06:CA:45:05:57:DC:2D:FD:0B:42:F4:EB:1C:A5
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584AB220DB47F467C62D2A8E7380
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     2734
IP address blocks:        66.128.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:db:47:f4:67:c6:2d:2a:8e:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=723310a1-7296-4340-b0b9-5ce8525312dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:b4:45:05:f0:8f:3b:3c:bf:a4:49:3f:e1:
                    39:e5:64:37:ff:01:5a:3d:9b:c2:74:61:3b:26:66:
                    db:e1:e6:0a:b5:55:2e:06:fb:1a:77:a5:90:f8:20:
                    96:96:b0:dc:38:4a:42:f2:79:04:de:7c:3a:78:f4:
                    b3:49:3f:7e:c5:a0:69:67:81:46:13:5f:68:0f:0c:
                    1a:7a:a5:40:72:6b:d6:b1:67:55:75:60:fe:92:63:
                    41:d2:56:3e:12:5b:f6:6c:92:bf:89:62:0f:8c:1c:
                    3d:e2:1e:9d:13:16:a5:f0:4c:7f:2c:44:b9:bf:0c:
                    9d:8e:2c:b7:c6:cb:ee:98:b0:b0:80:86:3d:7a:21:
                    2b:30:58:4d:59:58:86:66:76:ac:a8:5e:d2:86:5b:
                    b7:51:1a:6f:34:ce:c0:e6:b4:d9:35:94:fa:a4:88:
                    87:0e:a0:c9:5d:69:64:c7:91:21:6c:16:97:ae:5a:
                    69:c2:12:dd:6b:43:12:c9:58:17:21:82:ca:00:f8:
                    fb:b6:50:11:92:00:e6:61:07:0d:aa:f7:08:e9:45:
                    51:e1:b2:56:63:6b:08:ef:46:c0:b3:aa:e2:76:45:
                    47:86:94:a6:af:25:3f:c8:7d:2a:df:c5:8d:31:1f:
                    b7:ec:2c:84:75:4c:f7:d8:13:11:0b:a9:95:db:4d:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A6:AE:FC:BB:89:06:CA:45:05:57:DC:2D:FD:0B:42:F4:EB:1C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:0c:0c:4e:39:d6:f3:73:cc:ab:f4:13:44:ad:19:17:1c:b1:
         04:d7:23:5a:63:1b:78:0b:a5:d4:19:71:a0:7f:32:39:1b:e6:
         b7:1b:12:4d:02:e2:0d:82:ef:00:af:5f:7a:e1:2d:8d:49:c0:
         28:2d:dd:2c:bc:d2:b7:be:e9:c7:c0:b0:11:43:ac:6d:ce:0e:
         59:de:88:11:4a:6a:82:41:09:47:4e:63:f5:7e:4a:0f:f5:25:
         5f:81:c6:33:1b:99:0a:c6:3a:b1:f5:f5:9e:37:c6:c1:46:3b:
         38:2a:ec:74:c1:4b:3a:18:dc:ae:5d:15:d0:cc:05:6d:a0:bd:
         4b:35:6a:bc:9b:f4:16:81:59:8e:84:c0:dc:a0:cf:65:c9:ac:
         7e:77:b4:4d:7e:a1:16:5d:54:fa:d8:b5:23:45:2d:b4:17:4f:
         81:64:a4:0e:bf:4e:58:a6:4c:a2:d2:c1:90:ff:0f:5c:c4:59:
         a5:48:4c:8f:03:2b:13:ac:d5:17:3c:a4:36:f5:8b:2e:5f:fe:
         39:b2:63:a2:99:85:17:64:f0:f9:26:0a:29:8b:09:96:40:60:
         5c:9f:97:ba:9c:a3:a7:00:8a:e6:b8:01:31:15:95:6a:c9:c7:
         e9:52:b2:d6:40:f5:fd:6a:74:57:ca:6e:6d:1d:1e:5f:74:15:
         7b:12:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:10:49 2025 by rpki-client