Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa
File:                     69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa (raw, json)
Hash identifier:          hva0NOFaSwUFH8QQ5ShAMnojaSj4J+aO2LoSVVyzQWM=
Subject key identifier:   C6:7F:D8:6E:DE:CB:7A:EB:52:7C:E2:4F:12:AB:78:B2:EF:1F:AA:02
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A2ABADD41B4D5036BC349ED00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     395037
IP address blocks:        66.115.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:dd:41:b4:d5:03:6b:c3:49:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ce16c31d-c6f9-49fc-8004-7e64c53894e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:39:6c:fb:8f:f7:22:0c:c3:27:79:8c:bc:
                    44:81:26:00:7a:25:7b:34:11:6b:fa:80:13:55:c4:
                    48:83:3b:aa:c9:5a:6c:3d:b5:ea:82:5c:ed:eb:ea:
                    71:c3:ab:3d:c8:c5:9f:da:1e:79:15:67:01:1f:3a:
                    ca:de:c3:76:93:e9:52:55:8d:b7:70:1b:95:ce:3e:
                    f5:e7:e3:8d:7a:b8:9a:a5:6c:70:5a:51:6e:83:d2:
                    9a:1b:d9:0e:7d:d8:f6:ce:1a:ad:ad:6b:8a:3b:05:
                    8e:58:9f:9f:a4:2d:56:14:b5:54:ce:4f:2a:50:ae:
                    31:8c:71:eb:47:21:18:49:63:4d:db:f2:d2:bd:b2:
                    49:6d:6f:fd:79:0c:3c:0a:11:93:31:f6:98:c2:0a:
                    19:8b:b4:81:d3:8f:4d:aa:88:d5:ac:88:d8:ef:95:
                    d5:8f:cd:dd:c3:a8:03:f4:4b:0b:c6:59:2f:6c:79:
                    d5:dc:77:ac:3b:17:05:da:9d:c4:ee:eb:7b:1b:ef:
                    c8:83:b6:7d:cc:05:f8:46:72:7a:84:d5:d8:4f:98:
                    9b:32:21:2f:fb:82:a9:45:e4:d3:35:50:54:2c:de:
                    cb:a0:db:b0:86:ba:b5:56:c3:5e:13:da:d9:86:0b:
                    cc:f6:41:6e:af:d1:6f:e0:63:9f:2e:20:74:52:16:
                    37:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:D8:6E:DE:CB:7A:EB:52:7C:E2:4F:12:AB:78:B2:EF:1F:AA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/69d9da6a-4b11-34af-bc0f-d2f6ab324687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:a5:09:0e:e4:cb:35:4a:7f:5a:81:40:e3:d2:d6:13:85:
         29:4c:b4:ca:1a:a8:24:b2:e4:24:62:af:1c:a2:8e:a8:ef:f8:
         48:70:e1:0f:f4:fc:78:b5:ef:7d:1a:79:52:be:1a:c4:66:c1:
         ef:d0:53:f4:a6:4a:74:bc:72:48:3f:5c:d0:3a:ef:38:39:5c:
         11:a0:c8:35:db:c6:f4:2a:38:a3:a4:1f:b7:ac:6f:c3:b1:29:
         0e:03:ef:17:c9:8f:19:fa:6f:d3:c1:09:9b:28:2c:9d:a0:ec:
         93:52:d8:c6:2f:0b:17:66:f5:58:07:21:d4:d1:8d:68:e4:b3:
         a8:61:4e:6c:17:18:42:b3:f3:a3:7b:b7:31:db:79:02:18:b1:
         d2:6d:67:be:7f:90:67:bc:9b:0d:3d:d4:f5:d1:ea:75:eb:26:
         f8:2d:24:b6:70:e8:d0:04:7a:5c:8b:23:95:10:da:5a:32:e5:
         b0:53:a6:dc:90:b1:35:ef:39:55:68:28:83:d9:c8:d5:21:b2:
         ab:38:03:ba:39:b0:a1:07:ff:cd:37:c0:93:c0:e0:66:ee:51:
         f9:ea:a4:ba:82:e0:aa:0b:b5:5b:8b:20:d1:81:12:74:fe:92:
         18:5b:87:93:3a:16:54:98:e6:d5:3f:30:2a:f7:d9:0f:09:26:
         a0:11:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:57:25 2025 by rpki-client