Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa
File:                     cf63350e-58a3-37fa-b946-5bfd45a67c05.roa (raw, json)
Hash identifier:          fFsaB5xgWmQfasxCnel7/Ua1NvtP9WxZdZP8Aci1++U=
Subject key identifier:   5E:1F:CB:EB:3B:29:BB:A7:C1:77:C7:77:98:2D:53:4E:0B:A6:64:96
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A6C55E11DE21DEDA19ED87058
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     401415
IP address blocks:        66.231.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e1:1d:e2:1d:ed:a1:9e:d8:70:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=e2c2eb7a-2c4e-4043-b5c5-47533da00965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:93:a2:22:3e:d7:07:c0:c2:d9:43:22:b8:
                    8a:d2:76:68:42:3a:e4:be:21:c7:c4:26:f6:89:94:
                    74:93:01:88:70:27:4f:e8:f8:8f:13:28:d2:ad:14:
                    0e:ff:a9:cd:84:b2:ed:7c:ef:b8:15:1c:84:86:4c:
                    38:ce:f5:15:9f:49:8e:ce:62:63:12:e2:4b:fb:5b:
                    79:40:51:f3:e1:1c:72:6c:fc:30:ca:e5:fb:fe:e9:
                    0e:45:b5:fb:ff:67:d8:11:d4:35:65:f8:e0:62:b5:
                    80:b1:9e:f5:f7:c1:bf:47:f7:cb:da:b5:9d:63:f8:
                    9d:4c:4d:2e:b9:52:5b:69:af:25:7e:55:8c:04:58:
                    c6:21:62:61:64:6a:d0:c1:8f:7d:6e:2d:76:f1:07:
                    ce:ec:16:cf:cc:48:22:16:3e:61:37:32:6b:d6:3a:
                    80:cb:70:7b:7f:bc:5c:5d:26:09:7c:86:dd:90:09:
                    04:b9:d8:2f:51:11:d4:65:c7:06:9e:56:f4:1d:dd:
                    5d:b4:44:c5:b8:61:f2:b1:ce:75:38:5b:eb:7d:71:
                    50:ed:79:7b:63:59:01:60:0f:17:5e:54:a8:fd:df:
                    ce:c2:bc:55:7a:0f:dc:d2:21:16:d8:d1:65:66:5a:
                    3e:70:ce:63:3a:6b:86:70:6d:8b:c7:22:6d:c9:82:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:CB:EB:3B:29:BB:A7:C1:77:C7:77:98:2D:53:4E:0B:A6:64:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:b7:92:54:31:a9:c3:07:d0:8c:24:8d:a8:db:1a:a8:0f:81:
         fb:fb:7a:17:d0:97:b2:d4:01:a8:0e:99:9a:15:ab:8a:3b:90:
         8a:75:f8:0b:7b:da:99:4d:56:f1:d9:9e:c1:c9:b5:58:c8:ff:
         95:a7:04:6f:bc:ed:66:ee:d1:56:90:78:b3:b3:28:54:12:8d:
         bb:70:41:f4:3f:3b:1f:c1:0a:c9:6c:32:f4:92:37:99:36:16:
         99:03:5e:c8:c3:8b:8e:be:d9:8f:dc:2a:f9:40:af:49:c8:94:
         b4:2c:e7:93:74:f7:95:15:4f:ae:f8:28:29:e0:4e:9d:3c:ca:
         05:30:9b:c6:36:a6:8e:92:20:d3:5e:1d:61:23:19:ea:48:13:
         61:22:79:2a:8c:2b:7e:14:28:02:92:5b:e4:c0:be:49:6c:c7:
         82:62:ca:25:2b:a3:d9:68:9c:6e:26:1f:c0:0c:65:f9:bf:02:
         02:5a:8b:90:5d:bd:e6:d6:71:9c:11:3b:a9:43:c7:ec:af:65:
         af:fb:e4:58:72:74:45:48:1f:cd:cb:c2:c9:31:f5:92:0f:5a:
         3d:e3:65:42:cc:48:9f:83:a1:64:7c:cf:aa:31:c7:2f:65:3e:
         92:87:ac:54:cb:3b:14:71:d7:79:a1:a5:98:9b:2c:53:20:e3:
         67:1d:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:07 2025 by rpki-client