Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b88d308-cc5b-3f80-8362-ae78195a9350.roa
File:                     6b88d308-cc5b-3f80-8362-ae78195a9350.roa (raw, json)
Hash identifier:          TBo1+qGkuX615KCymaP/yvVgh1ZbJDhSuvQr6d5WM9M=
Subject key identifier:   68:0C:23:E7:EE:08:6E:04:2C:AF:4F:98:60:4E:61:98:A1:27:91:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF7CF682A96442CBD2710
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b88d308-cc5b-3f80-8362-ae78195a9350.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        66.174.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f7:cf:68:2a:96:44:2c:bd:27:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3be2ac1d-6777-42b9-8bec-82e2f43468f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:c0:38:ef:02:48:26:7d:42:82:a4:08:9c:
                    00:cb:a5:7f:05:99:30:b7:c7:78:ff:f8:f0:17:ae:
                    1e:74:e9:f1:30:7c:f1:18:7f:85:55:6e:ce:29:58:
                    60:92:1c:d9:35:63:e3:70:84:42:0c:26:86:3d:41:
                    85:1e:d3:7d:13:75:c7:7f:8c:53:cf:b9:50:1b:4b:
                    56:31:be:7f:18:6b:7c:77:ea:ea:8d:77:b8:62:c2:
                    57:2a:6a:77:9b:26:ed:d5:89:a1:17:5e:db:9f:73:
                    2b:31:7f:eb:c1:09:bd:6b:9e:1b:b7:e0:e5:e8:c8:
                    5e:21:3c:b3:f6:69:0a:7f:51:71:2e:b3:8f:03:46:
                    d2:07:d8:ed:f1:95:3d:61:18:f0:fe:0d:1d:2f:17:
                    57:5b:2d:ce:04:6c:90:20:ca:f3:d2:c1:0b:95:bf:
                    b5:f4:f9:0a:46:fd:2b:aa:3c:87:62:d6:11:ed:9a:
                    30:d3:ff:32:19:3d:f6:0d:b8:7a:a6:20:b6:a8:5f:
                    69:42:40:b4:de:f3:d3:96:c2:27:aa:52:38:33:75:
                    7a:7d:34:e2:19:6e:58:1e:8c:49:72:dc:a8:96:33:
                    41:58:19:ca:1b:88:d9:3f:37:f4:70:12:6a:a5:23:
                    3b:3b:b1:04:d3:6e:fd:b3:34:5f:9c:26:3d:23:83:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0C:23:E7:EE:08:6E:04:2C:AF:4F:98:60:4E:61:98:A1:27:91:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b88d308-cc5b-3f80-8362-ae78195a9350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8e:45:f1:21:82:2e:ee:7f:75:30:58:c9:3a:98:0e:e4:da:
         10:6f:61:1c:d2:0d:52:b2:00:31:01:5a:0c:2b:53:cf:8b:7d:
         1a:7d:8c:db:f1:f4:d0:51:b1:05:f4:7a:73:2b:29:12:55:d1:
         9d:76:2d:10:dc:ee:0d:ae:19:41:4c:8c:d5:5d:32:e6:1c:f2:
         4d:5c:18:4e:11:e0:78:91:8e:2a:ed:0c:e8:cc:48:ab:18:a8:
         33:47:e8:cd:05:b9:2f:6c:17:7b:4a:30:2c:cd:4d:c1:e8:fc:
         05:53:dc:68:42:fe:5e:cc:cc:27:b8:2a:6f:64:7d:3c:d9:c2:
         a1:9e:66:88:b6:ef:8c:2a:c8:38:15:b1:12:95:69:50:0d:85:
         e1:8c:27:96:50:0d:6d:2d:ab:d9:52:1c:2a:7f:45:01:e3:5d:
         d2:ec:1a:8f:35:2f:10:ea:99:00:f1:e0:7c:87:3b:15:e8:88:
         81:4f:00:1e:48:0b:55:be:40:fd:e1:3a:7f:b7:10:d4:fd:00:
         fa:e5:14:9d:72:f9:41:d0:99:ab:3c:50:0c:b7:b4:dd:ee:a7:
         38:18:e0:5a:74:82:cc:a2:45:07:d2:de:c0:57:f4:c9:95:52:
         3d:a4:85:3c:04:13:c5:5a:89:b2:94:48:52:9f:2e:c4:ea:e0:
         b3:48:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:53:35 2025 by rpki-client