Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa
File:                     37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa (raw, json)
Hash identifier:          6vxhyegeJdvPI0Hy5Y8a483s+06lpS3AowOW4FQLD3g=
Subject key identifier:   FC:3C:06:5C:00:60:FB:A3:F2:13:98:FC:2E:4E:E3:C5:52:9E:1E:62
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1614CB9A175C43FCFFBDB80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        66.191.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:4c:b9:a1:75:c4:3f:cf:fb:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=465714e7-cff9-4067-95c5-556619d03f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:b8:d2:b0:a7:10:72:23:74:ea:ec:9c:ea:
                    19:42:b6:42:52:8e:40:ca:33:58:c0:78:f4:dc:94:
                    ec:79:fa:05:d6:67:c2:f4:1b:cf:00:3e:30:ab:99:
                    3a:e1:99:50:9e:3c:18:e4:04:90:79:8b:be:66:eb:
                    42:95:b5:96:91:a2:aa:7d:0f:da:f4:f1:1a:be:2a:
                    ff:f9:68:01:c0:94:01:c2:10:8a:cf:bf:43:cd:c0:
                    8f:48:a7:d0:a3:91:ed:e4:de:b2:09:a6:02:f0:8a:
                    48:53:5c:8a:b4:26:ba:54:42:26:12:89:6d:0a:4e:
                    57:30:a0:ca:f6:48:3a:bd:ef:f3:b7:d7:b6:e6:d0:
                    d9:cc:c9:f2:f6:49:24:2d:cc:75:70:22:15:88:a2:
                    e6:40:ba:6e:49:24:5a:76:0f:e7:ec:57:b7:52:b0:
                    f7:91:c4:85:28:5c:7d:2d:e7:fb:11:7b:87:c7:c2:
                    13:55:25:b5:75:8a:89:8a:5d:5b:ae:56:09:4e:e6:
                    7c:a7:a3:91:bf:d2:7d:1d:2c:95:9f:9d:8a:dd:e6:
                    e7:12:8b:7e:5d:d3:bc:e9:ac:87:45:0d:a3:f5:f6:
                    36:1d:a5:00:c2:94:70:d1:64:35:db:83:e1:fb:47:
                    4f:d4:b4:6b:9b:20:35:44:4d:58:d8:26:70:e3:b9:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3C:06:5C:00:60:FB:A3:F2:13:98:FC:2E:4E:E3:C5:52:9E:1E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37a66f0f-f322-3a25-ba18-aa1f5acd3d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:14:66:f9:f3:c4:46:3a:08:6d:e3:0a:a8:00:34:00:22:ab:
         3e:41:25:12:11:1c:fa:c8:c8:d4:84:fd:f2:a1:7f:3b:17:c5:
         93:f0:d6:02:52:15:f1:5a:d1:ba:89:e6:2c:9e:07:6d:9a:6b:
         3e:a7:d5:11:ba:c8:59:fe:a3:19:2f:a1:2c:b7:e6:bd:76:f2:
         7e:ed:14:49:c5:f0:06:85:29:07:d6:b7:37:ef:72:4e:06:15:
         7c:01:0e:15:10:68:3c:51:78:59:b4:4f:0a:37:28:03:55:b0:
         12:e8:b4:89:ba:71:c4:f7:87:a1:d6:a8:64:b3:73:7c:2b:c8:
         5b:c7:b1:cc:41:27:f7:0d:f4:52:c0:31:a6:6e:fd:f7:22:30:
         35:df:fd:2e:94:4d:03:0b:c2:2e:a4:79:0e:a1:53:63:16:8d:
         84:40:c3:7e:d5:54:55:a0:10:8c:68:ee:8a:76:d0:9f:86:b5:
         25:54:58:24:fc:32:58:38:f8:c3:35:65:72:14:88:a5:b0:cc:
         b6:5e:cc:39:db:54:94:6b:5a:35:ac:cc:55:4c:8e:66:c2:02:
         ff:58:67:07:b3:a2:92:36:11:6d:c3:a4:02:4e:13:87:5f:06:
         db:38:0a:c5:6c:d0:23:b6:38:47:9c:01:b0:21:23:ad:e0:61:
         13:3e:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:47 2025 by rpki-client