Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7da24ac1-cc47-3729-b095-3490a7c84733.roa
File:                     7da24ac1-cc47-3729-b095-3490a7c84733.roa (raw, json)
Hash identifier:          B38UU3sSvISwn32sRbGIN2RqvFtmYa478YR17/vZvu4=
Subject key identifier:   BE:42:C8:5A:D1:31:B9:3B:2A:F5:01:90:BA:05:3C:0B:8B:35:68:36
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161DD4EA7CDE8C256E7B880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7da24ac1-cc47-3729-b095-3490a7c84733.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        66.188.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:dd:4e:a7:cd:e8:c2:56:e7:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=16a105b3-c918-4d2a-9f1a-023122cda8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:77:98:e2:37:b9:d1:d7:b0:9d:5e:14:b4:
                    03:e5:65:dd:88:9e:42:f0:4d:0d:5e:1d:50:42:bf:
                    b1:94:5c:03:47:93:1e:de:b1:4d:f2:60:a4:5f:f5:
                    cf:28:83:f2:71:d3:60:7c:63:7a:5a:65:3d:45:03:
                    81:dd:ee:20:42:92:1a:58:b8:0f:b9:98:66:fa:91:
                    fb:2c:09:7d:cc:57:a2:d5:72:27:b0:08:b8:de:5b:
                    fb:ef:10:e3:01:7f:ea:a8:4e:7e:ab:cd:5e:39:27:
                    58:00:7e:58:8f:f4:a5:e4:28:f6:6c:b4:cc:67:77:
                    fd:7e:45:13:47:17:98:a2:e1:b7:42:73:2e:eb:92:
                    8e:41:87:af:ee:e2:be:96:21:e8:a9:a7:d6:04:c3:
                    d4:2c:c1:33:1c:74:fc:0d:8f:d7:5f:fb:5d:c1:c0:
                    ee:68:48:03:e0:2a:64:43:3b:37:14:1f:2f:e2:86:
                    13:5a:df:b0:31:d6:48:17:18:bd:57:9c:d9:21:64:
                    c7:ee:89:9f:a2:c8:c8:21:41:9e:82:49:f1:ce:76:
                    16:0d:e0:5f:ab:41:af:54:4d:fc:3a:ed:60:9b:38:
                    ce:78:89:9c:68:13:cf:97:c6:9b:b0:00:38:da:38:
                    6b:5e:94:a3:7d:0f:a9:4f:9b:42:e5:d8:36:4c:1c:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:C8:5A:D1:31:B9:3B:2A:F5:01:90:BA:05:3C:0B:8B:35:68:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7da24ac1-cc47-3729-b095-3490a7c84733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.188.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:36:7c:33:c9:b6:9a:ad:f6:2d:fd:1d:ae:2c:7f:4f:90:88:
         5b:11:d7:e7:07:2e:1c:4c:0e:1f:34:b8:31:4e:d7:4a:9c:9f:
         d6:9f:33:30:b5:b7:9f:0e:e6:b9:cd:ca:6f:8e:c6:7b:e7:98:
         47:95:2e:d5:d7:91:73:00:b6:c1:fa:f3:4c:ac:18:df:d9:27:
         0d:a3:ce:b9:01:54:ab:e4:9f:e4:95:5c:ca:d5:19:e0:d7:ea:
         1b:32:b7:61:8e:6b:e3:73:d4:22:69:c8:78:db:70:06:9a:51:
         63:50:92:ca:5c:74:bd:32:ac:19:b5:f4:47:07:f1:c6:67:e2:
         ac:83:25:00:e9:00:ce:ce:d3:7a:3f:8d:dd:5d:da:36:c7:a6:
         bd:d5:de:a7:04:52:ca:f4:82:7a:70:2b:d9:76:b4:f1:97:62:
         b1:a7:1b:ce:de:a7:be:15:cc:0d:3d:d9:78:ab:f6:6d:91:be:
         95:41:6b:74:02:e6:45:e3:5b:a4:4b:e0:4e:a7:79:9e:a3:cd:
         02:2c:ce:ae:b2:c4:07:38:8a:0a:49:05:96:81:d7:99:fb:bb:
         23:b3:84:1d:10:38:47:ff:77:c4:00:15:c9:5c:d7:27:d4:82:
         c3:7b:53:d2:fa:f6:4c:ee:0f:f6:9c:55:05:f4:2e:fd:90:4f:
         43:76:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:32 2025 by rpki-client