Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb2626e6-eb47-3879-aed0-564eb0850b04.roa
File:                     eb2626e6-eb47-3879-aed0-564eb0850b04.roa (raw, json)
Hash identifier:          tjdxzRoxs0rNGcrb/ZYr0FGIOrn1CLGD/PgZY6PfHXA=
Subject key identifier:   44:41:EC:CB:E3:EB:63:B9:62:6E:D0:39:4C:41:D1:ED:9D:40:50:B2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161E1EE96FE913B6E810C40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb2626e6-eb47-3879-aed0-564eb0850b04.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        66.191.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:e1:ee:96:fe:91:3b:6e:81:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=8e641238-68d7-4242-9f98-0c81d577bcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:dd:e8:49:a4:a8:cb:27:9c:d8:5b:18:62:
                    1a:44:39:1c:ae:04:f0:aa:15:4e:d9:27:c4:ce:15:
                    72:2d:49:1c:9f:7c:ba:89:7b:86:2b:fb:07:7c:83:
                    9e:f6:69:1a:d5:0e:64:b0:37:18:d9:cf:60:1b:27:
                    84:f2:e2:85:da:8c:99:e6:ef:79:5c:f1:10:20:0b:
                    b7:cc:66:25:e0:6b:fe:9e:0d:78:c7:0c:65:e4:6f:
                    b7:e3:da:e0:bf:6f:74:51:30:de:12:4c:88:1b:fa:
                    36:2c:b1:0c:a4:a6:8a:fe:46:15:d1:bc:9a:e7:58:
                    19:c9:35:34:c3:c6:bb:c5:a0:54:c2:17:71:1f:4e:
                    03:93:cd:7d:1d:e9:bf:75:67:1e:92:b0:00:3d:df:
                    85:12:e6:bc:5d:59:db:09:dc:38:3c:48:46:b5:42:
                    76:19:d2:87:37:c3:97:7f:81:82:7d:c9:24:96:c3:
                    1a:57:16:82:cb:06:02:4d:ab:1d:07:47:10:a1:24:
                    da:23:e4:99:7e:3c:85:c3:d1:ac:5e:0b:96:a7:d2:
                    a4:30:74:21:d4:d0:c1:6e:5a:4a:38:4d:67:ba:e9:
                    97:25:b3:a3:7d:94:ef:9e:60:c2:d0:31:f9:4e:02:
                    dd:1b:4d:d1:10:a8:f3:66:aa:7f:59:7b:07:03:71:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:41:EC:CB:E3:EB:63:B9:62:6E:D0:39:4C:41:D1:ED:9D:40:50:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb2626e6-eb47-3879-aed0-564eb0850b04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:0c:f2:e8:6e:12:74:20:cb:f1:76:75:5f:6c:8c:16:fa:cc:
         3f:23:dd:8f:3d:83:31:15:f4:43:ec:34:ad:56:5c:ba:b6:ae:
         6f:21:b8:3c:cc:ca:bb:b4:39:06:c1:de:3f:7e:70:b3:71:da:
         48:77:15:08:92:31:5e:78:11:d7:89:bb:84:1f:8e:ed:63:8c:
         bd:04:dc:d3:46:ce:21:81:b5:18:88:72:94:9d:7a:6a:87:d4:
         87:c6:58:66:af:ad:36:97:46:ad:ad:af:69:be:b2:b5:0a:65:
         4c:28:e9:5b:0b:e2:bd:b6:60:dc:c6:8f:12:a3:51:ba:e7:b8:
         71:44:b0:76:69:a7:15:ed:d8:c7:eb:e0:24:8b:d6:a5:61:d7:
         ab:e8:e8:ac:07:ba:c5:d9:95:af:5f:4d:ba:d3:d3:66:78:d6:
         70:e0:9b:06:2b:d5:85:a6:c7:92:85:89:f8:2c:6f:f4:7b:d4:
         a7:9d:da:a9:2d:18:31:94:2b:df:bb:ea:f5:3b:b8:aa:5f:5e:
         51:48:9a:17:7a:62:65:f7:4f:6c:12:60:34:29:08:7f:7f:d6:
         0c:c3:00:3e:cf:3b:96:4e:0f:06:ca:60:6f:5d:b4:f9:19:da:
         61:6a:b3:e3:c9:df:01:a4:53:75:d1:18:ee:56:fb:8a:93:63:
         51:d8:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:26 2025 by rpki-client