Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/775c2311-0d32-33cb-9b15-1e5ef85b973f.roa
File:                     775c2311-0d32-33cb-9b15-1e5ef85b973f.roa (raw, json)
Hash identifier:          BYHk4PzzmcTcG6UTaRzLgO6r61u9c7uwI7NRLa+PmdU=
Subject key identifier:   58:C5:3B:0C:AB:BA:F0:BF:B3:2D:16:B6:9F:81:C8:66:D2:55:52:36
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584A8C70C595F3C21FAB957760E0
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/775c2311-0d32-33cb-9b15-1e5ef85b973f.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     393262
IP address blocks:        66.198.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c5:95:f3:c2:1f:ab:95:77:60:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=0f4fd737-3b52-4c04-a0d7-98b1aaa93843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:9e:67:7c:67:96:e7:f7:28:d9:87:97:ff:
                    8a:ef:b2:23:6f:76:ae:17:43:71:ad:0c:33:d7:5e:
                    e3:e8:3d:81:fb:d3:9f:d6:41:8c:ea:df:7c:04:61:
                    ab:ad:8d:64:3b:df:94:3f:12:ef:60:f3:11:cc:5e:
                    34:ba:3f:18:bf:56:92:ee:70:a0:5d:5d:4d:8f:b9:
                    b4:33:f2:a8:2a:0f:e6:66:8f:74:ee:99:91:4f:7c:
                    fa:b7:4a:31:8a:bf:34:b3:63:56:e7:7b:d1:74:23:
                    89:9c:02:0b:2a:bc:88:fe:99:4a:43:78:a2:b2:41:
                    27:9e:f8:86:08:3e:77:0a:ca:a1:df:fd:25:37:5a:
                    a4:7b:c7:7c:1d:dc:5a:9c:32:3d:36:92:be:04:c9:
                    36:f1:99:5f:dd:68:07:8a:b1:ad:eb:b9:76:08:94:
                    7a:94:72:b4:85:3c:0a:e8:cd:27:40:cf:27:73:01:
                    ba:ff:67:cb:76:68:81:07:73:24:de:7d:b2:39:02:
                    40:f3:73:9b:f4:86:dd:e3:cc:ba:e1:d4:27:c9:4b:
                    6a:3e:3d:e5:46:ad:d1:a2:2d:8c:c1:73:c0:74:8d:
                    28:df:a5:b9:b0:c6:36:12:3b:c0:2a:c0:5e:d1:7f:
                    0a:96:8f:4f:5b:a3:c2:c7:6c:6d:2f:9d:ec:c9:aa:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C5:3B:0C:AB:BA:F0:BF:B3:2D:16:B6:9F:81:C8:66:D2:55:52:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/775c2311-0d32-33cb-9b15-1e5ef85b973f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:69:ac:51:d2:89:aa:5d:ac:08:00:54:c3:61:f8:14:96:
         ee:d0:25:7f:5c:4c:1a:42:38:ab:84:7c:67:86:e3:a9:52:9e:
         7c:57:3f:82:c4:ff:30:ad:27:f8:10:f7:07:d5:2f:a0:ec:57:
         b3:de:c7:d0:ff:fc:cd:bb:25:d0:d0:5f:df:db:2a:70:d8:42:
         ac:06:06:0f:da:8d:7c:f1:c4:c6:33:40:b5:8a:b0:c2:67:d7:
         9c:b9:ac:6c:e3:19:e6:0c:ed:25:de:f3:d3:4b:a5:b4:2f:da:
         5a:d0:87:a2:5d:6b:03:e9:25:4e:0d:79:c8:c5:d5:d8:2b:c1:
         6a:68:73:5f:5d:23:eb:b4:63:72:b1:f3:55:a1:ce:5d:73:6b:
         15:16:06:35:23:82:9a:f7:28:0f:d8:fa:3a:ce:c8:33:96:14:
         6c:cd:b6:4d:9e:a1:1e:80:e1:96:56:c1:bd:7a:fd:64:b0:b6:
         61:82:2c:19:af:fb:a8:06:a4:5b:b2:be:59:85:37:96:b8:53:
         cf:ab:e9:18:dd:08:9a:5d:00:dc:4d:96:f2:54:d9:7c:57:18:
         04:60:8e:be:b0:36:6f:77:a6:bd:f9:21:a9:80:6f:51:4c:47:
         cf:37:8d:54:d3:05:d1:2b:e6:12:70:c8:7a:65:f7:af:9e:af:
         96:6f:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:57 2025 by rpki-client