Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa
File:                     62db0999-415a-3faf-901c-9623d2cfe9e0.roa (raw, json)
Hash identifier:          zm+3kypeXuc+1A7XYLZv8kgzGME9eLwxqqKjZQcDY+8=
Subject key identifier:   04:D2:0E:CE:4A:73:4B:22:C3:FE:06:4C:97:48:7D:8A:A3:F9:96:44
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A814655C2D3D52710C978E600
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     400061
IP address blocks:        66.118.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:55:c2:d3:d5:27:10:c9:78:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=44652690-1dc4-4bb4-be53-34df6c406449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:d3:c3:df:be:f1:ba:10:a9:dd:fb:0b:a7:
                    bd:24:17:46:7e:d5:01:10:e8:22:94:39:50:43:fe:
                    37:03:2e:45:63:23:26:8b:2f:bf:f1:fa:cd:d2:4c:
                    53:38:10:99:d9:c5:5f:c9:e0:2b:62:a5:6d:13:3d:
                    87:df:fe:80:29:08:39:48:e7:fd:71:e9:ea:4a:e2:
                    8e:90:f1:96:0f:ba:54:57:51:8e:f6:e0:1e:e1:64:
                    3d:29:54:e9:02:04:02:07:ca:7b:ca:bc:68:70:16:
                    b7:44:76:3b:e5:80:a4:ed:1f:39:5f:a7:3a:39:31:
                    84:74:ac:bb:3b:c9:da:41:0f:f5:e8:00:32:0d:0f:
                    2d:1c:bc:91:2b:aa:2a:26:af:ff:a3:51:fe:1c:1e:
                    29:ea:23:61:f7:ee:f7:34:ea:1f:c7:ad:6a:d7:1a:
                    c7:15:21:0a:ea:f2:a5:fd:46:e2:2b:c3:d4:8a:eb:
                    65:fd:16:95:f2:8a:bc:74:75:de:f3:79:4e:ca:83:
                    6f:ff:10:6c:8c:61:a4:36:41:b2:ad:ca:73:e5:1f:
                    ef:b3:19:ba:f5:47:75:8d:06:8d:d7:47:c4:73:9d:
                    15:ae:c4:7a:16:36:53:cf:18:ae:b2:bc:bc:0e:91:
                    be:e3:a3:d2:a2:79:8b:53:ba:b7:62:f5:a5:71:bb:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D2:0E:CE:4A:73:4B:22:C3:FE:06:4C:97:48:7D:8A:A3:F9:96:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/62db0999-415a-3faf-901c-9623d2cfe9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:64:e9:fa:4c:aa:38:8c:67:4a:67:e2:2c:ad:b7:50:c9:39:
         67:f8:db:d7:d0:5f:c4:e2:9c:05:1d:d8:c0:2e:c3:0b:5f:5f:
         db:89:1f:ff:98:6a:df:f0:ba:01:96:f2:31:13:26:dd:29:21:
         8f:73:d7:24:2b:0c:cc:3d:5e:e3:94:8b:7b:90:3f:99:72:bc:
         47:51:d6:d3:57:78:2b:b4:79:54:96:04:ea:3e:76:2b:75:50:
         e4:75:fa:5f:f1:14:55:2e:da:ab:22:62:fd:1b:6a:e3:28:7f:
         3b:1f:d0:7c:72:91:e0:a1:1a:73:79:12:84:0a:7b:5c:f0:4f:
         0d:39:cc:42:68:d3:c9:42:2e:d1:10:c8:5c:67:fa:aa:63:71:
         28:ed:45:53:4c:df:6b:5d:13:3a:6d:26:c5:a8:5e:fc:af:30:
         2f:9c:31:f3:3f:9b:34:74:20:b0:ff:9f:02:1f:9a:c4:6d:ce:
         ce:fe:89:16:58:10:dd:cd:ce:00:aa:55:c7:08:dc:54:56:2c:
         3c:fb:dd:bd:6a:82:9c:8f:aa:78:cb:79:62:d6:73:25:b0:a0:
         17:e5:45:c6:6c:72:c3:f9:20:21:d3:20:6a:70:75:85:9e:7d:
         4c:11:ba:aa:00:ee:1b:47:b2:a6:01:15:5e:d2:e9:c1:29:d9:
         29:2c:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:43 2025 by rpki-client