Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa
File:                     3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa (raw, json)
Hash identifier:          Ki7u+6QtmZP7r797Yl6DXK5EcVsFCMG6l7ZBr9AkRms=
Subject key identifier:   62:13:0E:73:27:DF:46:BC:7E:6D:32:50:FC:50:35:9F:6A:CA:8E:B5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B21D37812DD775D9F6BF0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     203
IP address blocks:        66.54.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:21:d3:78:12:dd:77:5d:9f:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=dbc7a612-6460-4373-a439-169bd7101ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:c7:2d:45:1c:f1:81:09:c7:fe:af:9e:6a:
                    fe:82:28:49:46:00:d3:65:4a:bb:89:a9:6d:83:a2:
                    a7:08:fc:f7:bf:1b:94:a0:f8:a8:f8:9d:df:29:e6:
                    31:4e:ab:80:92:76:96:c6:df:39:ce:9e:aa:ca:64:
                    66:10:3d:99:49:a6:22:01:85:00:dc:27:5e:fc:d4:
                    81:bc:c9:65:99:82:24:39:af:e0:20:d8:f4:f6:bc:
                    b3:4b:d0:a6:49:98:60:fc:c9:d6:24:7b:c8:3d:c6:
                    72:95:24:35:30:61:ff:91:08:bb:f1:af:26:ef:9d:
                    d4:d3:b8:38:2c:37:3a:94:a1:d3:05:1f:d7:ed:ca:
                    ce:55:88:9f:13:73:c1:af:2a:da:4f:cb:5b:71:80:
                    ec:45:05:e0:24:81:49:38:c7:f6:32:f8:53:a3:bc:
                    98:62:b9:bc:6a:9d:01:4f:01:32:34:48:fa:ef:d9:
                    18:0e:45:4e:e6:e3:29:89:e7:df:53:54:6a:75:20:
                    93:cd:25:af:5e:c9:fb:26:60:fe:bd:21:c2:39:83:
                    65:69:e8:61:5e:46:4b:5d:0a:28:5f:b5:56:fb:6f:
                    e6:1f:de:a7:23:fe:76:5c:44:03:18:9a:ba:69:34:
                    64:0d:b5:d0:55:b9:71:46:77:4c:6a:2a:b4:fd:88:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:0E:73:27:DF:46:BC:7E:6D:32:50:FC:50:35:9F:6A:CA:8E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a01770b-3fb2-38c4-86b9-e9cf4e186c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:cc:7e:00:a5:18:82:e6:7e:58:7c:6d:4c:29:e4:3a:a3:
         01:23:c3:45:18:ff:21:2a:04:27:42:2e:29:00:a3:f2:66:6f:
         42:69:5d:a4:7a:e8:52:80:57:e0:f7:fa:57:52:f4:76:6a:13:
         40:d0:ae:1e:d1:39:e5:c7:7b:7c:2b:d1:15:e3:5b:50:72:ae:
         04:82:b1:74:7d:93:4e:98:70:85:be:f9:93:49:f9:d8:db:24:
         c2:e9:09:53:4d:ab:5b:a9:b6:4a:7f:be:77:32:60:9d:95:fc:
         03:b7:d3:2c:91:41:4e:b8:66:5d:32:66:40:ae:86:19:49:40:
         88:11:15:8c:e5:6c:35:69:29:ea:84:00:54:10:25:a9:e7:77:
         f4:77:8c:53:b5:9e:09:2e:95:b4:df:aa:b7:85:db:22:68:be:
         05:9f:1e:1b:d8:2a:f5:30:07:5b:c3:ee:27:53:08:a1:a4:ff:
         41:2b:70:57:76:97:95:7c:bf:02:cc:38:c1:e0:3f:d5:20:c1:
         2e:29:fc:08:d4:38:54:50:78:6e:b7:60:7f:48:c5:bb:51:11:
         98:7b:63:98:82:29:43:5e:08:6a:d3:04:dd:80:b0:94:f6:27:
         6a:eb:e6:ef:3a:33:8c:eb:ec:9d:44:ee:da:e9:62:50:e6:ca:
         8b:36:b7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:29 2025 by rpki-client