Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/93fa2d19-8ac9-3fe1-9ce3-199c72662afc.roa
File:                     93fa2d19-8ac9-3fe1-9ce3-199c72662afc.roa (raw, json)
Hash identifier:          v8/rRQsKWIoRuc4Hk6ng/f1fAJUpNm9lQMttO8oc6Zg=
Subject key identifier:   A4:37:CF:97:5D:3D:0F:1F:CB:E0:A0:C1:46:E6:8B:F2:35:EA:22:AB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B20DDF02F560D0D60D300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/93fa2d19-8ac9-3fe1-9ce3-199c72662afc.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3360
IP address blocks:        66.54.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:20:dd:f0:2f:56:0d:0d:60:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=c069a150-f3cd-4637-aba6-0d244b67edd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:ea:ee:47:76:b0:f4:2d:51:34:3b:ef:10:
                    bc:76:e4:19:c8:4b:57:62:de:04:77:45:43:e9:fa:
                    28:0f:6a:15:3a:0e:4f:3d:c8:fd:9a:00:04:29:15:
                    ca:f9:3f:d9:17:4a:00:a8:73:e8:ac:37:d5:d9:ee:
                    55:04:7e:9b:35:87:00:d6:e9:12:6b:db:c0:c8:77:
                    ff:fe:68:b7:19:e9:f7:08:3d:e3:36:2a:3f:7e:f2:
                    e4:06:05:77:87:87:c9:7d:c3:b3:3c:88:52:1e:2f:
                    1d:ed:ad:f3:37:77:bc:5f:b3:ef:df:59:e8:0c:00:
                    a2:d1:f1:a7:90:d9:aa:04:d6:ec:3c:ad:94:2e:e4:
                    94:3f:0c:09:0b:c3:9c:45:4c:cc:f5:f3:81:2f:0a:
                    53:b6:2f:1e:92:e4:7d:17:ca:d7:75:01:5d:bd:ea:
                    dd:16:97:af:b4:d7:8a:ee:6a:e1:3c:c7:b2:72:59:
                    d6:a0:8c:fb:cd:27:23:33:74:0a:55:af:87:e6:fb:
                    f7:7f:59:9f:c4:28:25:71:49:b1:ce:60:73:fc:d1:
                    90:93:37:39:51:82:c7:16:72:6b:a4:11:cc:99:24:
                    bc:90:6c:31:d5:95:c4:df:3b:27:41:7d:81:3a:34:
                    b3:0c:c8:16:76:58:e4:ba:16:d3:f0:68:37:cf:b7:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:37:CF:97:5D:3D:0F:1F:CB:E0:A0:C1:46:E6:8B:F2:35:EA:22:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/93fa2d19-8ac9-3fe1-9ce3-199c72662afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5a:10:7f:8a:55:b0:48:fb:5a:e3:50:86:7a:1c:5d:96:39:
         ca:05:b4:d5:6d:c8:2f:84:89:a2:e9:73:17:26:f6:e3:91:cd:
         f4:d5:3f:9e:f1:b1:9b:87:08:0d:2a:fb:da:30:b1:bd:93:9f:
         35:55:49:f9:d5:f9:4b:67:5b:b6:3f:2a:00:89:d8:0f:07:69:
         4e:8a:81:29:2f:95:61:cb:8c:56:53:97:1e:c5:99:db:b5:13:
         37:67:18:21:0d:d1:0b:af:d2:a6:11:12:f2:e7:f9:3e:2c:9d:
         58:da:ce:4e:fa:4a:37:91:97:ab:40:fa:67:4d:6e:cd:7a:04:
         3b:b2:8b:82:b3:ce:3b:cd:6c:53:f0:2c:98:37:36:bd:0e:21:
         4b:1d:96:eb:97:9f:b3:33:be:f2:06:c5:32:bf:41:58:61:27:
         0f:9b:15:58:2a:94:6f:db:2f:d0:c1:21:bb:01:db:e4:1f:c1:
         41:21:a9:21:e1:e2:e7:2d:80:57:fd:b3:d3:57:06:7c:0f:61:
         3d:01:68:d2:fb:b2:d4:1e:9e:f8:09:2d:91:06:b9:07:04:d4:
         ba:4e:35:20:d3:26:7c:e4:80:39:c5:0e:1f:12:1f:34:17:f5:
         e6:53:7c:52:b9:5b:59:e2:7f:9f:6a:81:3d:41:59:94:ee:18:
         36:dd:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:41:10 2025 by rpki-client