Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/cd97753d-ca6b-3444-9aed-99be8d939315.roa
File:                     cd97753d-ca6b-3444-9aed-99be8d939315.roa (raw, json)
Hash identifier:          8DqgbR+7+GP/N/11nP/9PEXE60KhNTKDMmjTWVHN8rw=
Subject key identifier:   47:97:18:2F:81:C5:49:E4:E4:0A:29:3D:CB:CE:AE:D7:FE:08:47:7C
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584A7085E95D75EA8A7A411B5D80
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/cd97753d-ca6b-3444-9aed-99be8d939315.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     22351
IP address blocks:        66.205.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:e9:5d:75:ea:8a:7a:41:1b:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=0dff8668-8ba7-4c73-900d-5fb5f710fc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f4:e1:dd:95:03:bf:cf:d4:80:1e:f8:c4:9b:
                    55:b5:bf:31:ad:dc:0f:73:37:60:30:21:db:1f:b7:
                    22:58:7b:8c:d3:b5:ae:85:1c:25:02:cd:44:fd:01:
                    bb:e8:6a:fd:60:5d:10:cf:66:51:ff:46:d4:ed:b5:
                    45:d5:3b:43:66:50:a6:a1:11:bb:fd:43:4d:68:3f:
                    ff:76:ef:69:6f:10:77:92:2a:de:f8:e8:83:5f:52:
                    55:11:26:65:20:c3:6d:d6:4a:3c:1c:93:5b:bd:d6:
                    a1:3c:dd:f4:45:4c:cf:48:3a:22:b0:02:8f:f2:e6:
                    bd:a5:8a:51:56:87:ed:32:0e:e8:ba:89:61:36:b4:
                    b6:ec:20:f2:22:7b:24:52:85:90:bc:e6:24:87:4e:
                    d8:a1:bd:88:1f:93:4a:07:71:37:39:35:69:7b:99:
                    30:c8:32:df:be:ae:c7:dd:1a:62:4e:51:2e:6f:49:
                    69:dd:44:73:15:0a:63:e0:39:7a:e1:00:28:68:3a:
                    d6:b5:c9:de:43:70:d8:2e:24:bf:ec:6e:3d:bd:64:
                    4c:27:fa:29:06:9b:8b:02:e5:f5:65:a8:66:7c:31:
                    a4:49:2d:ef:3e:bd:86:89:29:5e:eb:61:bc:1d:ce:
                    58:30:f3:50:fa:bc:93:b3:00:fa:68:b3:0f:2f:79:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:97:18:2F:81:C5:49:E4:E4:0A:29:3D:CB:CE:AE:D7:FE:08:47:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/cd97753d-ca6b-3444-9aed-99be8d939315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:79:2f:66:2d:34:34:58:24:8f:10:b6:d8:98:c7:19:79:31:
         37:8f:b5:7a:f2:2d:8e:50:04:86:3a:16:8b:a6:1d:04:1f:c7:
         ab:0e:bd:4b:6e:76:86:ff:d0:a3:91:a7:f6:b1:9e:e4:b2:09:
         c8:5b:aa:d8:b5:4c:b5:d8:71:d0:2d:8f:da:71:52:cd:e0:11:
         b8:42:1c:43:75:51:4c:1f:66:b7:48:9b:2f:a9:62:50:8c:ed:
         47:c9:2b:95:43:46:15:55:5b:73:60:e5:ca:dc:dc:96:e0:91:
         42:f2:7b:93:d4:4b:b1:e7:ca:81:92:2d:d4:a5:e6:bb:fe:62:
         04:aa:5c:d6:2e:7f:38:5a:4a:c0:38:d1:5a:73:49:2b:e3:b7:
         37:1f:9e:b5:31:ba:a3:ad:0e:8e:33:be:1f:76:3e:48:97:68:
         2e:8d:1b:b1:2c:7a:5d:39:aa:31:78:7a:43:33:40:33:21:4e:
         4b:10:5e:a5:ad:dd:c8:15:af:68:6d:26:17:47:bf:62:ec:43:
         1a:14:cf:7e:33:7e:ea:8f:af:cb:ea:1f:ba:48:5f:97:64:2f:
         ae:80:5e:9b:b9:6d:5d:d9:bd:3f:12:c0:d2:f2:53:12:85:23:
         d8:64:19:2f:9c:ea:17:44:e3:46:c0:9f:b3:3f:ff:aa:1d:b5:
         84:15:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:51:44 2025 by rpki-client