Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/47f52259-d832-3c2a-bc43-3f72c7ef644d.roa
File:                     47f52259-d832-3c2a-bc43-3f72c7ef644d.roa (raw, json)
Hash identifier:          NtyszeHtR6mqPfgqoHI9jXyDjIKFyDEAAQvdHw32UkU=
Subject key identifier:   53:2B:46:5E:33:8F:83:06:02:92:3F:67:DF:69:03:D5:AF:3D:F2:A8
Certificate issuer:       /CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4
Certificate serial:       010D0C9F4328584A698B135CF6B02E22AEF24C00
Authority key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/47f52259-d832-3c2a-bc43-3f72c7ef644d.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     31746
IP address blocks:        66.132.168.0/22 maxlen: 22
                          66.132.176.0/22 maxlen: 22
                          216.150.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:13:5c:f6:b0:2e:22:ae:f2:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=4f50f71d-16fb-4ced-a814-b85e837f35ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:72:fd:4a:c8:f6:f0:59:ee:65:d8:45:97:
                    82:46:0f:bd:46:bd:67:97:7c:7c:0d:13:54:56:49:
                    35:23:e4:a5:9a:7d:bf:0d:85:16:43:5e:a5:af:d2:
                    a8:2c:4a:02:01:87:dd:2f:5b:0b:67:7f:20:67:70:
                    6f:48:fc:1f:58:ec:2a:61:59:df:c2:c8:5d:95:c8:
                    a8:bf:dd:04:e0:f1:42:b0:4f:0f:26:6e:d1:ab:de:
                    b4:2d:35:78:99:54:a3:2e:8d:c3:f2:b1:97:e2:e8:
                    55:a7:4e:fc:65:39:32:1a:0f:38:9b:79:9e:b5:4a:
                    29:59:7e:74:3d:7d:d8:5b:f4:dd:50:d9:14:a5:bc:
                    44:5f:81:e4:2d:0a:53:09:ea:8a:2d:21:2b:09:e3:
                    85:78:fa:25:44:53:1a:71:a8:24:68:f1:3c:ca:34:
                    4d:7e:02:92:ba:7c:73:55:62:09:14:c8:c2:67:27:
                    4d:3f:28:15:a9:96:98:61:da:9b:8f:cd:43:56:54:
                    0d:bd:42:49:94:aa:83:f3:aa:26:12:c3:52:a3:51:
                    1a:43:a9:c7:8e:0c:11:1d:9c:37:de:53:dd:10:d4:
                    93:c8:64:02:7f:d2:b5:fb:fb:38:28:3a:65:b3:03:
                    e2:11:08:02:0d:50:a8:5f:09:28:b7:d0:80:ff:f5:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2B:46:5E:33:8F:83:06:02:92:3F:67:DF:69:03:D5:AF:3D:F2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/47f52259-d832-3c2a-bc43-3f72c7ef644d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.168.0/22
                  66.132.176.0/22
                  216.150.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:46:e9:95:b4:1b:c5:b8:0a:54:c8:8a:7c:dc:aa:41:5b:08:
         5d:43:6a:e4:81:8b:d3:7a:9a:43:f9:5e:68:aa:7c:7f:69:ca:
         52:f2:21:1f:3c:b8:d8:74:b7:c7:ea:71:1b:04:8a:e5:1c:48:
         ba:f1:fa:70:e2:06:52:5a:26:ef:90:22:de:42:06:a3:f9:36:
         f0:9c:6b:b8:50:ff:69:30:c8:0f:47:b9:91:07:ad:d1:51:a0:
         88:98:b6:62:be:57:a5:e2:99:6b:30:2b:c7:41:58:25:fd:17:
         68:56:b5:25:45:a3:85:0c:d5:87:b3:6b:a1:86:f6:4a:4e:e0:
         42:f2:ed:40:2d:c5:4a:57:34:c3:57:61:27:3e:60:28:48:a6:
         a2:d7:b8:d9:1f:fa:2d:7d:4f:82:f6:cf:0e:cf:87:c3:7c:16:
         8b:37:aa:66:69:94:cb:91:e8:b0:b7:77:f2:9a:52:bd:7e:8a:
         29:5f:3e:05:b9:77:ff:0f:27:4b:7b:f4:0f:ba:51:f3:08:5a:
         08:28:39:6a:a7:a5:a4:41:68:4a:13:34:ea:c9:c2:f2:37:41:
         d3:e2:62:b8:79:a8:eb:fb:22:8e:68:db:79:ab:b5:d4:dd:14:
         ca:5c:31:d8:53:9f:4c:f4:e2:48:13:70:77:fe:48:0c:89:87:
         9c:80:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 22:54:55 2025 by rpki-client