Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa
File:                     dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa (raw, json)
Hash identifier:          ioZvJcXLd6SwTNqGBZg4TQXYSYIx8AQbtRyj0nCVpMU=
Subject key identifier:   EF:78:1E:E6:C2:5A:26:74:E3:7F:EC:63:59:E3:38:56:AB:9D:64:8F
Certificate issuer:       /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial:       010D0C9F43285849F17FB01649C19865F8DE0A40
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     40501
IP address blocks:        66.85.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b0:16:49:c1:98:65:f8:de:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=776fc9d0-fa9d-47b6-aa1e-6377fdff9a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:da:66:9a:5f:66:71:91:ed:db:4c:04:89:
                    61:74:5c:cc:25:5c:85:d7:43:92:89:90:a5:21:36:
                    fe:86:a0:58:31:d2:5d:2b:2c:1c:88:93:aa:99:01:
                    6c:1d:05:d1:52:14:00:63:d5:2e:da:8a:2e:35:0c:
                    a9:7e:6b:cb:84:87:ee:b0:c9:64:1a:00:ce:9c:87:
                    c5:b6:73:01:01:b0:32:96:29:f2:cc:fa:ff:66:7b:
                    3b:ea:98:44:0d:d0:5e:60:86:20:ff:0e:6e:b6:47:
                    db:14:84:23:aa:63:d9:da:44:68:d3:78:d1:a6:a6:
                    e2:10:6c:96:bf:e0:15:24:0e:43:41:0c:53:8f:91:
                    77:b1:af:f5:34:96:c8:27:b3:62:63:76:f3:7b:85:
                    3f:7a:e0:69:40:d7:26:d2:b9:ba:43:bb:1e:f7:18:
                    b0:20:d1:3e:ce:53:87:53:5a:21:52:1d:7d:cc:4d:
                    00:99:57:a2:0a:94:4a:b9:ab:2f:c2:0a:a5:20:10:
                    ce:af:0a:03:cd:94:7b:f8:56:13:15:e5:29:c9:ff:
                    3f:d1:3e:44:d5:18:1b:da:93:5b:82:cb:f3:71:fa:
                    3f:64:59:95:51:3a:c8:e8:7d:e4:9a:fd:50:fc:c4:
                    23:08:d3:cb:f8:02:17:d9:2c:7c:a7:b2:b8:ff:d6:
                    1a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:1E:E6:C2:5A:26:74:E3:7F:EC:63:59:E3:38:56:AB:9D:64:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/dbff6c47-ba7a-3320-ad13-8355a7bd0226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl

            X509v3 Authority Key Identifier:
                keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:bb:56:99:19:c9:7c:f7:62:2e:f5:90:6b:31:87:cc:af:
         20:e0:99:20:e9:16:92:50:95:9f:c6:59:d6:21:ec:fd:0d:a5:
         4b:ce:5e:23:83:9e:9d:d2:5b:eb:db:ff:6f:60:e6:21:78:12:
         60:b6:eb:fe:4b:10:5d:37:0b:b2:dd:4b:90:fd:cc:21:4d:a1:
         27:ba:c8:2c:62:32:30:39:bf:13:b8:73:7b:df:71:3f:ca:51:
         39:f9:13:89:94:52:e9:0a:e0:65:df:a3:1a:3a:fe:0e:4b:2e:
         ae:a0:f8:62:af:fa:6b:17:59:0b:1e:ff:5f:cd:71:fd:83:62:
         65:df:d1:fb:d3:78:49:31:04:b5:d3:46:96:33:10:db:42:8a:
         fa:a3:1c:ba:c1:38:67:0b:d6:68:92:30:3c:fe:06:0b:5c:71:
         29:e4:fd:96:2c:70:a9:4f:cb:a6:d7:1e:04:a0:30:f0:34:e8:
         15:b4:74:d0:f4:c8:1a:01:f5:aa:a7:e2:f9:6e:94:1b:03:86:
         df:a1:73:a4:97:9d:18:55:cc:79:ec:f4:15:4c:9f:b8:e9:6b:
         68:7c:84:7c:f2:82:fe:07:6a:69:96:47:67:ea:c9:4d:8d:a8:
         2c:cd:e0:09:5c:48:2c:a8:a4:a1:5e:fc:a2:46:84:1a:9c:13:
         3a:7e:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:21 2025 by rpki-client