Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/87d6d784-aa10-370b-a0c0-de6e87414ae1.roa
File:                     87d6d784-aa10-370b-a0c0-de6e87414ae1.roa (raw, json)
Hash identifier:          2RjPFE4FUKpOQ86bxiOchRj9wGr/RgCfVfvbSUhnB3Q=
Subject key identifier:   2E:90:8F:6F:0C:72:3C:E8:0E:4E:A1:45:8B:68:FB:37:36:08:6F:92
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584A73509E76358510EF475633C0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/87d6d784-aa10-370b-a0c0-de6e87414ae1.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     32544
IP address blocks:        66.172.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:9e:76:35:85:10:ef:47:56:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ae5f6e24-4e3c-44a7-8c2b-f671c767acef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:74:25:24:7c:b6:02:5f:71:a2:bc:c0:c4:
                    b7:c6:85:c0:d2:08:0b:f3:d6:7f:02:42:d3:74:15:
                    41:b2:1e:21:b8:9a:d4:38:bc:2c:97:25:1d:a3:04:
                    e6:66:54:03:9e:fb:57:c4:05:43:00:ff:8f:61:92:
                    0a:71:bc:85:e4:77:03:3d:79:3e:61:70:f9:85:9f:
                    56:f9:0c:e6:b0:0f:38:96:73:d7:6c:1d:ab:52:9c:
                    9b:a0:ab:b4:e3:65:7a:15:8a:c2:c5:e4:12:86:46:
                    33:59:62:55:5d:6e:a6:a9:ba:ca:bf:40:a3:c4:9e:
                    db:7d:36:6e:9b:03:74:59:fe:0e:91:67:ae:42:c8:
                    4c:6c:ca:1d:5f:de:1f:30:84:6a:dd:9d:1a:68:76:
                    ac:16:6e:de:40:80:5e:c5:0c:ca:47:f5:43:8a:3b:
                    8f:8f:22:aa:db:54:9c:08:2c:bd:0c:23:85:97:7e:
                    4e:90:8d:62:05:ca:4a:7b:42:fc:d1:c6:b8:e5:69:
                    31:c1:61:e5:8f:53:5a:5f:28:73:d6:0e:4a:52:db:
                    32:cd:2e:56:7b:df:99:06:78:36:7e:59:ae:cc:a9:
                    34:bc:65:b9:0b:4b:da:37:e2:05:47:d4:7c:6c:6d:
                    ce:89:6c:07:a8:a5:80:00:c9:17:00:42:75:77:f2:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:90:8F:6F:0C:72:3C:E8:0E:4E:A1:45:8B:68:FB:37:36:08:6F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/87d6d784-aa10-370b-a0c0-de6e87414ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2f:de:f7:1f:48:7a:3a:a6:c4:22:68:84:51:13:b7:d9:a8:
         5f:0a:9c:cb:ab:a3:a0:71:e9:f5:14:ba:00:c0:2e:b5:56:fa:
         e2:6d:78:c6:bb:3e:13:f3:c3:2f:73:04:29:3e:03:1f:f0:25:
         ae:90:ae:51:09:81:e5:cb:12:3f:4f:9f:ea:ed:dc:38:cf:c9:
         ad:c3:32:82:6c:8d:e2:01:47:b0:76:25:0f:b8:6c:b1:6f:16:
         3c:69:30:c6:eb:88:a5:cf:53:db:c3:ae:e0:48:2c:af:12:88:
         aa:97:7b:ec:c2:72:e0:a1:67:b3:01:ef:35:a4:71:39:bf:5c:
         83:a4:fe:df:32:0b:9e:99:b6:9a:74:38:7e:76:4b:0d:23:b3:
         58:68:4c:68:77:a3:48:f8:53:9a:49:bf:13:20:22:04:4e:b7:
         6a:d1:ef:db:ae:a5:ca:50:79:27:43:7f:ec:27:8b:2a:6d:f8:
         8a:69:00:9f:77:22:b6:3a:3b:ef:af:22:39:a0:dc:78:e1:7f:
         4b:fb:f3:a5:4d:e6:61:68:d2:fc:4d:b6:c2:c3:87:6d:88:1d:
         ed:f1:b6:89:3c:5b:6d:f5:6b:03:03:c8:bb:bc:02:57:fa:8d:
         3e:99:33:88:3c:fc:a5:67:bb:34:9c:58:97:0f:ba:82:b8:27:
         cb:40:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:15:09 2025 by rpki-client