Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa
File:                     a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa (raw, json)
Hash identifier:          1fzVItcxy2PGlMmAXt4uMU5uVlGBKwmz6IH+DHYx9x0=
Subject key identifier:   35:33:DD:89:B0:C3:01:B1:FB:95:A5:8F:99:0A:62:E8:1F:39:B4:42
Certificate issuer:       /CN=2cf622f9-718a-4280-a116-72e2088c51e3
Certificate serial:       010D0C9F4328584AECC14838CD09B1C28CF84D80
Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     394490
IP address blocks:        66.45.13.0/24 maxlen: 24
                          2620:dd:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:48:38:cd:09:b1:c2:8c:f8:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=750eb813-f0a6-4de2-8202-efb817288d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:99:91:f4:2c:aa:aa:9b:6a:da:82:1e:1b:
                    12:78:1d:3e:8b:d1:d9:42:a5:ba:4a:dc:30:8c:aa:
                    c6:67:04:da:b6:b4:76:55:f5:e2:fe:73:c0:ca:9d:
                    fa:7c:c4:a1:a7:9c:5a:5a:7a:8d:3d:7f:82:87:7d:
                    03:68:1a:e1:b4:35:36:09:b3:6f:cc:2b:53:15:da:
                    5d:e7:51:a4:38:03:5e:c8:5e:9a:46:fa:fb:e5:c6:
                    cb:f9:44:12:a3:4e:ae:86:43:ba:57:03:2b:cd:70:
                    64:1f:6a:98:cd:32:7b:dd:0b:c9:ab:84:62:2a:8b:
                    00:c4:cb:d4:f0:0c:5e:c5:42:f5:2c:f1:16:65:44:
                    60:4a:b5:0b:88:72:d0:e3:ef:c9:9a:f4:00:85:f7:
                    25:a7:c2:b0:fe:6b:04:fa:14:e9:da:17:07:db:cb:
                    a3:c4:01:47:ea:fd:1e:88:f8:51:b1:36:6d:4d:9c:
                    8e:fe:a4:f0:cc:28:6f:77:e8:f2:60:3b:9d:c8:ad:
                    31:b5:b3:ff:cf:53:0c:96:bc:78:ea:c6:24:64:66:
                    26:52:f6:d6:6c:c5:0b:e3:b8:df:76:4a:c5:63:e1:
                    89:5d:6c:eb:92:0a:2e:80:29:1b:99:f3:8d:4f:3b:
                    a8:3f:80:cb:ca:ca:ac:5a:2d:48:eb:a1:7b:ab:2b:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:DD:89:B0:C3:01:B1:FB:95:A5:8F:99:0A:62:E8:1F:39:B4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl

            X509v3 Authority Key Identifier:
                keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.13.0/24
                IPv6:
                  2620:dd:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:c9:f5:41:95:12:67:b9:75:53:89:5e:3c:f0:d0:e0:d1:
         09:38:9f:ae:9c:de:67:b0:ec:a7:54:ee:b0:f1:26:d1:ae:51:
         a5:1b:70:8b:46:0a:d5:61:9a:ac:a1:65:f4:33:48:aa:3e:43:
         b2:6b:42:9f:68:d4:fa:fa:34:bc:dc:ba:01:0e:17:0f:6d:2a:
         e1:f4:ac:46:48:e5:c1:0c:41:30:73:fe:ac:c6:ee:1f:27:42:
         2f:0b:ff:09:1f:b1:57:c8:ca:d2:d9:7f:d6:5e:b6:b6:54:0d:
         cb:0b:bd:34:a0:cb:50:8a:0f:f7:0e:15:9b:41:e5:4a:c6:88:
         86:23:0d:38:64:f8:70:7d:d7:02:40:72:41:40:91:35:20:63:
         5d:f0:41:de:1c:23:90:ce:99:5c:a0:78:40:bc:45:09:ef:5e:
         4b:9a:8a:c9:78:d5:17:bf:ce:5a:16:7e:75:49:26:f2:be:1b:
         6a:7a:b1:30:3b:e8:b3:64:c0:ee:bf:a1:30:91:e9:e1:8f:31:
         df:71:a5:75:bd:1c:21:8e:c7:e3:83:43:57:40:cc:be:3e:fa:
         1f:55:4f:78:da:ad:0c:ca:c6:fd:8b:36:06:6a:47:c8:ec:29:
         4d:e9:0b:6a:f7:8d:54:5d:b2:b3:1a:4d:34:48:8e:0b:86:9f:
         dd:82:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 10:25:52 2025 by rpki-client