Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa
File:                     4bc9954b-ac5d-3aa0-baf5-640c55692392.roa (raw, json)
Hash identifier:          VadiX23p/fiEwyjKUQJgpeWlbTwWd9s13oNFhY/UlJY=
Subject key identifier:   0E:68:5F:A3:81:D8:A6:E3:D5:FF:34:8A:19:EA:79:8A:0F:DC:85:02
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584AC1DD8411191C9B8D6FC25540
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa
Signing time:             Tue 05 Aug 2025 16:18:06 +0000
ROA not before:           Tue 05 Aug 2025 16:18:06 +0000
ROA not after:            Mon 03 Nov 2025 17:18:06 +0000
asID:                     23473
IP address blocks:        66.253.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:dd:84:11:19:1c:9b:8d:6f:c2:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 16:18:06 2025 GMT
            Not After : Nov  3 17:18:06 2025 GMT
        Subject: CN=3271bcf3-adaa-44af-ac93-4da76d406c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:30:77:96:07:49:85:ef:20:9a:2e:34:40:cc:
                    52:aa:e0:4e:fd:8b:76:91:82:8b:ac:de:12:2e:b5:
                    0c:a1:f3:5e:71:ea:1c:12:09:90:4f:16:3f:08:9d:
                    41:67:c1:60:66:f0:39:ac:e1:2a:1f:79:f3:10:e7:
                    89:01:72:87:91:17:67:d0:26:4c:3c:a0:5c:80:a5:
                    3f:af:63:d7:00:6f:eb:25:8f:80:eb:04:66:90:eb:
                    76:7f:6c:06:37:36:c7:db:64:2b:d4:59:71:0f:28:
                    13:21:c5:8a:d5:fe:3e:e7:f6:d8:8b:b6:77:91:f9:
                    85:3e:67:27:ff:9a:b4:ae:38:28:f9:32:5f:10:b7:
                    17:b0:cd:06:53:0b:00:a3:d5:54:5e:a1:57:e9:72:
                    66:cb:18:73:ca:70:67:1a:5b:9c:78:33:a5:30:33:
                    2b:50:4d:d5:31:34:40:9e:f7:5b:59:51:ea:c7:1a:
                    ee:97:72:5f:c7:ee:2a:de:bf:19:92:97:98:a0:a6:
                    c9:78:62:17:fc:be:ba:35:2a:c0:28:e8:87:c2:d9:
                    c2:3d:55:f1:11:6a:0e:c1:7d:2d:c3:c5:d4:bd:d9:
                    7d:a8:53:80:39:24:6c:6c:e2:fc:40:c2:54:06:c7:
                    a5:2e:b9:f6:fa:b6:b9:87:21:86:0c:e1:67:39:58:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:68:5F:A3:81:D8:A6:E3:D5:FF:34:8A:19:EA:79:8A:0F:DC:85:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:00:b8:f0:25:26:1c:d3:dc:90:b5:ff:b5:d0:7d:0c:5e:fb:
         93:43:cf:a7:d4:0f:96:c8:c1:ea:d5:00:27:58:e2:ce:a8:ee:
         92:60:fc:6a:e3:8b:ea:7b:98:97:49:b4:20:e9:63:88:4c:9c:
         bd:4a:7e:b4:ed:e0:9c:3b:bb:60:c5:32:18:12:91:01:6e:e4:
         af:87:2e:1c:20:45:1f:b7:01:37:b8:6e:d0:01:22:9b:2c:20:
         ba:56:d5:3e:84:37:e4:8d:92:8e:7f:3b:3d:ac:5c:98:f3:b2:
         b6:11:27:7a:b8:4b:3a:72:9b:cf:7f:a0:5a:da:88:26:7e:fa:
         6a:c7:06:a3:67:09:bf:9d:7f:dc:e8:7e:a5:0c:88:37:3b:58:
         9d:df:56:2d:08:bd:db:d0:75:4a:78:65:d8:e4:1e:ad:95:7b:
         bc:12:79:2a:ed:97:f6:95:ed:71:bc:9b:34:e5:53:68:2b:2c:
         98:d3:8e:dd:25:ff:05:f9:ae:3f:0d:37:cd:f5:12:0a:80:6f:
         b2:cb:2c:cc:85:32:65:bb:fb:d7:4d:bb:db:99:30:98:99:c2:
         3b:0c:c1:18:c2:e7:0a:52:a8:55:3a:16:6a:b0:b2:eb:a2:9f:
         94:25:51:87:bc:4e:df:98:ca:8f:8e:4c:d0:28:a9:58:a1:fd:
         a9:75:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:54:31 2025 by rpki-client