Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/52e6a112-5e7e-3e0d-b4e1-11b6d70f4f4d.roa
File:                     52e6a112-5e7e-3e0d-b4e1-11b6d70f4f4d.roa (raw, json)
Hash identifier:          pdHr9jRgo68FeerRCEw1gMIJ0404m11gtfnYLU6lD+A=
Subject key identifier:   C6:9A:F3:40:E4:6F:F3:E1:A8:8C:A7:FA:AC:BF:53:C0:9B:20:81:5E
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584AF7EBDCAB0C3B3D89A1E86F80
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/52e6a112-5e7e-3e0d-b4e1-11b6d70f4f4d.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     33152
IP address blocks:        66.198.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:dc:ab:0c:3b:3d:89:a1:e8:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=31ede851-0fd7-4623-9cae-fab4642c4237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1e:51:18:41:f9:37:81:97:6b:18:f2:f5:7f:
                    e9:a8:e5:f5:f1:f4:ef:75:82:57:76:ce:27:0b:09:
                    89:91:48:bb:0e:28:37:e0:8f:21:bc:d9:a6:1b:66:
                    f8:35:7e:80:af:a4:0f:d2:28:0c:9e:52:94:17:33:
                    3f:74:db:b5:3a:01:75:38:5a:09:de:d7:08:1d:35:
                    7c:bd:9b:49:19:6b:6a:06:9c:f9:76:42:71:af:c8:
                    00:e9:3d:2e:2e:27:3e:9b:3a:1b:bb:31:aa:d1:39:
                    bd:00:aa:56:1f:ed:79:13:d1:07:d6:5a:00:1b:7d:
                    73:d6:fe:ab:5d:87:24:9d:98:36:e7:c6:87:87:6b:
                    01:d7:9e:b5:c5:3a:d8:0a:97:94:27:18:4c:bb:d7:
                    21:0a:42:51:dd:8e:8a:59:bb:8f:54:69:80:e2:f0:
                    ce:36:af:63:f0:b5:c9:25:12:ec:bc:3a:63:ce:bb:
                    19:35:78:dd:c3:7e:8d:c5:8c:7e:d6:24:d6:32:eb:
                    c9:61:35:26:33:fb:a4:ed:41:55:88:b2:2d:75:32:
                    62:1d:13:19:9e:f3:34:e2:a5:95:17:ee:f6:d8:3a:
                    aa:38:71:28:ba:bd:60:c3:7b:fa:74:3b:ee:e5:c1:
                    16:df:09:0e:a1:7c:46:9e:11:91:5b:29:f8:21:e0:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9A:F3:40:E4:6F:F3:E1:A8:8C:A7:FA:AC:BF:53:C0:9B:20:81:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/52e6a112-5e7e-3e0d-b4e1-11b6d70f4f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:39:30:b4:a0:a5:ba:a9:a9:b1:08:22:61:d5:20:fd:d2:d7:
         b8:b6:cf:fc:21:a0:e7:0f:8e:10:57:16:63:7e:b1:72:e5:74:
         84:25:00:71:33:a3:17:12:0e:50:5a:5a:fd:56:69:72:12:02:
         3a:7c:08:b3:3b:c4:3d:84:8a:52:c5:b2:02:0e:12:5e:ba:73:
         25:13:e0:cb:7d:09:4e:8b:d8:c5:0e:20:b5:67:3d:a4:d2:87:
         33:ac:23:e5:fb:bd:d9:35:f9:11:04:03:65:9c:ab:c0:35:05:
         3a:b2:c3:6f:9e:0f:a9:94:e5:88:84:b1:67:43:43:ad:1a:4b:
         80:ab:79:60:0a:ef:c8:c3:23:83:ce:e7:ad:47:85:56:88:6a:
         de:5b:21:ea:98:81:4b:d5:a5:8e:1c:ef:b4:9e:8c:c9:5a:7e:
         9f:48:52:9b:e4:e7:ae:c2:29:4f:04:0e:26:46:e5:e1:1a:7e:
         c2:a1:57:d0:1c:2a:aa:4d:2a:b1:cf:87:d6:5d:45:7f:df:e2:
         03:4f:49:83:84:ff:8c:5c:5d:53:31:58:7b:98:d8:49:6e:a4:
         ba:4c:17:34:f7:bd:e5:8b:80:02:08:37:1d:f0:ec:c6:da:c2:
         0e:94:01:96:1f:37:be:fc:0a:ac:fe:b0:47:e5:72:5e:8c:72:
         a4:4b:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 12:24:00 2025 by rpki-client