Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fcc6c534-3c69-3e28-91b8-88904ccc9e3e.roa
File:                     fcc6c534-3c69-3e28-91b8-88904ccc9e3e.roa (raw, json)
Hash identifier:          ytcsRAWYJXDbx9hMOpAILj4Du42JGP+cw4ZJQrB0rxA=
Subject key identifier:   00:22:06:44:81:E1:7D:BD:50:E7:80:3C:67:B0:5C:DE:AB:1E:20:53
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B1FCC27ADC55E16750D40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fcc6c534-3c69-3e28-91b8-88904ccc9e3e.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        66.54.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1f:cc:27:ad:c5:5e:16:75:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=75971b06-8ed5-4333-87a9-67dd69faff45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c9:68:7f:c3:39:62:8d:d2:a4:f0:e3:49:47:
                    bb:00:e5:dc:f3:a3:04:17:43:fb:b1:57:fd:0c:77:
                    18:82:2a:c5:67:22:bd:96:78:a0:e9:c1:54:44:c0:
                    51:34:56:60:5d:c5:b4:40:3a:b3:54:57:a0:da:2a:
                    97:3a:82:54:16:ac:f9:f4:0c:69:d2:41:45:53:f5:
                    bd:09:7d:68:c5:47:4d:c1:ed:96:ba:70:d9:af:c2:
                    e4:3c:ad:ab:9f:0e:b8:ff:42:59:f9:ec:9f:bf:2d:
                    9d:e0:6f:d7:8a:31:8f:ca:0a:92:a6:ba:5f:f1:57:
                    b8:98:a4:05:18:19:19:bb:34:a9:ca:3c:9d:76:f2:
                    37:00:51:b2:bf:85:02:6f:82:e1:5a:0b:dd:8d:e2:
                    c9:cc:11:b9:cb:1e:62:10:fc:02:9f:09:70:25:ba:
                    87:97:b5:fa:84:48:10:5e:c8:7c:15:bb:e5:57:62:
                    65:96:9c:0a:7a:6f:44:05:03:47:1b:9e:41:dc:57:
                    ad:3f:85:b3:29:0d:59:1d:5d:ec:17:8b:f8:1b:e2:
                    50:3b:a6:09:a9:57:c6:29:c9:c4:33:bd:7a:92:95:
                    cf:96:ed:0d:ce:64:bf:35:29:14:c7:03:06:41:fa:
                    48:c6:63:00:83:d9:a4:7b:a9:0d:fe:0d:28:b1:03:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:22:06:44:81:E1:7D:BD:50:E7:80:3C:67:B0:5C:DE:AB:1E:20:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fcc6c534-3c69-3e28-91b8-88904ccc9e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:af:a6:a6:dd:21:8e:82:b3:93:80:2c:73:71:01:64:da:6e:
         1a:a1:e4:e2:1e:73:19:d9:11:d6:4e:ce:b3:f7:11:df:bc:af:
         2d:2c:f5:96:e4:d2:65:3e:ec:e7:ee:c2:c0:97:e4:99:08:5d:
         af:e4:e0:0e:78:9e:b6:2b:5f:f8:d8:7c:c5:da:79:6b:ab:bd:
         af:2d:7d:4e:b7:04:e2:6d:ff:1b:ce:40:40:ea:44:ce:97:64:
         7a:73:00:7b:91:3b:ef:76:07:88:cb:ed:67:6f:43:e4:66:de:
         69:90:fc:f8:2b:20:e6:fe:00:89:d9:77:96:00:88:e2:98:69:
         54:ca:8e:a0:ad:e2:35:25:10:99:93:6d:02:a8:7e:95:35:08:
         25:a0:0e:1c:09:a3:3f:7e:22:c4:3f:cf:10:c0:54:e7:0b:bf:
         40:ca:a9:88:32:71:25:70:9a:6f:a8:56:8f:ef:30:3f:7e:5d:
         56:32:e1:a6:f3:d1:e5:e4:9c:4f:4b:3a:25:d6:0c:5e:66:03:
         e1:40:ad:a3:8c:36:af:44:40:d5:54:35:da:ee:77:80:ee:cb:
         b7:ec:b3:07:18:13:ab:bd:10:be:49:07:3f:f1:c5:de:0a:11:
         b6:aa:30:81:40:76:4b:13:25:94:a1:07:b3:5e:6a:78:60:08:
         fc:dd:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 23:42:19 2025 by rpki-client