Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa
File:                     9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa (raw, json)
Hash identifier:          a98UNrZH/17seTLqnDFRf8tx8fcEBGOp8RWf+i9tT0Y=
Subject key identifier:   9C:EF:24:44:52:B4:7F:60:CC:D9:CE:B4:2F:76:72:56:80:76:07:9D
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584A8146479687521F25387DBCC8
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12127
IP address blocks:        66.119.92.0/22 maxlen: 24
                          66.201.160.0/20 maxlen: 24
                          66.201.176.0/21 maxlen: 24
                          66.249.192.0/22 maxlen: 24
                          66.249.196.0/23 maxlen: 24
                          66.249.198.0/24 maxlen: 24
                          66.249.199.0/24 maxlen: 24
                          66.249.200.0/23 maxlen: 24
                          66.249.202.0/23 maxlen: 24
                          66.249.204.0/22 maxlen: 24
                          216.184.96.0/21 maxlen: 24
                          216.184.106.0/24 maxlen: 24
                          216.184.107.0/24 maxlen: 24
                          216.184.108.0/22 maxlen: 24
                          216.184.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:47:96:87:52:1f:25:38:7d:bc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=42c41e49-89a2-44c8-b07a-d48df3fa1d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:a6:6b:cf:59:2a:c8:7a:aa:9a:34:01:09:
                    ba:16:09:29:e1:26:8d:ed:0f:f3:e1:d3:03:64:ce:
                    bf:9e:27:66:f0:8e:66:92:58:01:6c:d0:b3:e7:de:
                    b9:f9:cf:05:2b:4b:4a:17:cc:c1:96:dc:ee:db:b9:
                    71:11:de:80:90:b2:e0:c0:be:ac:f4:5f:96:88:ce:
                    31:97:30:ae:7a:7b:08:15:cd:f4:31:91:59:3e:a0:
                    87:21:b5:7b:f1:da:45:08:c1:f5:fb:01:7e:5c:f2:
                    7a:ce:c5:cc:a3:22:9f:cc:13:98:da:56:ef:7c:8f:
                    7c:c8:51:9e:68:0a:93:ae:b1:f1:d6:13:45:99:e3:
                    3d:d4:8b:72:cd:c7:bd:45:0a:02:ff:0f:cf:e7:6f:
                    64:1a:3b:7f:c6:5d:d7:a5:6f:54:a7:fe:3f:a1:7a:
                    c5:96:a7:02:7c:64:94:ee:cb:4d:33:db:0d:37:6a:
                    08:99:bd:6d:82:f7:49:89:48:b8:44:4b:f8:8e:be:
                    08:93:5c:68:d2:cc:3c:ec:c7:4c:04:97:c9:8c:86:
                    12:c8:05:ff:1e:27:71:c9:b9:8e:97:a8:23:3d:ea:
                    b4:af:ab:e1:11:56:df:81:ad:c3:b0:48:81:31:6b:
                    b4:e9:d9:03:49:19:f7:cc:ac:36:72:f4:99:48:32:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EF:24:44:52:B4:7F:60:CC:D9:CE:B4:2F:76:72:56:80:76:07:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/9c186c9e-ef97-3a93-98fd-31dc5fdb4aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.92.0/22
                  66.201.160.0-66.201.183.255
                  66.249.192.0/20
                  216.184.96.0/21
                  216.184.106.0-216.184.111.255
                  216.184.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4d:c2:f3:84:52:15:58:f1:bd:78:15:6b:5b:84:70:da:c6:
         08:03:4c:6f:70:87:f0:82:73:93:4f:2f:d9:de:80:b7:09:93:
         af:60:11:e3:13:9e:48:fa:9e:97:07:be:e7:e5:32:39:e1:03:
         be:4c:9c:9c:aa:b2:f5:1f:1a:8f:2b:7e:3b:4c:ae:08:f5:4d:
         e8:58:65:fc:6c:70:6e:4f:58:af:ee:3d:42:8d:5e:63:3c:7c:
         21:d7:6f:76:90:01:e4:9b:3e:a8:4c:c0:ad:3c:34:c7:2f:19:
         1d:07:a0:2e:5b:02:f8:e8:13:bc:dc:32:be:8f:14:ff:49:c1:
         b8:b6:f3:e0:93:f3:52:a7:12:0d:89:e4:d8:c3:8c:9e:45:cb:
         c9:3f:71:79:d6:67:ca:a6:41:28:76:f4:2a:05:8f:b4:a2:91:
         9f:52:97:f3:35:c6:dd:31:b5:61:f0:4c:30:94:5b:78:5c:ab:
         c3:68:78:1d:26:f3:0f:d4:4a:e6:6f:d9:2e:55:43:55:17:53:
         3f:6c:9a:0a:cd:c7:22:1b:a5:0d:e1:1c:2e:93:b0:88:a5:ff:
         88:f5:af:8d:ad:49:de:a8:7d:6b:b3:22:fd:6b:72:f9:71:bd:
         6d:4f:f7:54:f0:5c:c4:f8:bb:5a:d0:9d:03:3e:3f:47:af:ad:
         40:1c:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:39:21 2025 by rpki-client