Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/79074c61-9359-3c3b-947a-0d712a2d680a.roa
File:                     79074c61-9359-3c3b-947a-0d712a2d680a.roa (raw, json)
Hash identifier:          1P8PjewimN+C+6NYlWRQBIErZdWj63nCwg4YKAMNzHs=
Subject key identifier:   51:93:9E:D6:CC:70:31:82:BA:6C:B5:09:76:16:B5:D9:9D:C9:F9:CF
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584AFA38D32441BDCFF272F1A1C0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/79074c61-9359-3c3b-947a-0d712a2d680a.roa
Signing time:             Mon 25 Aug 2025 20:47:21 +0000
ROA not before:           Mon 25 Aug 2025 20:47:21 +0000
ROA not after:            Sun 23 Nov 2025 21:47:21 +0000
asID:                     1403
IP address blocks:        66.254.33.0/24 maxlen: 24
                          66.254.34.0/23 maxlen: 24
                          66.254.37.0/24 maxlen: 24
                          66.254.39.0/24 maxlen: 24
                          66.254.45.0/24 maxlen: 24
                          66.254.46.0/23 maxlen: 24
                          66.254.48.0/23 maxlen: 24
                          66.254.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:38:d3:24:41:bd:cf:f2:72:f1:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Aug 25 20:47:21 2025 GMT
            Not After : Nov 23 21:47:21 2025 GMT
        Subject: CN=87c2a9fd-834d-439d-a527-156822c76da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:b1:81:2a:43:f2:4b:f9:79:8c:0f:b7:a7:
                    08:bd:52:ed:dd:7f:55:98:15:3e:3d:56:39:53:59:
                    62:62:5f:04:e1:2d:25:6f:ad:3e:0b:7f:3a:c1:1c:
                    ef:2e:4d:74:3d:c1:bc:57:1a:f4:21:db:ff:24:18:
                    5d:81:96:f0:a0:bf:9b:9b:9f:cf:0d:d6:5c:59:70:
                    ef:b2:b9:c0:10:28:fb:f5:05:27:0e:d7:11:81:4d:
                    b3:49:cd:a6:1f:6d:89:fb:e8:fa:a2:9e:80:3f:e3:
                    2f:ff:8e:8a:fa:aa:a4:dc:08:6f:ec:da:ea:1f:71:
                    c8:c4:de:c8:db:2e:39:66:c3:99:b1:5a:f0:cd:12:
                    cd:8f:e5:87:ae:a5:78:d1:11:30:6b:56:9a:f9:f9:
                    9a:52:e6:99:1d:70:8c:8c:90:ff:62:23:07:3a:5c:
                    24:d0:0f:cc:65:3b:45:8b:6a:a3:20:21:2b:2d:c5:
                    0d:51:28:ef:23:60:d9:9e:f3:85:07:b1:36:57:98:
                    76:aa:73:36:99:52:d8:fe:73:79:41:bd:7d:58:98:
                    13:45:e9:0c:6f:68:ed:4c:f7:cc:1b:3e:cc:7a:89:
                    84:52:02:9b:c4:87:56:07:fd:b6:c0:28:64:ff:9e:
                    64:27:c1:7b:e9:7d:3f:b9:74:ce:70:17:a8:01:ed:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:93:9E:D6:CC:70:31:82:BA:6C:B5:09:76:16:B5:D9:9D:C9:F9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/79074c61-9359-3c3b-947a-0d712a2d680a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.33.0-66.254.35.255
                  66.254.37.0/24
                  66.254.39.0/24
                  66.254.45.0-66.254.50.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3b:80:f4:c7:2a:d0:25:bf:c8:21:d7:40:9b:dd:03:15:ed:
         ce:f7:83:38:a1:0c:80:4d:38:93:1a:95:3d:f9:9b:7a:97:3d:
         37:a9:52:1b:8e:20:67:0c:f7:1c:51:97:ad:59:eb:04:72:86:
         15:ce:51:7b:e3:83:ad:16:32:6b:1a:a3:4e:27:81:0d:ea:67:
         2d:46:3b:e2:ad:6f:58:e3:10:24:f1:a1:fc:7d:b9:19:cb:1b:
         49:01:ff:ff:52:89:54:d3:e0:92:40:72:3c:44:9b:44:af:dc:
         88:c3:c2:e5:90:55:73:2b:21:c9:21:06:13:63:62:bb:80:e5:
         8c:ee:58:13:70:84:aa:ca:55:75:9d:35:3d:71:71:b0:03:d3:
         45:40:a7:8e:72:36:f8:cb:2d:ee:08:05:1c:cc:98:f5:59:b8:
         48:7e:57:d6:2a:f9:4a:f0:11:3f:f3:7a:3f:3a:ac:f7:83:cb:
         e2:2f:89:be:d7:6f:ae:f7:47:1d:37:33:bc:c6:38:69:94:e2:
         01:3a:83:51:d7:29:8a:e4:e4:0d:4c:18:02:2f:cd:68:d0:26:
         8c:fd:4b:8c:68:f1:2e:e1:25:65:85:79:89:49:62:82:57:11:
         57:ca:ca:86:0b:3e:f3:b0:0d:e8:e6:6a:e0:46:85:53:d8:fe:
         da:a7:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 12:27:05 2025 by rpki-client