Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa
File:                     db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa (raw, json)
Hash identifier:          JnXDgkQScLuXVfMKtn/+uNRyOrAc08H39PCK/wEJQ1U=
Subject key identifier:   16:69:C2:9C:FB:FA:F6:86:ED:F0:2E:BC:05:81:82:45:B1:12:86:A3
Certificate issuer:       /CN=670a3755-a570-42cf-846d-b0190d7ff61a
Certificate serial:       010D0C9F4328584AADF0F412CCB2E1AF6A850D00
Authority key identifier: E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     393887
IP address blocks:        66.179.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f4:12:cc:b2:e1:af:6a:85:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670a3755-a570-42cf-846d-b0190d7ff61a
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=4ea42963-2367-41fd-951a-1f243f230547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:21:8c:4d:86:68:a5:e5:8c:0c:3b:78:a1:
                    cc:b2:b3:0b:4e:ec:71:ce:5d:8d:e4:69:5f:5a:54:
                    99:a4:64:be:e5:14:14:c1:b0:28:d7:0f:bd:7a:d3:
                    6e:6d:33:51:2e:1f:db:ad:ca:b2:ba:ea:ee:6a:51:
                    81:58:fc:d5:c0:cb:44:ff:84:9b:55:7b:c8:ae:01:
                    6e:be:d0:67:91:3b:7a:7f:2d:08:b4:dd:5c:6e:84:
                    d2:d3:0a:e8:06:f3:6a:64:d9:46:9a:08:67:9b:1e:
                    aa:e3:cd:71:b3:33:04:e6:32:0e:05:49:ab:38:71:
                    11:fc:e2:e5:d4:7f:a5:39:d1:4c:6a:3f:d6:42:44:
                    e1:26:8b:65:2e:ec:86:e8:9d:e7:2c:96:df:2c:51:
                    88:62:4d:b7:69:a4:8a:09:86:2f:1a:0b:05:27:0b:
                    e6:b2:0d:cc:ba:78:f4:55:ad:11:d6:1d:07:12:71:
                    dc:f1:e4:aa:b4:b6:e3:92:d8:5f:11:ba:d2:0a:82:
                    8f:90:2f:ae:14:e1:51:32:72:63:4c:ae:f4:01:6e:
                    4d:dc:fc:9a:ef:dd:8c:f2:1f:79:77:ca:57:81:7e:
                    97:e4:1a:8c:75:40:7b:f9:17:da:7e:e6:34:61:15:
                    b6:cf:af:cf:f9:fb:c1:09:6c:29:04:17:2d:1c:75:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:69:C2:9C:FB:FA:F6:86:ED:F0:2E:BC:05:81:82:45:B1:12:86:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/db2fc8d3-c5b1-3a53-81a6-96a6d50ddf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a/670a3755-a570-42cf-846d-b0190d7ff61a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:43:A4:1F:D0:08:46:21:E1:94:C4:17:1F:18:DE:3F:DB:4B:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/670a3755-a570-42cf-846d-b0190d7ff61a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:0f:00:8a:d1:7e:e6:d7:66:a3:76:43:b8:71:f5:68:9f:
         f2:64:57:dc:aa:72:3b:ec:61:b9:65:a9:51:3e:8e:e2:fd:dc:
         37:79:60:86:f0:fe:b6:36:67:17:15:dd:3c:35:ad:09:47:bf:
         36:18:41:bc:05:2b:a8:82:f9:32:e5:38:00:9b:44:d7:a8:c7:
         a7:2a:5b:69:70:ee:8e:10:16:14:0c:97:b5:ff:bc:97:c5:ea:
         75:da:6f:3c:ad:c3:9f:8a:fb:a6:12:d3:1e:4c:e6:7e:eb:ab:
         b4:9b:75:a1:ea:33:dc:5f:cb:ad:6c:87:34:90:ea:45:d9:13:
         d2:3d:41:8a:21:2f:6d:78:33:14:92:cd:3d:81:91:7d:c2:b6:
         32:d2:ca:95:c4:78:e1:a3:a8:d7:9c:da:3a:a8:b1:55:94:90:
         1e:3b:48:49:64:37:b6:6d:d0:10:a7:42:a3:61:fb:93:ec:1e:
         d1:b0:df:40:5a:7b:20:68:6f:f1:a0:ce:3c:02:12:4a:64:71:
         fe:bc:3e:1d:71:9f:d4:92:09:64:ed:90:8a:64:61:c7:2f:82:
         85:7f:9f:f7:03:dc:b5:da:54:f9:ec:89:81:3c:11:7f:b4:ab:
         d5:aa:3e:2f:a2:cc:b4:02:23:46:87:ac:a4:c9:aa:f1:4a:c2:
         e1:a5:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 05:13:41 2025 by rpki-client