Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa
File:                     fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa (raw, json)
Hash identifier:          OclmVCBTpSUByG4revBjiDUoNWv7KvYV8oWDsMIUhMo=
Subject key identifier:   30:92:24:34:ED:BA:93:F9:B1:CC:C2:38:A0:C6:A8:54:CE:1A:EB:DD
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B29060AE3E6C7F1BFAC3655C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa
Signing time:             Thu 11 Sep 2025 15:08:01 +0000
ROA not before:           Thu 11 Sep 2025 15:08:01 +0000
ROA not after:            Wed 10 Dec 2025 16:08:01 +0000
asID:                     401951
IP address blocks:        66.167.8.0/22 maxlen: 22
                          66.167.12.0/23 maxlen: 23
                          66.167.88.0/23 maxlen: 23
                          66.167.148.0/23 maxlen: 23
                          66.167.170.0/23 maxlen: 23
                          66.167.172.0/22 maxlen: 22
                          72.245.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:06:0a:e3:e6:c7:f1:bf:ac:36:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 11 15:08:01 2025 GMT
            Not After : Dec 10 16:08:01 2025 GMT
        Subject: CN=80088219-03fb-4d9c-8321-482d503867f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:c9:2c:a4:0c:49:d1:e3:a3:7d:c9:ed:30:
                    90:21:10:af:8d:d3:a3:08:60:10:a5:09:66:f1:c4:
                    b0:4a:b8:49:d4:05:8a:30:fa:7f:bf:01:4e:ca:e9:
                    48:d1:5e:1a:0f:5c:c3:ab:30:6f:0b:01:cd:80:52:
                    32:7b:0b:e7:ab:ec:77:8a:c4:f5:08:3a:89:61:83:
                    72:e1:bb:9d:56:e8:c3:36:fb:40:26:0d:7f:c4:9f:
                    76:3c:06:89:82:12:04:84:ce:e8:ed:71:69:e1:e2:
                    a3:86:95:0e:5a:42:54:88:5f:c7:fa:87:3d:ce:6b:
                    52:09:91:63:10:93:ec:a4:d6:20:cb:d4:81:aa:41:
                    9c:ba:d1:8f:31:51:03:7f:30:c3:b3:35:a6:bc:b4:
                    76:ce:16:25:6e:1b:bb:b1:93:4f:df:80:ee:54:a6:
                    6f:c5:7a:60:4b:93:bf:35:37:fb:23:60:68:cf:b9:
                    a4:a6:dc:f3:f5:ef:a7:ac:f4:49:5d:9c:1f:dd:cd:
                    78:ba:aa:7a:3b:f2:75:6d:f1:2d:ac:bd:c0:21:d7:
                    eb:1c:ca:d1:f4:6f:0c:b7:4d:79:57:e8:ee:90:b5:
                    cc:9e:5c:c5:23:bd:2e:83:1c:15:c1:f8:53:f6:35:
                    92:3c:34:43:02:e9:74:b2:5a:af:27:2c:96:49:01:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:24:34:ED:BA:93:F9:B1:CC:C2:38:A0:C6:A8:54:CE:1A:EB:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.167.8.0-66.167.13.255
                  66.167.88.0/23
                  66.167.148.0/23
                  66.167.170.0-66.167.175.255
                  72.245.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:dc:8f:de:62:21:b0:c9:43:e3:1b:42:ba:19:8b:69:ec:
         b7:98:5e:4d:e8:d3:11:c4:e6:d7:9b:68:fc:be:b4:5b:70:47:
         e2:ed:2c:73:e5:35:29:1a:5e:74:d2:d0:52:03:a5:be:24:3f:
         63:57:98:a0:91:55:e4:ed:bc:79:42:39:6d:24:9e:1e:60:d2:
         c3:b5:6f:03:25:2d:6c:3b:e1:73:f3:48:7a:21:2f:9d:43:0f:
         82:4d:ed:3b:9c:a0:14:5e:8f:f0:e5:59:7a:13:06:5e:08:53:
         57:ad:24:2a:e9:c6:8e:11:53:74:1b:f6:56:f4:44:cf:24:a7:
         c3:07:23:ba:36:c4:32:51:dd:4a:51:30:3c:28:67:d5:e2:e5:
         7b:1f:79:1a:3d:e8:31:b1:46:ec:bb:fc:26:f0:3b:a7:88:41:
         bc:2d:36:de:ec:2e:1b:32:3c:53:c0:be:55:b6:a6:6a:72:43:
         27:0f:cc:4e:88:e3:d8:d5:78:b0:b9:c0:42:1a:2e:e7:ff:2b:
         1e:29:eb:bc:0a:2a:f3:27:17:6f:cc:1f:c0:ac:32:c5:dd:90:
         66:35:93:b7:2f:13:ba:8d:7d:5b:7d:dd:0b:d7:51:cb:ae:e8:
         42:3d:cc:89:cf:0b:5a:30:60:90:f8:6a:cd:51:6b:43:3b:5f:
         d5:9d:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:05:01 2025 by rpki-client