Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa
File:                     f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa (raw, json)
Hash identifier:          dLhnnsHZq5mHDcyf24aFJhWMwk0d93/+Fc1wNBIgHFc=
Subject key identifier:   17:0F:D1:EE:89:E6:59:49:2D:79:25:4C:4B:76:4A:39:81:44:93:31
Certificate issuer:       /CN=3505b615-7597-4cdc-9539-0a0a5c49dee8
Certificate serial:       010D0C9F4328584A0D6A94285A3E31529B9967B0
Authority key identifier: 31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     32097
IP address blocks:        66.85.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:94:28:5a:3e:31:52:9b:99:67:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3505b615-7597-4cdc-9539-0a0a5c49dee8
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=248c7214-1e71-4e72-a49a-1a009dee9edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:bd:31:81:38:9b:2a:95:41:0b:bf:53:29:
                    2e:35:98:6f:44:29:62:e9:19:d4:7c:84:de:ab:3b:
                    13:d8:e0:30:e7:4d:38:3c:b2:58:2e:07:07:8e:cd:
                    cd:da:51:bc:e7:ce:fc:35:be:04:f5:a4:d5:9b:0e:
                    b8:01:c6:1a:cb:2b:9e:37:5f:88:45:87:12:f6:14:
                    bc:1d:84:b2:0d:cb:7e:4e:bb:09:de:a0:6b:04:42:
                    b1:cd:44:6f:8e:51:1b:5d:2c:25:30:02:bf:9d:16:
                    f8:29:6c:5d:50:07:73:27:aa:0c:fb:f2:51:0f:99:
                    0d:26:93:d0:a1:6f:31:b5:0c:5e:66:66:c4:72:79:
                    39:d6:a0:05:a7:88:14:14:b4:54:31:00:b3:73:ce:
                    bb:d7:3e:36:f3:7e:f9:8d:f8:02:15:76:da:b0:26:
                    9f:30:37:14:7b:ad:70:70:48:43:cf:aa:62:85:61:
                    ce:53:17:2f:70:d1:ae:23:3d:40:8e:5c:90:d5:3b:
                    ab:9a:a6:d8:3a:2e:bc:80:69:04:ff:15:e2:f6:6d:
                    59:ff:e7:50:c6:e8:1a:50:61:1b:0f:3e:32:ba:9d:
                    75:12:33:a7:04:39:6f:c6:8d:fe:83:0f:79:52:3b:
                    4c:03:15:e2:2d:5c:dc:dc:77:2f:92:cd:02:f1:dd:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0F:D1:EE:89:E6:59:49:2D:79:25:4C:4B:76:4A:39:81:44:93:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/f6a4bd98-41e5-3d8a-aa2c-cdbf360cd7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8/3505b615-7597-4cdc-9539-0a0a5c49dee8.crl

            X509v3 Authority Key Identifier:
                keyid:31:55:AB:E7:30:1A:2B:F4:40:A6:01:0B:A7:CB:0F:C3:B4:9D:F5:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3505b615-7597-4cdc-9539-0a0a5c49dee8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:f6:c3:a3:92:d7:32:3d:ef:34:ec:33:60:3f:04:81:ab:
         69:21:70:d3:79:67:62:a1:3c:da:e1:97:ea:e8:8d:01:cc:49:
         a6:d7:33:4b:b2:4e:40:0d:3e:59:c6:8d:44:4f:68:40:ec:a4:
         dd:4a:c8:2a:53:2b:53:b7:f1:f0:91:72:6a:84:1c:b7:6d:52:
         6b:06:63:e5:3d:44:fa:1e:40:8a:61:34:6e:db:58:c0:ac:36:
         0d:5e:89:68:1c:f3:79:bf:5d:9f:8f:53:56:31:75:8d:7b:49:
         36:9e:c1:06:47:ce:2f:4e:15:34:25:80:8d:7b:51:12:83:e7:
         d1:fd:5c:37:a2:ee:52:e3:5a:79:ac:93:f1:b4:5c:cf:89:f9:
         a8:1c:17:61:f4:ee:59:55:9b:12:0c:51:d4:4d:25:80:d4:ca:
         68:cb:20:e0:1e:26:18:c5:ae:ee:d8:34:ab:40:67:9d:47:b6:
         17:62:01:ca:f6:da:4d:65:c0:71:a5:da:b3:5c:20:f6:c0:35:
         6a:ae:c1:04:e2:f6:00:ed:73:3f:ad:10:da:f0:47:17:0c:e8:
         71:87:1b:94:09:b5:b6:02:6a:a1:83:50:3d:dd:b4:c9:78:64:
         cd:87:fe:d6:54:c5:8e:6b:e8:67:2c:52:9d:d4:ba:67:16:9f:
         63:dd:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:52:17 2025 by rpki-client