Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa
File:                     6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa (raw, json)
Hash identifier:          17Yna7qVm9Tk6bEegRcTKF9kC52uG/1CeX8jEW2cOsE=
Subject key identifier:   F6:21:E7:07:D5:DB:A9:47:66:EF:E2:4D:20:08:48:81:1B:26:ED:EC
Certificate issuer:       /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
Certificate serial:       010D0C9F4328584AF9515365BB978AF25ECDE380
Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     394772
IP address blocks:        66.223.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:53:65:bb:97:8a:f2:5e:cd:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=de85e7c0-2767-46ae-83dd-49201556f33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:76:05:00:6e:b2:c3:2a:92:1d:1d:ba:c0:
                    29:06:d3:96:2b:46:b1:1d:0a:dd:cd:e2:9e:c4:0c:
                    62:ae:f6:b8:5c:b5:f7:4d:87:39:ee:49:57:09:77:
                    7f:ed:2a:40:37:84:5c:fd:6f:d2:79:d8:5f:53:56:
                    70:ea:34:c8:8d:79:83:ad:02:e7:41:41:f6:8b:a8:
                    38:15:3c:f8:ce:ff:3e:ba:9e:ae:7b:57:7b:18:97:
                    3c:1c:38:3a:dc:2e:0f:4a:25:7e:28:41:f3:a1:4a:
                    0c:e4:c2:03:ac:66:dc:21:5d:7d:76:7b:cf:ed:bf:
                    ff:53:d6:af:f4:d7:cd:b3:f3:ef:1d:13:21:b8:4e:
                    c6:73:03:1b:5d:28:44:90:b4:be:35:47:10:fd:7c:
                    1d:ac:3c:0b:36:62:33:1e:e8:9a:3e:e0:80:4d:39:
                    a2:3c:d4:c5:f9:c1:bb:a1:21:76:e2:ac:9f:a9:04:
                    24:75:27:b4:d9:89:71:cb:23:71:6c:55:a1:d1:2d:
                    a4:d3:77:07:e3:76:93:02:50:6c:c8:b2:e2:da:7e:
                    fe:2b:8f:e0:af:b5:e1:74:84:4a:af:bb:3b:3a:57:
                    51:1c:09:63:06:3d:50:02:81:64:2c:a2:b8:cf:5e:
                    30:0a:01:0c:be:68:02:6f:4f:21:13:d4:56:f4:78:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:21:E7:07:D5:DB:A9:47:66:EF:E2:4D:20:08:48:81:1B:26:ED:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f8:e8:0d:ab:9a:b4:61:33:72:e7:33:ab:ac:ea:92:40:b3:
         ed:ce:c8:75:3b:59:f8:9b:1f:8d:3a:b3:50:13:d6:f7:b3:e4:
         c8:d0:36:b3:eb:0d:b1:0a:82:de:73:67:8b:f8:ea:f1:36:30:
         c9:a6:05:62:01:9d:ac:78:a6:31:56:e6:00:07:13:88:8f:53:
         ff:f7:fd:48:66:c9:d9:3d:c3:4a:70:57:8c:dd:04:8f:24:6b:
         3e:8b:06:91:d1:ac:9b:2a:4f:ef:5c:09:95:5e:80:f8:04:0e:
         05:1a:64:80:12:ca:19:30:b0:1d:99:cf:d2:b3:8d:54:b0:91:
         c8:42:69:49:4d:10:b3:2d:b6:6b:b2:83:01:a3:37:23:d4:44:
         5f:c3:bb:7e:b0:68:4e:93:73:5e:bd:2c:00:be:65:c3:80:cb:
         4b:86:66:e8:b0:d1:22:6b:dc:40:71:13:65:c5:18:26:55:74:
         25:0a:01:3f:d9:af:f5:5b:4d:4f:eb:11:bc:ea:22:e1:2e:b4:
         90:d7:c5:d8:64:7f:d4:b2:b8:b2:7d:25:44:6c:1a:41:2b:cb:
         3d:8e:bf:be:b9:f5:98:36:7b:9d:7f:26:24:7f:b4:f3:84:01:
         19:a4:65:9e:b1:ea:e3:6b:c7:62:73:04:30:2a:aa:90:76:84:
         c2:b9:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 09:50:43 2025 by rpki-client