Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa
File:                     3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa (raw, json)
Hash identifier:          RHvENF/ubQZ2If0Jic9NcdT8wrNySwULSYSdT7eFAZU=
Subject key identifier:   BD:CD:01:B5:9F:DD:BC:90:C5:5B:B0:01:26:F8:A3:A0:52:A9:54:33
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A4DA053BF251875727DE74500
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     18785
IP address blocks:        66.231.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:53:bf:25:18:75:72:7d:e7:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=56ab2b6e-a954-4d30-9c29-176c2f11f5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:8d:4a:32:dd:c6:7d:a3:07:68:25:69:d2:
                    13:5f:d4:65:26:a3:fa:88:65:b7:b5:4c:bf:84:13:
                    1e:f0:34:7a:07:7c:cd:27:bc:92:ed:9c:46:36:d9:
                    11:16:fc:cc:e6:e0:75:1d:90:38:33:b8:25:25:e0:
                    9a:64:a2:3f:22:a4:d1:d0:9e:f4:bb:c3:21:5b:40:
                    ef:39:74:96:98:4c:7b:1e:e1:e3:b4:9b:1f:1a:50:
                    d3:c6:e2:42:60:b4:76:4a:60:fd:e4:b7:8b:2e:11:
                    58:34:86:c2:b9:a9:ea:67:3a:8b:bb:1a:4b:44:4f:
                    b2:f0:a0:55:f2:0e:93:eb:c0:58:f4:e3:ab:af:64:
                    de:fb:97:b6:32:11:cb:f1:5c:05:0f:96:50:97:9e:
                    7b:9b:47:8d:7d:27:45:dc:fe:0d:b8:61:c1:ea:24:
                    94:c9:37:1b:db:15:17:03:06:50:38:bc:d9:e4:0f:
                    c0:dd:a4:12:2e:49:28:32:2b:dc:b0:23:86:e7:1d:
                    7d:0f:57:86:79:b9:93:9a:bf:4a:80:f0:55:b3:36:
                    73:56:be:9b:91:84:b5:3d:9c:c6:57:33:cf:d1:12:
                    2b:97:ff:1f:8a:66:f7:39:09:e3:d7:af:31:e8:27:
                    c6:8b:bc:7e:2d:a1:28:ea:6c:d9:d0:36:df:a1:e1:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CD:01:B5:9F:DD:BC:90:C5:5B:B0:01:26:F8:A3:A0:52:A9:54:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3c42cf12-61d1-3e26-b74b-35472c5e0cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:43:03:03:d4:ec:e6:17:41:a5:58:16:38:15:75:a9:b0:cf:
         02:60:19:fb:db:9d:c0:8a:44:84:83:f9:6b:75:a5:d1:41:6a:
         e0:de:fd:8e:a4:8d:72:4e:68:ca:e6:61:e8:1d:f8:37:97:94:
         9b:67:3d:8c:2d:bb:88:72:0c:7f:6d:86:af:f0:b6:65:05:59:
         d0:10:0a:ca:eb:d3:53:04:ee:d1:09:50:fa:76:f1:c5:ba:54:
         4d:f3:16:57:69:fd:00:3b:3c:e9:d4:d2:d0:2e:e1:ea:e6:2c:
         43:01:85:e0:a0:b5:43:f8:60:04:01:4a:5b:72:96:ad:07:7c:
         d5:b5:bd:a4:9f:1a:e0:64:fc:f0:84:b0:5a:81:1a:b5:ca:90:
         d6:bd:ce:39:9f:e7:68:79:6d:9c:f1:fc:ea:02:dd:c2:69:35:
         a0:93:54:ee:d1:29:7e:6e:73:bb:9c:5f:3c:b5:ef:db:37:82:
         df:ca:e3:a7:a5:45:16:aa:08:98:0b:20:09:5a:f9:2a:60:24:
         ab:e6:89:af:e7:8d:83:ee:e6:22:ef:9d:9a:04:45:6c:75:67:
         78:5b:df:c1:ee:11:54:fd:5b:58:63:15:d5:ea:15:12:fa:9b:
         2c:b7:ff:3d:f0:0e:01:bf:c8:b8:ab:37:25:0b:e2:42:19:df:
         b0:30:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 11:37:33 2025 by rpki-client