Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/59e05af0-8776-359c-9a0f-c854501a4084.roa
File:                     59e05af0-8776-359c-9a0f-c854501a4084.roa (raw, json)
Hash identifier:          CzeV+X2/IutX28f/Rvl1Es3bV/qesW4o3Wg2nkfo4t8=
Subject key identifier:   06:77:92:E3:98:01:23:A9:FC:A2:24:B2:6D:0F:77:32:D2:39:74:FC
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584A77808E17DD96EF00BDDC3700
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/59e05af0-8776-359c-9a0f-c854501a4084.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     8075
IP address blocks:        166.98.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8e:17:dd:96:ef:00:bd:dc:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=48a17910-8e5a-4b30-9ae8-ed054c70cd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:39:f9:71:23:fa:71:ed:61:9f:76:91:28:
                    3c:9a:9e:5b:38:37:f2:a8:74:13:e3:eb:20:ad:34:
                    f9:e9:3a:8d:6e:79:27:db:c4:cc:52:36:88:d8:23:
                    6f:39:96:78:fe:15:3c:95:87:a0:59:cf:49:1b:c4:
                    4a:b4:b6:61:e0:b0:87:29:e7:84:27:16:ee:74:51:
                    db:f7:cc:ad:5b:ee:29:1a:9d:9b:83:98:ae:4b:ce:
                    74:eb:37:b7:50:7b:bb:49:4b:7f:75:8b:a4:59:1d:
                    a0:bb:34:69:73:13:ea:df:88:89:e1:de:ae:b7:cf:
                    24:6f:63:13:b6:05:fe:93:d3:67:e1:62:bb:cc:ed:
                    f0:f8:4f:b4:48:84:9c:35:b7:cf:e6:73:e4:40:e4:
                    26:f1:a8:23:cb:4e:3b:e7:e7:06:8e:99:29:cc:02:
                    1b:9e:c5:b8:4f:83:57:7d:e6:9d:43:21:72:d5:71:
                    01:59:82:af:e8:e2:36:2c:36:29:87:55:de:89:e1:
                    db:fd:bc:ad:f9:86:08:5e:8e:91:9b:e3:07:61:29:
                    a2:c8:05:0f:c0:e0:54:00:04:2b:b3:98:9c:d9:df:
                    77:e7:9c:a9:82:18:5c:b6:1f:98:87:f7:ca:f6:7a:
                    4e:0b:55:85:99:44:51:a6:f7:51:5d:8e:20:2c:8e:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:92:E3:98:01:23:A9:FC:A2:24:B2:6D:0F:77:32:D2:39:74:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/59e05af0-8776-359c-9a0f-c854501a4084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:e7:8e:04:ba:3f:b3:1e:86:c6:e0:e3:a0:36:3a:77:37:
         88:76:91:c5:12:f2:9a:58:26:e8:43:4e:77:64:1d:a3:dd:5f:
         6e:78:7d:e6:9d:4a:a3:2e:14:a2:33:21:0e:46:1e:44:e5:06:
         5c:40:a5:05:8e:28:6d:58:6f:d8:3d:71:6f:ad:ff:a5:c7:16:
         a4:ea:d7:0c:38:eb:cd:95:34:35:2e:b7:f3:73:30:86:38:a7:
         84:80:3e:ac:8f:40:b3:ba:86:47:1d:f1:d6:c0:2a:51:f1:20:
         0b:55:24:11:c9:5f:68:8d:15:52:86:42:1f:75:1a:0c:49:79:
         6b:87:94:db:fd:17:5c:b6:1f:84:97:c3:34:13:db:0a:2c:94:
         3d:54:26:26:69:0b:14:b1:44:50:e4:2d:57:d4:34:6c:22:0e:
         a9:b6:26:4d:1c:f1:96:85:67:ce:78:e5:5f:05:65:b0:a1:b5:
         cc:bb:78:ce:b9:92:79:2a:87:80:84:48:6b:45:44:1a:46:13:
         3d:c3:e5:01:86:6e:5b:c5:eb:d0:86:1b:68:a7:c5:55:c2:43:
         4b:05:ff:99:00:1d:ee:7c:02:bc:69:41:e3:f7:48:26:bc:68:
         cd:fb:8d:c5:89:e8:e9:76:94:89:c7:cc:69:03:40:52:84:cf:
         9a:1f:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:59:22 2025 by rpki-client