Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b3587ad5-1056-3edc-b351-03127ca14e2c.roa
File:                     b3587ad5-1056-3edc-b351-03127ca14e2c.roa (raw, json)
Hash identifier:          dFfNbNV/HGRzcRVGrFwt9DC4+N+wU2cS0hyvk0SEN04=
Subject key identifier:   29:01:62:69:4B:04:92:92:AF:FC:67:2C:C8:87:CA:0A:E3:E0:7E:EC
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A0D6A981D0822166F868BDC80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b3587ad5-1056-3edc-b351-03127ca14e2c.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     30058
IP address blocks:        66.90.66.0/23 maxlen: 24
                          66.90.82.0/23 maxlen: 24
                          66.90.89.0/24 maxlen: 24
                          66.90.127.0/24 maxlen: 24
                          2001:49f0:d101::/48 maxlen: 48
                          2001:49f0:d200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:98:1d:08:22:16:6f:86:8b:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=f936a4b0-9904-44fa-91ca-398ac19ac3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:96:d0:d7:aa:ed:a9:ff:70:3a:8d:72:32:
                    84:48:e2:bc:a0:2f:b1:03:74:ed:c4:96:06:7a:d3:
                    17:18:a1:68:9b:bd:9f:dd:6f:7b:7b:a0:67:61:f5:
                    f0:e0:9a:44:0a:9c:de:3a:03:f3:86:8f:9c:63:ce:
                    9c:38:37:33:6f:02:9c:ea:fd:e3:73:6c:c0:d3:ff:
                    e4:d2:4f:a5:41:05:c9:7c:be:be:61:c7:fc:1e:ae:
                    f2:b0:73:9f:ca:26:ab:b0:de:c4:8c:cc:b2:0b:d4:
                    0d:c2:d7:98:43:38:4e:e0:2e:e1:e5:91:63:87:c1:
                    7f:3d:e4:e7:da:d8:73:d0:48:1e:10:b5:ea:5d:3a:
                    40:77:1b:36:5b:45:8e:a0:68:3d:84:56:0b:85:46:
                    a2:3f:8c:6f:62:09:ca:d3:67:86:48:19:e9:8b:c8:
                    05:37:49:d5:24:cf:61:c4:57:af:0c:5b:3b:d2:ed:
                    54:ae:c6:76:18:84:11:a9:81:b4:8f:24:bc:61:ec:
                    7c:a9:4c:40:f3:7b:0f:3d:4e:a1:2d:27:de:9a:c3:
                    a9:dc:ea:c1:81:3a:5c:11:f3:1e:70:01:be:b3:a1:
                    fb:6d:87:33:c0:b4:dd:88:fa:b4:ca:c4:1d:6f:ce:
                    e9:8d:5c:46:a9:b1:94:ac:af:84:33:fe:b0:6f:07:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:01:62:69:4B:04:92:92:AF:FC:67:2C:C8:87:CA:0A:E3:E0:7E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b3587ad5-1056-3edc-b351-03127ca14e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.66.0/23
                  66.90.82.0/23
                  66.90.89.0/24
                  66.90.127.0/24
                IPv6:
                  2001:49f0:d101::/48
                  2001:49f0:d200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:78:f2:24:45:50:74:5c:b0:b9:72:f6:6c:14:da:dc:0d:
         7c:f4:01:b4:07:15:a0:49:f4:0b:81:0c:07:26:28:30:39:06:
         ff:53:13:95:f5:d8:e0:f5:fc:da:74:f2:29:3c:51:e2:1b:41:
         d0:f3:3c:86:9b:59:3c:66:ae:bf:c0:86:c8:93:2f:6f:e9:99:
         67:60:32:1b:ee:79:31:28:45:c6:3d:ca:8b:88:24:ea:33:d9:
         b6:45:26:9b:53:7f:43:28:ea:47:52:5a:6e:37:48:e3:57:26:
         80:dd:34:17:d8:ec:61:cd:d3:00:09:a2:88:50:e5:74:38:f9:
         ec:4c:bc:f2:ae:68:41:26:46:9d:ea:bf:89:0d:2a:4b:45:4a:
         ff:9f:8d:c1:2a:d0:44:6b:c2:b0:f0:a7:b8:51:47:08:ef:35:
         4d:67:75:72:b2:36:d3:5d:e9:56:b3:6a:18:88:76:38:22:42:
         a1:d2:a9:8e:89:ee:c1:b9:e5:a8:05:78:07:78:a1:69:5c:07:
         d8:f9:3f:17:7d:e0:2d:c3:81:18:c6:c4:54:ae:88:6b:ce:f9:
         d7:0d:73:6c:38:23:7b:81:fb:c0:5c:14:5a:73:75:49:c7:aa:
         79:35:43:f8:a7:27:4f:30:4c:13:14:e7:79:77:81:d4:73:1c:
         e8:f1:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:13:25 2025 by rpki-client