Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa
File:                     fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa (raw, json)
Hash identifier:          7n+fVW0Ur3qCTUWp9BysVLThRNKrE7rRQb7QE1SCzK0=
Subject key identifier:   1F:77:5C:E9:02:D4:5D:84:57:E2:49:31:4A:C3:C6:A4:8B:42:32:44
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A7BB0B62054FDC9DC11932F00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     174
IP address blocks:        66.90.81.0/24 maxlen: 24
                          198.16.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b6:20:54:fd:c9:dc:11:93:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=132b5eac-9a05-4af7-959e-3a98f4f99371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:2d:ca:dd:20:a9:ed:7a:ea:d6:8b:66:57:
                    6a:60:98:f8:ce:ee:19:2e:3c:91:55:4e:d2:6c:1c:
                    51:3f:6b:58:2f:42:67:b4:c2:6e:2e:dd:c8:e6:66:
                    03:89:87:0e:c2:92:a3:7f:37:cd:63:3b:37:8e:9a:
                    cf:a6:d8:7a:e6:ab:66:64:3f:6b:02:c3:56:9d:b2:
                    be:19:e4:f1:9f:5e:c3:7f:9a:86:8f:91:a2:4f:59:
                    88:b0:c4:15:a9:7d:b9:64:d6:ad:c4:72:b9:d7:09:
                    90:1d:2d:6b:c1:65:25:d3:ff:6d:d2:08:9a:6b:29:
                    72:99:3e:63:a3:91:ec:c8:08:f5:06:a4:5c:df:c5:
                    60:a7:69:9d:4b:c1:11:28:5f:d6:6f:47:27:32:c9:
                    e2:90:0b:c1:74:43:97:f9:3b:30:0e:a3:5c:87:d8:
                    3e:87:52:99:4b:e7:95:a8:59:90:d0:be:df:c3:2f:
                    59:21:55:d5:56:29:4e:6f:47:50:4b:c7:e9:80:ab:
                    8e:e4:b6:14:b6:2d:a2:c7:ae:00:bf:8f:25:47:c7:
                    b1:c0:19:8a:5c:b1:73:7e:db:59:f0:e5:26:56:2e:
                    89:fa:38:96:f4:d3:b8:19:b3:3f:57:90:d0:0f:f9:
                    d8:7c:ea:a9:d9:15:32:9a:9a:e0:aa:71:af:82:65:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:77:5C:E9:02:D4:5D:84:57:E2:49:31:4A:C3:C6:A4:8B:42:32:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcf5e4c4-8a09-3f91-9459-aeef6b8308f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.81.0/24
                  198.16.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:f9:78:38:9e:29:75:dc:9d:15:82:83:7e:6b:93:e8:56:
         ff:fe:bb:df:65:73:37:28:ee:f9:cb:f9:8e:c8:08:d1:3f:32:
         06:ac:7f:8f:7a:48:2e:bb:fa:17:c9:ad:f5:85:a3:cf:5a:aa:
         b2:49:5e:04:ed:ba:fb:ad:75:3c:40:28:fc:5c:85:8f:2d:31:
         76:54:e6:9a:b8:c1:f3:a8:30:8d:19:ac:ee:14:03:03:f9:4e:
         d9:0a:4c:a0:c2:31:a5:67:99:06:79:3a:8a:14:28:38:07:0f:
         62:ec:bd:17:e6:16:eb:07:a9:15:e6:0b:88:7c:26:4d:61:d1:
         e7:09:41:de:58:85:8d:d6:75:ca:05:1f:93:94:1e:f6:81:37:
         5f:3b:c1:f0:a7:91:f9:c7:32:80:f9:77:ab:92:99:9a:59:94:
         f6:ea:4d:89:85:76:13:7f:1b:f1:cd:e6:03:50:ac:85:9e:35:
         64:cb:64:ae:02:10:67:3b:7f:aa:81:97:24:e1:26:4e:4e:32:
         8e:21:82:b8:20:0b:9a:c0:79:cb:58:74:2c:54:44:80:e2:28:
         51:30:d5:18:53:5a:93:65:89:09:2a:59:12:8c:2f:da:20:83:
         dc:01:ec:b1:de:db:05:82:10:f4:f5:96:26:22:8e:66:2e:42:
         30:51:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 06:50:49 2025 by rpki-client