Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa
File:                     fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa (raw, json)
Hash identifier:          DMvZ3P90G/XfnBYkLofUApCwxb2Zc7J6Hf/yE//KD34=
Subject key identifier:   37:B5:5C:AE:70:EB:3A:73:1A:76:B2:4D:2C:69:94:42:F8:43:75:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AF7EBE07C77704B878332F6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     6939
IP address blocks:        66.220.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e0:7c:77:70:4b:87:83:32:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=a7f22c74-3dbe-4871-acf6-baa8fe7ca0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:68:20:27:65:da:15:39:16:a3:1b:1f:ed:
                    ca:d9:ec:58:e9:28:98:fb:cb:5c:07:d1:5b:e9:75:
                    56:d3:02:88:9c:3b:22:03:a7:d0:5c:91:62:a8:76:
                    ba:0c:70:67:26:a1:c6:f2:6f:db:2d:c4:ff:69:db:
                    67:a7:d3:2b:1a:75:83:de:98:30:fb:b3:cd:e5:7f:
                    e1:29:67:fe:52:75:64:91:4f:69:d3:29:bd:71:35:
                    96:6b:ed:56:d7:1b:6d:2f:29:c7:52:79:99:2d:05:
                    5d:0c:04:f2:41:fc:01:6e:56:44:bd:53:57:1a:81:
                    45:b1:7c:c3:52:bd:f8:b5:30:3b:9f:82:49:26:42:
                    a2:4c:ee:ff:5e:82:02:7c:8c:72:d6:ed:a6:b2:1b:
                    ee:a2:bb:c4:6e:dd:7e:b4:ff:88:8a:1c:f4:48:40:
                    01:fc:9f:65:47:8b:d6:4e:0e:06:57:84:d6:96:08:
                    3d:b1:1b:27:65:bd:54:76:25:c8:32:4f:34:1e:2b:
                    41:80:8e:16:f3:a9:89:e5:55:5f:10:4f:5f:68:a5:
                    fe:84:b0:7e:45:cc:a4:19:96:ca:6f:88:56:73:59:
                    5c:d0:01:ae:e6:f7:e0:23:97:e2:27:d0:11:a6:1c:
                    cc:6e:14:73:e8:c3:29:07:6f:33:43:be:a1:c8:c9:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:5C:AE:70:EB:3A:73:1A:76:B2:4D:2C:69:94:42:F8:43:75:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:91:f8:a5:5b:d3:df:1e:b7:91:bb:cd:ed:d8:58:04:52:d8:
         3b:4f:ee:ef:7a:aa:d6:47:8e:a3:00:b2:c0:e8:1a:b5:11:96:
         4c:dd:10:86:e5:1d:91:9d:52:69:5c:2f:33:7b:05:1f:96:60:
         b9:10:7f:4b:c8:88:33:75:50:27:b5:b9:aa:fa:d4:5d:3d:b3:
         62:cf:6d:3e:03:aa:98:c3:8c:5c:e4:f9:3d:2e:ca:d8:92:02:
         a2:3a:bf:5d:c3:fb:81:e5:36:9c:45:bb:36:06:5f:10:7c:b5:
         66:ae:bb:9d:da:4d:9d:c4:31:ca:fb:e8:b9:ee:cf:e8:f3:72:
         43:03:ee:cf:b4:df:8a:5c:17:ea:84:1a:31:a0:d2:7b:e6:df:
         52:dc:b8:24:67:eb:7d:ae:f8:52:f4:15:00:80:a5:6b:cb:cf:
         c7:16:e0:0c:b2:80:9c:14:3f:df:28:f7:5a:49:82:43:81:3c:
         54:4f:3a:2c:e7:e4:f5:c6:6b:77:d9:ea:75:af:4d:c6:6e:4b:
         e9:e7:e0:15:57:00:62:3c:93:8e:9d:ec:42:a8:1c:dc:13:04:
         4d:3c:04:38:32:6f:b1:04:5d:d3:11:27:ae:d8:74:e7:48:8e:
         bf:8a:dc:ae:2e:28:8d:57:80:85:41:5a:d3:6d:8d:11:90:ac:
         cd:ab:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:23:05 2025 by rpki-client