Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/4abc65d1-1adb-3ba7-9f47-e5b205591fdd.roa
File:                     4abc65d1-1adb-3ba7-9f47-e5b205591fdd.roa (raw, json)
Hash identifier:          t/WYpsUuu8G30c22E6FKI73vd5nM7HkzaLFWfFvRoeM=
Subject key identifier:   61:7F:49:13:AD:6C:D0:31:BE:7A:A5:E2:AA:25:37:37:17:6F:11:0C
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584A814645DCB8D86BC281463060
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/4abc65d1-1adb-3ba7-9f47-e5b205591fdd.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     11272
IP address blocks:        66.175.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:45:dc:b8:d8:6b:c2:81:46:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=a84a6545-fafc-4d88-80df-79ffac6251e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:da:ea:07:54:63:51:82:24:2c:ea:24:1b:
                    93:1a:2f:3f:39:25:02:fa:ac:e8:af:f0:b6:1a:1e:
                    f0:b0:c3:c5:9e:e9:4c:95:8f:39:a6:a2:e1:00:1a:
                    6c:13:c1:a1:07:a6:a7:2f:e8:dc:31:98:7d:eb:2a:
                    6d:26:b7:62:e4:a5:db:a0:08:90:06:1b:5f:9d:6f:
                    76:f2:e1:fb:d8:a6:7c:ef:47:a3:86:22:66:6f:91:
                    67:2b:39:43:4c:3f:c5:81:c6:2b:67:35:51:44:7b:
                    c7:d0:d4:4a:ae:18:98:19:01:44:c6:6d:94:0c:13:
                    b0:65:e3:52:1a:1f:97:3e:ec:d8:9b:82:2f:56:11:
                    ad:c9:76:d0:10:3f:8e:d8:af:b8:5d:97:e5:fe:65:
                    48:92:90:1f:ae:68:95:90:c5:37:48:74:4e:0f:12:
                    e9:35:8f:79:de:a9:82:8e:41:28:d6:5c:b4:c3:b0:
                    76:7f:d3:46:a6:91:29:73:76:15:11:d2:34:23:02:
                    9c:45:9e:c3:28:9c:87:19:f1:b9:8b:4c:92:b8:22:
                    7d:af:14:03:f4:b5:11:6a:0f:6b:f0:8f:44:ac:d1:
                    69:d5:c2:e5:ca:28:bb:8f:44:e9:fd:75:4e:5a:48:
                    12:9b:0f:26:c1:5f:63:59:75:0b:e5:d4:71:5a:7d:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7F:49:13:AD:6C:D0:31:BE:7A:A5:E2:AA:25:37:37:17:6F:11:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/4abc65d1-1adb-3ba7-9f47-e5b205591fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:2c:96:fe:9a:2d:75:57:f1:d7:57:f9:b4:41:28:d7:a2:
         ba:06:63:0a:bd:e3:13:d1:89:86:f0:cb:9e:f6:37:91:22:58:
         90:57:da:59:29:b2:98:0f:19:e8:7e:f1:a8:4c:ad:25:9e:ab:
         1b:ca:1c:e7:f8:0a:f3:88:05:96:97:8f:66:44:2e:c9:d3:50:
         f3:5d:e4:5e:56:9f:16:33:40:af:98:64:95:bc:ab:92:e5:9a:
         18:6f:69:73:0d:c8:b4:0d:b6:ea:20:00:e0:d9:fe:8d:e5:f1:
         5a:e9:8b:0c:69:d9:52:8d:bd:9e:64:d2:3e:ad:77:fa:75:a5:
         0b:60:e0:2d:91:56:40:68:f7:d8:73:ef:1b:eb:af:fb:41:f0:
         1a:95:fd:9f:84:11:1c:1b:2c:89:20:53:7d:44:0c:16:6b:b9:
         d8:49:e0:ea:2e:28:d2:f3:b1:b0:49:ec:b2:8d:ac:44:32:4c:
         1a:c2:c6:2c:e1:bf:a5:b3:b8:e8:c4:ab:3f:45:af:8b:a2:ce:
         00:9c:80:e5:de:8e:9c:3f:9f:df:96:1a:4d:70:2b:61:63:21:
         38:51:a4:37:52:04:62:9b:ab:c9:50:f7:8d:d3:b3:78:6f:c4:
         99:7b:d0:56:a3:79:50:8e:21:02:02:6c:72:6a:d2:c4:5f:88:
         20:d5:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:23:57 2025 by rpki-client