Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/b9c23f12-fd16-324d-8dd8-27625535fe4e.roa
File:                     b9c23f12-fd16-324d-8dd8-27625535fe4e.roa (raw, json)
Hash identifier:          US5d0OJne1wUmLmcL8gGsqz/IyyXYLHrqktscbjrttI=
Subject key identifier:   9A:3F:0E:BB:77:AE:1D:DD:22:47:61:8F:A4:86:1B:4A:C3:A9:EA:E4
Certificate issuer:       /CN=9b363682-90e4-4356-b229-137b0af7add1
Certificate serial:       010D0C9F4328584A3B7AF80CA5DABE7F8AEF4B00
Authority key identifier: B8:C2:54:40:4B:0D:00:73:64:D1:35:7E:B7:FF:4C:73:D0:29:A0:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/b9c23f12-fd16-324d-8dd8-27625535fe4e.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     19782
IP address blocks:        66.205.160.0/20 maxlen: 24
                          66.254.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f8:0c:a5:da:be:7f:8a:ef:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b363682-90e4-4356-b229-137b0af7add1
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=bb1b6fa7-f952-4d7a-ade7-31210b641f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:85:62:de:42:fa:76:40:f6:2d:2b:83:fc:
                    0b:17:0f:fb:9e:ea:15:9b:e0:e0:97:14:85:7d:54:
                    df:e2:80:59:32:80:10:10:20:e4:a2:e8:53:d1:60:
                    61:87:37:2c:df:a1:39:81:32:8a:d4:ac:bb:cb:4d:
                    76:14:74:02:dc:4e:0a:d3:21:a6:aa:d9:0c:d3:3b:
                    ff:97:b5:60:d7:bb:af:43:42:03:ae:36:64:b6:ed:
                    38:af:ec:21:41:90:4f:50:51:86:5f:97:10:10:62:
                    02:09:c4:d9:15:ba:48:9b:5f:17:5b:87:fe:7c:ef:
                    d6:29:64:a6:11:79:8f:03:3a:33:15:54:63:87:c8:
                    d2:81:df:7d:e0:ea:e5:13:15:bc:be:d3:8d:d1:88:
                    07:5a:57:17:2a:b3:d2:b8:da:65:f4:32:07:32:40:
                    23:47:10:8f:02:15:c2:38:2a:7d:e0:9e:52:82:2f:
                    18:b8:71:3d:87:ea:a6:d3:4c:a9:84:e5:cf:51:6e:
                    a8:9a:45:a7:79:77:a4:b7:3e:a1:f6:ec:1a:ca:0d:
                    8a:a8:e7:16:c6:98:d7:e9:5b:57:ce:71:2b:d5:3e:
                    d5:60:56:db:a7:75:dc:a5:8a:2a:7b:40:d8:d5:2f:
                    1f:ca:d2:ed:a9:d2:d7:5a:98:00:2e:10:f7:6b:b0:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:0E:BB:77:AE:1D:DD:22:47:61:8F:A4:86:1B:4A:C3:A9:EA:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/b9c23f12-fd16-324d-8dd8-27625535fe4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1/9b363682-90e4-4356-b229-137b0af7add1.crl

            X509v3 Authority Key Identifier:
                keyid:B8:C2:54:40:4B:0D:00:73:64:D1:35:7E:B7:FF:4C:73:D0:29:A0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b363682-90e4-4356-b229-137b0af7add1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.160.0/20
                  66.254.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b9:fd:eb:ae:0d:28:f9:c0:66:0e:30:c4:9b:a6:fa:45:4b:
         d4:1a:47:aa:f9:ae:17:31:58:66:a1:15:5b:07:6b:1a:62:fd:
         bd:6e:ab:ed:d9:eb:31:b4:ac:6e:e9:07:bd:75:e5:ab:11:75:
         22:db:60:ee:31:a8:53:05:19:e9:b2:0d:8a:fe:ff:58:f8:18:
         26:c0:aa:56:e5:31:59:9c:e9:f0:60:e5:70:85:be:82:51:3f:
         c5:39:dd:19:81:ef:db:aa:f8:72:01:f8:89:ef:c6:b7:a8:8a:
         93:e5:d6:e8:d1:64:f2:9b:26:e9:f6:2a:86:f5:87:2b:06:24:
         00:0d:92:ec:b4:49:15:00:8b:71:cf:cb:91:8c:98:c1:82:e1:
         60:59:f1:c5:63:6c:9c:7f:97:d5:96:63:6b:bc:f9:a3:73:7f:
         40:f7:57:aa:81:c1:45:12:05:dd:40:ab:4c:f4:66:68:c1:6f:
         dd:a0:48:e3:78:88:71:95:1d:8a:70:eb:8f:46:d7:bf:74:07:
         a3:fa:9a:f7:80:fd:bc:38:b1:a8:37:4a:8f:47:2e:00:ef:65:
         bf:c4:e7:74:be:df:79:81:c5:31:88:60:0c:47:44:78:b7:e2:
         79:80:f5:dc:8b:22:96:b4:b3:d1:92:3e:0a:9e:d8:17:64:c9:
         67:eb:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:29:45 2025 by rpki-client