Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa
File:                     058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa (raw, json)
Hash identifier:          EspiksO5IUdJ5STiC59VgCnJiaa0z9HAfGta7v+JRe4=
Subject key identifier:   EE:43:5C:82:B4:5B:46:F8:6F:0B:48:DE:52:23:F9:4F:40:A6:19:E3
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F4328584A3FAAD9B3D82F08EE67A67070
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     205220
IP address blocks:        66.245.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d9:b3:d8:2f:08:ee:67:a6:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=76c6cb5f-1ffd-4465-9c3b-5c5370ac3b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:39:37:c0:b5:5f:ee:d8:ac:51:83:32:c6:
                    d6:1c:c9:66:5b:7b:13:a0:37:b3:08:57:66:97:bf:
                    4f:6d:1e:59:9a:26:5f:5e:6b:f0:f9:a2:cc:cb:bb:
                    de:18:11:14:3f:c5:8e:31:43:90:97:a9:e8:50:a2:
                    f4:f6:ae:e6:f5:c8:c6:17:f7:34:13:5d:bf:bd:43:
                    86:10:6d:dd:05:13:31:da:ce:84:e6:2d:09:7a:58:
                    cd:f1:bd:7e:79:56:91:7f:b8:e3:41:e2:b6:d2:7a:
                    e5:f6:8b:b5:26:db:cf:69:01:74:ff:24:97:b3:9c:
                    d6:d4:7e:2b:7e:02:23:c0:b3:c9:35:d5:1d:8b:09:
                    5b:ba:c8:09:47:6e:cd:c3:3a:db:d6:5a:ce:42:4b:
                    49:dd:11:57:36:ba:d4:bc:3f:d8:b2:58:8b:10:24:
                    85:e4:3c:ad:59:10:76:d0:35:e2:ed:6e:b1:48:fd:
                    fc:85:9b:4e:b9:a9:f2:4c:f1:78:9b:5f:73:7e:08:
                    d5:be:ce:8c:9c:e7:59:9f:b7:a5:55:52:87:a0:b4:
                    21:42:3c:fc:26:64:a9:4c:f5:b2:58:af:90:f0:fa:
                    86:8b:85:b3:e1:d1:59:31:72:e6:75:fd:21:2e:0c:
                    f7:a0:13:56:1d:c3:01:45:dc:7e:16:99:05:4f:c9:
                    7d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:43:5C:82:B4:5B:46:F8:6F:0B:48:DE:52:23:F9:4F:40:A6:19:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/058975fd-fdfb-3b92-acf0-bf7dfd88fe86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:f1:50:c8:5b:a6:c7:5b:64:e5:f5:55:1e:2d:b7:89:d6:
         04:0f:47:e9:1d:e3:de:f3:30:1a:c6:1e:ff:af:a3:f6:14:4f:
         0b:b0:8a:22:12:d8:89:57:61:bf:fd:d1:31:42:d3:ed:86:29:
         e3:31:90:08:a6:ad:d5:af:6b:bf:2d:cd:84:1b:b5:34:cc:61:
         de:d7:1d:a9:80:03:57:a1:2f:07:a4:15:29:78:18:9f:9f:08:
         c2:b7:6e:dd:81:58:0a:9d:f5:0b:ce:11:9c:06:02:52:54:19:
         d9:ee:56:57:44:da:1a:41:99:32:f4:67:ac:a7:78:20:90:17:
         38:cd:70:7a:c4:04:41:aa:cd:cb:73:3d:db:55:76:4a:36:13:
         7a:88:a0:2d:b7:e5:82:08:8d:9d:e7:d2:9a:50:9c:ad:35:d1:
         dc:0e:3b:6b:d5:b6:b9:14:37:5c:08:50:13:a4:dc:2b:f2:52:
         38:3f:0a:1c:f5:ba:af:06:5f:e4:7e:c4:cb:74:5b:7f:7b:78:
         50:4a:72:3f:31:1f:49:f6:03:1b:f0:78:f6:87:2e:df:cd:bf:
         58:68:c4:cd:66:62:b2:8b:8c:35:d0:91:49:cd:67:6d:73:cc:
         2d:45:d7:b7:2d:65:c7:61:5f:a8:13:2b:03:95:58:66:30:0e:
         17:b6:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:51 2025 by rpki-client