Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64332eb7-2e67-3374-85c6-7f4bee77f651.roa
File:                     64332eb7-2e67-3374-85c6-7f4bee77f651.roa (raw, json)
Hash identifier:          h62YnKx69UYoSje4DWT+R6aoBCtoOPdHanlehIODxV4=
Subject key identifier:   21:EF:6A:EB:DC:1B:28:BB:5F:43:35:03:2F:DC:74:EB:14:07:64:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD0740541FAEE099291630
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64332eb7-2e67-3374-85c6-7f4bee77f651.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33650
IP address blocks:        66.208.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:07:40:54:1f:ae:e0:99:29:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ddc0e62b-a367-475a-acdc-14a14ad45679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:35:fb:26:5f:ef:93:71:c5:ae:8f:53:eb:
                    0b:2e:56:09:b9:97:41:cc:06:9b:e5:d0:ed:09:f3:
                    45:fd:1a:d0:13:d1:8f:62:74:d4:d4:01:4d:55:c2:
                    bd:af:fd:5a:7d:1d:09:61:8d:25:fe:ca:4b:b7:95:
                    03:72:fe:f2:1d:86:1b:dc:8f:57:33:28:94:eb:c9:
                    28:7f:a7:bf:62:92:bb:b1:29:03:1f:6f:48:28:9f:
                    b2:99:d0:f4:bb:e7:8e:6d:8f:5c:16:06:5f:96:89:
                    b0:0e:79:73:49:a5:14:28:2c:19:6c:ee:3c:96:8b:
                    f7:0e:4b:65:97:96:d9:d8:99:5d:67:e5:dc:4c:f2:
                    8c:37:1c:48:85:43:1a:c5:e4:6f:37:6c:37:68:ff:
                    d0:1c:26:0f:d2:93:eb:08:7a:9b:42:07:91:27:d0:
                    47:06:a3:92:83:77:01:83:a6:4b:85:35:9e:d0:ac:
                    8a:41:de:96:de:b5:dd:d5:1d:9d:a0:44:4d:5e:be:
                    d1:fd:25:e6:68:25:22:1f:aa:b7:01:a2:9a:60:9a:
                    29:63:c3:fe:77:c5:ad:3a:f0:7d:97:95:1b:fc:aa:
                    52:0b:0b:b5:3e:18:3e:8b:2d:a1:63:79:2b:a6:05:
                    94:cc:c2:43:4f:4b:01:97:ea:dc:47:2c:c8:9b:1c:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EF:6A:EB:DC:1B:28:BB:5F:43:35:03:2F:DC:74:EB:14:07:64:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64332eb7-2e67-3374-85c6-7f4bee77f651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:d7:67:b2:5f:ec:25:17:cc:96:67:bf:85:01:f7:b0:25:
         a8:81:06:f2:26:29:c2:24:74:3d:80:53:79:f6:ea:57:e9:1b:
         04:cc:c0:d5:81:78:da:c4:f7:b1:ec:19:03:87:27:76:32:60:
         5b:2c:c9:34:f6:7e:e5:ce:dc:7d:41:0e:ac:b6:5e:97:83:a3:
         b7:fb:cc:95:49:e7:43:f5:35:a6:a8:ab:d7:29:18:3b:27:1c:
         d9:09:8b:41:38:17:7d:a9:14:1d:da:60:15:80:3c:b0:ba:0c:
         50:e8:42:3a:9b:46:21:c6:06:34:92:59:b3:0d:bb:98:6e:d7:
         9b:f8:c6:20:be:ac:75:63:29:55:0f:50:e6:c2:e9:ae:a6:70:
         af:9d:f4:c8:f7:dd:ec:57:9c:37:e0:46:c7:5d:9e:23:01:22:
         6f:24:41:47:8c:7c:f4:b2:e7:f4:64:86:33:94:70:e8:66:f3:
         4d:1c:b8:f6:39:f3:bb:87:23:13:58:65:cb:d4:3a:4d:f9:2f:
         8f:bb:2b:21:54:59:fc:7e:7f:d9:2d:1a:8e:b0:7d:38:47:d5:
         8c:08:9e:15:65:55:23:2c:91:41:d9:d9:23:3e:52:c1:39:1f:
         7c:39:df:38:f9:84:7b:88:04:9f:40:b1:5c:e3:ad:76:8e:38:
         ea:c7:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:57:01 2025 by rpki-client