Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f94450ea-886a-3dcd-b434-5a066abe9661.roa
File:                     f94450ea-886a-3dcd-b434-5a066abe9661.roa (raw, json)
Hash identifier:          r+Ps1OCnhkB+kAjeQKRRQeQYdcYcybiRgYcjzBcXubI=
Subject key identifier:   89:04:37:02:BD:86:69:93:DD:42:11:DF:60:F7:11:00:32:B8:E2:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB22164201E11F5C485418A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f94450ea-886a-3dcd-b434-5a066abe9661.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        75.66.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:64:20:1e:11:f5:c4:85:41:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=79604f19-9ae2-46f1-8a92-0dc1e3a332f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:8b:5f:f5:76:4e:a2:53:9e:01:a6:9c:a6:
                    cb:c7:2a:37:9e:33:01:87:e2:2e:6d:8e:77:79:46:
                    8e:ad:56:08:51:16:b6:78:86:68:1d:05:98:02:8d:
                    be:4b:72:11:48:58:a3:c2:19:c2:06:b6:57:ea:3f:
                    2b:f4:f3:d9:6a:f2:15:9c:40:87:ba:02:c6:cf:ee:
                    b4:83:74:c2:e8:d5:7b:ff:f3:c7:27:38:aa:4d:7c:
                    32:46:7f:df:cb:54:2d:6e:72:fc:87:6b:83:83:c4:
                    c6:ee:50:20:20:81:a7:9c:e9:4b:22:41:3b:fe:0d:
                    e6:32:e5:6a:00:03:3b:b6:26:0a:0d:31:50:a0:ba:
                    da:b0:c3:f7:ac:fc:1b:88:5a:87:b9:56:bc:a9:92:
                    67:3f:74:f3:28:36:0e:ea:9b:ed:85:08:96:17:16:
                    15:c6:94:8d:d2:6f:38:60:1d:79:00:57:98:7b:17:
                    09:79:fa:7b:24:2a:f7:e8:0a:df:f3:dc:8c:c8:9d:
                    74:e4:61:28:fa:47:d2:23:b2:ac:c7:3e:bd:6c:95:
                    be:9e:64:11:40:b9:78:f4:db:e0:a8:88:d5:c9:6e:
                    44:37:d2:b7:59:a8:73:6a:44:39:07:9b:da:b3:6b:
                    88:5f:ed:6a:93:ca:45:a4:a7:07:ad:2c:12:53:c0:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:04:37:02:BD:86:69:93:DD:42:11:DF:60:F7:11:00:32:B8:E2:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f94450ea-886a-3dcd-b434-5a066abe9661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:8e:5d:63:63:b0:d3:c0:01:5c:3a:ff:c4:5a:39:c2:36:
         11:6e:aa:18:5e:9b:86:d8:49:3e:87:de:2c:0d:ca:5b:3c:7e:
         3c:44:8a:cc:25:69:1a:50:0e:43:f8:51:10:46:07:24:d0:aa:
         28:fb:ec:e9:13:13:69:bc:43:98:0b:7a:12:7a:e8:41:c9:0c:
         02:2b:ff:f5:dc:45:c3:22:12:59:d8:85:13:98:51:6e:a1:9a:
         7c:86:39:23:4f:3e:d9:ea:4e:58:69:28:e8:69:ad:c7:03:82:
         32:bc:68:6a:7b:9c:29:43:3d:7c:29:1a:5c:17:d7:91:2c:cf:
         f7:45:ac:ae:05:d4:d5:f4:ae:34:b0:61:1e:53:a3:79:a5:b2:
         69:08:d3:86:c6:39:0b:66:0b:c2:08:1a:33:9d:8c:d3:82:73:
         85:dc:95:0a:88:54:48:65:3f:29:3e:28:08:f6:68:74:be:57:
         36:0a:3b:d1:05:01:53:ba:fd:d1:92:ed:33:96:42:b2:b0:1d:
         03:07:0d:bf:3b:1a:2f:5f:77:f9:6f:95:40:48:43:da:2d:74:
         6d:72:c3:12:26:f6:85:10:47:cf:97:4c:73:cc:9c:54:30:df:
         c1:e9:a7:20:90:8c:87:ee:9c:2e:49:61:21:a2:4e:c2:59:17:
         e2:be:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:52:01 2025 by rpki-client