Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
File:                     02fc3568-a294-3f7b-a040-efba2cd76305.roa (raw, json)
Hash identifier:          XOLnNDaLX9FSq0rBQwB8Hi5TtcBK37/o1gIStgvO9bg=
Subject key identifier:   5A:90:23:06:86:80:38:7F:20:3C:64:01:94:BC:F3:C6:76:69:F5:53
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F43285849D85FA1D83D21CFE27D5FC100
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     8075
IP address blocks:        67.210.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a1:d8:3d:21:cf:e2:7d:5f:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=963ac4a7-d45b-4df3-adf4-30935b13d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:02:e9:65:60:93:f9:c1:de:fe:81:bf:6d:
                    93:44:b3:42:80:93:93:aa:07:e1:25:05:3f:4e:18:
                    bb:16:e0:24:dd:9c:b6:9d:1c:b7:e8:34:ad:c3:1d:
                    78:d2:5a:c4:84:96:b0:60:88:af:b3:21:b5:e8:72:
                    21:18:a5:a3:48:b3:a6:99:cf:ca:0d:38:6b:86:fe:
                    ee:e1:ad:92:22:11:62:fb:a7:20:9e:e7:b4:9c:21:
                    df:37:ff:1f:49:b7:ba:20:9d:b5:d7:f5:fd:29:b2:
                    97:ad:76:76:56:ff:b1:89:0c:65:64:13:58:4f:06:
                    9d:26:90:68:f5:a5:e2:aa:57:23:01:36:41:78:34:
                    96:c9:01:c6:ba:01:35:9b:4a:24:c5:ed:fa:0b:3d:
                    79:e7:0c:32:47:2e:95:af:21:cc:bc:f2:10:ea:cd:
                    f5:9c:68:d8:2e:5e:a4:e9:b2:0f:49:bc:dc:5b:7c:
                    97:24:6f:f8:1a:55:0a:96:45:21:c5:a4:8e:7d:cb:
                    81:55:99:33:11:cb:6c:d5:a2:f5:91:ea:41:c4:26:
                    5a:65:50:ed:58:b4:99:23:8c:69:69:d3:c2:b0:21:
                    e5:91:81:22:01:1a:fe:8d:14:c0:44:8d:d3:6b:ca:
                    42:3b:2d:e1:ab:97:f5:75:48:90:24:9e:3c:fb:c4:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:90:23:06:86:80:38:7F:20:3C:64:01:94:BC:F3:C6:76:69:F5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:c1:4e:74:c6:9a:38:29:ea:0d:82:bc:d8:45:c7:ce:0d:
         c4:46:50:37:6e:71:96:e2:c1:70:cb:3e:dd:42:43:fa:67:ac:
         1f:27:c7:d9:40:52:91:dc:50:2c:71:06:56:00:77:06:6a:1d:
         b8:47:4a:cb:8e:be:11:6e:05:59:6c:c3:77:25:c6:93:e9:c7:
         a0:ea:07:e5:cf:25:69:b9:1a:37:0e:ce:4e:32:e5:0a:0b:89:
         1b:3f:0c:03:6b:2f:05:d0:b0:7c:9b:3a:92:8d:e2:03:7f:2d:
         83:3c:43:bf:98:dd:1f:3f:14:99:85:cd:3e:73:1a:1b:47:fb:
         48:39:33:09:85:63:30:78:a0:cc:9e:22:f2:66:7c:42:08:b7:
         e5:fd:85:86:02:3e:e0:e2:bd:fc:f2:cd:7e:af:6f:d7:af:29:
         bb:43:87:a5:59:0c:30:15:f4:b2:b1:0b:09:40:75:bf:d9:42:
         30:21:94:30:45:67:66:8b:31:46:ec:b4:7e:44:c7:e8:eb:d8:
         03:e1:d7:dc:55:94:11:5d:ee:69:c3:53:90:2f:7f:84:e0:fc:
         c1:8f:89:26:75:56:47:a9:20:8b:a2:4f:4f:4a:a8:88:7a:b5:
         42:1c:e7:f1:71:1a:c8:f8:cd:18:7c:b8:a4:36:ef:55:5c:f1:
         0d:26:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:29:04 2025 by rpki-client