Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
File:                     e7f8b070-b54d-345a-99c3-6754564c0672.roa (raw, json)
Hash identifier:          Nl6k7n6kIGFCkjHpUnHQiOaXQvwD93F5V4BEF4C49kg=
Subject key identifier:   4F:7A:3C:B7:62:49:C5:25:78:B9:BA:17:9F:0A:D8:2D:B8:3A:1E:94
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F4328584A03A552441762EFD921160900
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     8075
IP address blocks:        67.210.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:52:44:17:62:ef:d9:21:16:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=e06b03b2-7fae-4e55-87bb-7d4f5a712979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:37:f5:a9:51:a8:63:02:a8:08:f6:b5:e7:
                    41:f6:13:81:2c:7f:16:a0:14:a9:d9:90:3a:8b:75:
                    3c:ee:12:62:c8:42:59:ff:a6:33:65:9a:22:e9:d1:
                    84:df:f2:cb:90:23:d0:b6:9d:fe:78:10:e9:31:cf:
                    59:4f:a0:34:2b:a1:43:c4:6c:37:48:81:83:4d:4a:
                    86:d9:57:65:2d:4d:8e:0c:3c:3d:5d:61:e8:7d:c0:
                    39:cc:f4:02:7c:4f:62:6d:c0:c3:ac:22:70:20:a1:
                    cd:4f:28:59:59:9b:fb:b2:79:2a:a8:06:f1:44:2f:
                    24:85:ee:6a:d7:ca:46:98:09:f7:78:bb:e4:8f:67:
                    09:51:80:82:e3:3d:33:c8:e1:5c:a9:b3:66:93:b3:
                    e5:3f:b7:9f:06:dc:52:2e:a7:a8:b8:24:6d:12:3a:
                    b7:10:a1:19:f8:77:fa:7d:c1:59:24:b3:09:8d:8c:
                    01:cb:f2:fc:82:b0:c4:71:8b:2c:3a:59:ce:dd:99:
                    b2:33:13:2b:21:e4:a5:92:ae:4d:7a:8c:60:02:47:
                    63:cc:ef:0d:6d:f5:9a:d1:9a:1c:76:ac:60:c4:8f:
                    b7:14:bc:06:36:d1:ff:e8:55:36:ad:25:c4:99:76:
                    a1:57:e1:6c:ee:c8:fb:ef:8f:82:c3:41:a4:23:ac:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:3C:B7:62:49:C5:25:78:B9:BA:17:9F:0A:D8:2D:B8:3A:1E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:d2:71:e1:c2:2d:19:3c:e5:ef:79:1a:0a:13:a4:84:86:
         fc:b4:d1:0f:09:93:b4:55:0d:70:ad:25:29:92:02:3e:70:53:
         67:09:43:ce:4a:81:6f:05:b3:16:2a:7b:05:8a:9a:cd:b1:35:
         39:d6:00:85:d8:ed:85:74:6b:57:64:96:e7:3d:49:ad:cf:44:
         82:47:d4:93:e8:2a:62:20:d9:3e:4c:5c:f1:24:fa:70:1b:ad:
         d5:43:b7:72:11:81:5d:e2:a1:62:35:5f:cd:bd:96:c1:5f:79:
         15:12:8a:20:73:dc:54:0d:c4:05:25:7c:35:5b:dc:26:d1:9a:
         15:29:57:b6:74:ec:ea:06:e9:08:c7:dc:90:50:1c:d8:41:52:
         87:86:63:93:9c:90:e8:05:fa:1f:80:6b:aa:5b:34:db:ef:fb:
         e2:62:53:e9:05:fb:1f:79:1a:d2:57:25:63:4f:a3:e8:b2:64:
         88:67:34:ce:29:4d:d3:61:31:91:09:f2:2f:03:5d:6a:8a:8d:
         c0:88:f7:de:d3:84:f3:65:b0:80:cf:c5:d5:5d:7a:cb:f2:b5:
         50:b7:01:24:14:0f:40:fb:a9:ef:ad:46:ac:78:1d:ae:9b:31:
         46:21:64:f0:96:e7:c9:15:bb:ba:7c:0e:c9:87:06:93:0e:51:
         93:55:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:11:08 2025 by rpki-client