Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa
File:                     06ec7975-08d6-3ae5-b849-eb78311f177c.roa (raw, json)
Hash identifier:          9ZtnfoGfEqd6k9iGwjWr9wLw1NjUubP50Gxg2rxrtL8=
Subject key identifier:   B1:3B:15:3A:DE:2F:C3:E7:86:1D:D6:27:9C:55:FF:EE:59:6D:75:A1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D594EA5D0E186EFD9295A4A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     22969
IP address blocks:        66.213.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ea:5d:0e:18:6e:fd:92:95:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=716348bf-93a4-4292-ba69-5dbc6ce4be14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:0f:bf:db:a9:95:8d:a2:3c:04:7e:08:a0:
                    48:bc:c8:80:aa:07:99:cd:82:03:07:07:86:74:6b:
                    da:f2:e6:4e:a8:e8:2e:80:be:c5:31:33:85:55:c9:
                    39:59:fd:35:3e:d7:ac:0b:79:de:74:44:2d:1c:ae:
                    2a:3a:d3:7c:73:d8:fa:19:30:c1:5d:95:f8:0d:df:
                    df:82:fe:7d:d7:56:a3:9d:4e:bf:f4:59:e4:75:c6:
                    cd:bf:da:72:68:1f:f5:99:23:73:ec:5e:68:71:f0:
                    dd:e0:b0:dc:8c:d2:c0:7b:10:26:2e:09:06:4e:99:
                    30:3e:68:49:f2:fa:ae:c7:bb:93:e8:18:66:33:be:
                    12:06:e6:ef:41:86:a4:a0:74:0f:1c:7e:1e:09:ee:
                    5f:ce:c3:1c:07:7c:d0:8c:4c:01:b4:55:bb:f1:a9:
                    16:82:f0:9a:d1:5f:89:cf:98:65:58:d8:88:9c:31:
                    1c:66:42:ad:01:5d:81:9a:63:3b:ea:1b:ec:c1:72:
                    46:b1:6f:56:73:2d:a9:91:08:e0:82:23:24:32:7c:
                    87:e0:7a:87:fc:1f:1c:bd:02:73:83:5d:42:18:59:
                    bb:2a:ed:13:24:ab:39:13:58:fc:df:fb:dc:30:87:
                    a7:99:0d:2a:29:28:c5:07:45:49:4d:0a:bd:f7:e6:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3B:15:3A:DE:2F:C3:E7:86:1D:D6:27:9C:55:FF:EE:59:6D:75:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06ec7975-08d6-3ae5-b849-eb78311f177c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.213.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:37:07:31:bd:88:e3:af:9c:e2:93:07:39:8c:57:c9:f5:6e:
         c1:73:a7:9f:4e:f9:d6:66:80:e4:5b:4d:84:29:0c:a2:8b:5a:
         cf:bc:ff:53:47:b8:ca:9d:9c:8b:f1:2f:70:68:02:9d:74:b1:
         fe:06:96:1e:20:f9:05:45:d1:13:2a:44:0f:c2:9e:58:53:23:
         81:48:49:ed:f9:7d:64:dd:80:50:17:c8:0d:36:44:f9:39:eb:
         54:5e:69:65:6f:84:46:ba:ad:e0:91:17:3a:07:86:6c:d8:61:
         0e:28:ca:cd:23:75:f1:ac:02:79:47:3a:8d:6a:1d:84:de:f1:
         de:5d:63:7e:36:38:1f:d4:5c:51:33:87:44:8e:aa:0f:3e:41:
         7d:81:1d:0d:b7:83:aa:a4:cb:cc:8f:fc:7e:1f:c2:01:e1:d5:
         a3:14:cf:a2:b0:45:72:5c:a0:8d:d3:9d:29:2b:16:bf:bd:60:
         cb:b1:2b:3b:8e:9b:b0:02:65:ae:9e:8b:bf:1d:08:16:8a:76:
         7c:d7:ac:30:ba:29:af:46:e8:37:a4:b6:7b:4f:63:1d:fd:8f:
         67:c2:22:41:aa:21:d6:1f:7f:b8:77:67:3a:37:d9:13:07:07:
         9a:6c:e0:1a:3b:4b:fe:3f:51:04:a6:87:80:68:af:d9:4c:a7:
         e4:c3:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:44:36 2025 by rpki-client