Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa
File:                     3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa (raw, json)
Hash identifier:          bakJhhmiu9PgrGmtBkg86U2fX+pwXuKTYiAaWrewqZ0=
Subject key identifier:   E7:30:46:D8:A2:65:5F:6C:A8:1C:55:07:44:2B:4B:C8:76:F2:E2:78
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A5214EDFCFA5ADC025358F4A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa
Signing time:             Thu 26 Jun 2025 15:19:13 +0000
ROA not before:           Thu 26 Jun 2025 15:19:13 +0000
ROA not after:            Wed 24 Sep 2025 15:19:13 +0000
asID:                     6461
IP address blocks:        66.46.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:14:ed:fc:fa:5a:dc:02:53:58:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 26 15:19:13 2025 GMT
            Not After : Sep 24 15:19:13 2025 GMT
        Subject: CN=0af6bda9-02d5-4cae-90df-78334e6cd4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:35:0b:d8:7e:b0:b2:74:17:b3:99:47:67:4c:
                    42:f3:15:ed:75:ac:59:1b:e2:66:76:54:70:01:1f:
                    7b:a3:48:64:ac:bf:73:60:1b:f5:95:93:b3:d9:53:
                    9e:42:a3:c0:46:97:5c:eb:1d:90:6f:cc:d7:b3:09:
                    5a:e2:23:a9:91:cb:aa:29:d2:7c:9a:c6:e4:16:71:
                    84:b6:ee:35:0f:73:2b:c1:9d:51:4e:33:c6:18:f5:
                    59:c3:b9:55:d9:67:59:ca:44:d6:12:ab:7e:b0:a0:
                    82:9b:36:aa:af:3f:33:05:0a:a9:48:6a:ae:14:60:
                    21:5d:2d:fd:5d:b6:9f:af:61:15:3f:9f:39:ff:7d:
                    82:4e:67:60:f3:9e:3b:ac:77:70:e3:55:31:c2:14:
                    59:7f:66:6f:46:d2:ae:6f:9b:d3:ac:05:2f:c2:59:
                    a8:46:15:80:4c:ce:6b:60:c3:97:1f:1b:7d:11:a1:
                    f2:af:4a:4c:c2:0d:1f:99:29:e3:b6:40:2b:08:cd:
                    f2:b6:48:b8:93:3b:17:78:48:72:90:8d:ec:41:0e:
                    70:e6:59:d4:71:bd:39:39:9c:d5:eb:90:7e:1a:ea:
                    ae:89:aa:77:d0:dd:cb:d9:73:5a:31:25:21:fa:a9:
                    72:5f:0e:21:04:2f:4a:93:32:be:3f:5b:13:f0:4c:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:30:46:D8:A2:65:5F:6C:A8:1C:55:07:44:2B:4B:C8:76:F2:E2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:1a:1f:d5:48:c6:9f:94:fb:d0:de:17:1c:19:5b:51:04:2a:
         12:31:fe:9f:47:bc:a4:3d:bf:4d:f3:48:56:27:f9:d5:4d:fd:
         8c:76:e4:3e:5c:e2:2b:6d:e4:22:7e:b6:02:e8:42:a1:d2:95:
         38:5c:2d:ab:da:78:5b:15:4b:7c:22:4c:8b:ce:99:05:21:e9:
         b8:4f:23:4d:d7:f1:55:59:54:69:15:61:b6:9a:ba:16:0c:c3:
         72:da:9d:64:f6:bd:19:8d:b6:fb:8f:04:ba:dd:f8:2c:a1:f9:
         8a:60:88:d1:69:7b:b2:05:6a:b3:d6:4a:b6:02:25:45:f1:5b:
         ef:f1:17:ab:47:74:b6:b4:94:c0:d1:d6:8b:27:e6:05:93:4a:
         cb:7c:a0:23:0b:29:3e:48:af:93:1d:5c:66:70:d5:de:b5:c3:
         70:be:56:ee:86:37:6f:47:f4:54:d0:f4:85:eb:22:28:66:fd:
         be:01:60:b3:52:6d:de:44:a5:b7:43:92:44:60:0c:11:39:fe:
         1f:bf:6b:ff:23:8e:28:e1:a3:db:91:5f:9a:f9:c5:f3:6d:51:
         bd:5f:4f:f8:24:09:86:50:7d:e6:59:c2:62:d8:d5:f0:01:98:
         8c:2c:8a:7c:ec:b0:14:90:91:94:b5:6b:fc:a3:4a:cc:78:ab:
         62:fd:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:30 2025 by rpki-client