Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa
File:                     a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa (raw, json)
Hash identifier:          E2OtS5Uy0PKMZjDxOdrhp5ByYhUT/W3efz4fqVMHflo=
Subject key identifier:   C7:37:FD:07:D1:89:0A:03:10:2B:2E:21:54:DB:08:73:12:1B:BF:E5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A8FEA27DA14B55C1F4980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     54650
IP address blocks:        66.62.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8f:ea:27:da:14:b5:5c:1f:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=3c6beeac-8b50-4b66-bbd2-556eae17cb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:10:13:5f:23:97:7c:8b:0a:55:99:eb:f0:
                    b6:3c:f3:21:dc:9c:c2:a9:30:d4:47:e4:f2:84:da:
                    53:0b:6e:78:9f:9a:92:10:e1:f4:21:bd:83:77:97:
                    8d:78:93:56:0b:3b:dc:1f:09:93:c7:27:6a:c0:57:
                    94:71:48:d0:85:37:21:72:ba:a9:62:89:b5:e3:45:
                    e3:3f:74:97:ad:aa:5c:15:ca:c1:7c:a8:1d:93:7a:
                    e2:c9:5e:dd:8a:1c:c1:58:12:09:8d:0b:14:64:2a:
                    61:20:94:fc:52:fd:5c:2c:f1:69:42:7c:61:3d:07:
                    71:21:d7:3c:fa:66:7a:b5:ae:5d:1d:ad:63:05:85:
                    26:83:71:6f:81:b7:c1:60:7a:13:dd:10:c4:6f:39:
                    2b:f3:a3:2b:df:67:01:3b:c5:05:1a:5e:87:d8:f5:
                    ad:f0:04:82:ea:f7:fd:98:20:85:f7:4c:21:71:ae:
                    b5:f1:b6:ed:89:9a:a2:8e:26:3d:ca:2b:1b:f2:6a:
                    dc:9b:c9:1d:11:57:3e:34:c6:61:c0:f6:a8:a8:a7:
                    35:8e:46:e3:25:5a:fc:70:8d:ff:1f:1b:50:4a:a9:
                    1a:88:76:6e:06:b9:cb:97:42:32:da:90:57:bf:b4:
                    63:25:33:12:6f:8b:36:82:0d:13:fb:5f:4d:75:08:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:37:FD:07:D1:89:0A:03:10:2B:2E:21:54:DB:08:73:12:1B:BF:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:08:f8:a7:4d:65:05:b8:ae:98:93:6c:37:cc:51:32:0b:
         c9:e3:76:4e:c5:1f:cf:62:62:9d:6a:2d:5f:c1:d4:6f:3d:c7:
         3d:7e:de:68:b2:ee:5b:cf:4f:3e:2a:42:35:ee:70:fb:e3:ea:
         cb:e1:a4:c6:ba:64:e3:69:08:2c:0a:22:1f:2c:21:dd:d0:65:
         de:bc:a1:14:e3:e8:50:3f:e2:8b:12:78:ec:6e:4a:c9:4b:f2:
         e9:a5:a9:88:71:54:81:53:a1:c9:3a:29:62:8d:f9:83:bc:86:
         a4:33:2e:6f:38:8d:eb:3b:14:c1:19:24:66:6a:e4:3c:92:d6:
         81:6d:9d:c5:e5:9c:5c:95:65:8c:59:66:3e:9d:08:61:fe:85:
         40:18:43:e0:d6:a3:46:10:bc:5b:4f:cc:d5:35:cd:ac:30:81:
         85:cf:ec:2a:65:c6:a7:9e:ab:b3:41:6f:88:92:66:a4:40:94:
         1d:77:3b:21:40:4b:f3:98:71:e9:51:83:38:cd:d2:31:d3:a1:
         50:e5:33:b1:5d:24:bd:ff:2d:92:97:e4:5a:84:1f:8e:42:25:
         f0:b5:61:a6:7b:3e:33:d0:cf:4a:db:cf:70:db:1d:a4:0b:67:
         04:70:03:50:ca:42:d3:56:e3:33:2f:19:63:d7:61:5f:2e:06:
         84:73:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:40:45 2025 by rpki-client