Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c1b0b58b-08f9-3694-b936-9fb1a13b570d.roa
File:                     c1b0b58b-08f9-3694-b936-9fb1a13b570d.roa (raw, json)
Hash identifier:          pchaZ+naIO+ZXw8I+tU5Xh/TC+70xh77cpiyN1gCkfs=
Subject key identifier:   B1:A7:66:B3:6C:CE:B8:AF:13:3F:22:A4:28:35:FA:0E:F9:84:48:99
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A902E7763251D7237C480
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c1b0b58b-08f9-3694-b936-9fb1a13b570d.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     19092
IP address blocks:        66.62.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:90:2e:77:63:25:1d:72:37:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=b3c50828-5236-4748-96ac-656a7d1ad7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:02:c2:92:0d:b6:17:b0:1e:ed:ef:ca:fa:
                    8b:f9:f3:0d:54:24:e5:e8:16:a1:55:24:46:8d:b1:
                    c5:36:74:82:71:05:b6:af:25:0c:a5:70:df:14:a7:
                    d9:18:4f:29:5c:6c:2f:27:47:4b:60:d3:ac:1b:be:
                    8a:71:07:ee:9a:69:ae:a1:17:64:77:26:5d:ad:96:
                    92:e1:e1:e1:95:e2:6a:75:e9:c5:fb:02:bc:95:8f:
                    d9:b2:e2:12:10:e9:f3:24:94:9f:c4:0d:48:9e:8e:
                    d1:90:5f:54:ea:df:f1:7e:dc:c8:ea:f2:1c:a8:65:
                    54:e8:eb:c7:f4:3e:ee:d8:8f:62:2e:ec:84:4b:6c:
                    f6:67:9f:9d:f1:02:c6:57:f7:fe:ed:bd:4f:11:f3:
                    a7:cb:1f:2a:d6:93:6d:16:5d:a4:93:3c:2b:a2:20:
                    6a:b9:f7:1e:66:53:50:59:14:38:50:e1:44:3f:5c:
                    ba:9d:c6:49:f6:02:88:e6:f6:7c:57:fc:3e:38:3b:
                    ef:a3:02:27:4d:b7:46:39:b2:49:c5:a9:7f:0d:1b:
                    05:7d:84:13:dd:fc:5c:30:dc:21:51:e1:64:94:5e:
                    6a:6c:2e:59:f3:ff:86:c2:d3:44:9f:3b:4e:3d:5d:
                    d8:4b:cb:02:a2:34:36:1b:ca:02:07:01:fd:10:86:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A7:66:B3:6C:CE:B8:AF:13:3F:22:A4:28:35:FA:0E:F9:84:48:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c1b0b58b-08f9-3694-b936-9fb1a13b570d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:14:5c:fd:5f:83:db:c3:5a:93:1f:ef:8a:8f:ca:97:63:16:
         d0:ff:5a:43:97:be:fd:c0:7c:5a:e3:75:93:e8:64:78:fd:38:
         ec:14:8d:f5:b8:80:3f:b0:f9:56:71:a8:be:6f:05:d1:fd:3d:
         29:03:51:75:e6:08:c1:c2:dc:7f:dc:c0:83:38:be:86:17:9e:
         52:f3:3b:fc:99:50:07:19:dc:82:d6:35:45:a7:34:c8:76:80:
         e3:96:3c:cb:0a:ad:9a:8d:fa:36:14:48:72:de:44:89:6e:da:
         c3:ef:45:08:34:37:2b:ef:26:4b:c4:15:96:cf:ca:8e:0b:07:
         a2:dc:a5:85:82:6f:f9:32:7c:3d:45:f7:34:06:10:05:06:b3:
         07:c9:2f:cf:6b:1a:e9:a8:34:06:68:f4:e4:40:c9:e8:de:0f:
         40:23:87:8c:7c:5c:8d:02:7a:5a:21:70:86:93:c8:37:9c:be:
         6e:a5:ed:d8:0f:49:ec:5a:2c:6f:a4:78:40:09:72:77:df:8c:
         fb:df:0f:fe:d7:4e:e1:3f:3d:97:7b:f8:49:21:b1:17:bd:5d:
         e2:91:d2:b8:91:70:1f:9e:ba:14:72:8e:d3:ea:46:e0:a0:30:
         92:81:87:a1:0a:cf:0f:6b:43:09:92:c3:cc:69:dd:95:7d:9a:
         f9:a5:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:40:35 2025 by rpki-client