Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd411d1a-9af1-3a76-b03c-e25e991fd995.roa
File:                     fd411d1a-9af1-3a76-b03c-e25e991fd995.roa (raw, json)
Hash identifier:          JnQM+H9U9kcbdO9yzc46+Nb6Dd4Q3F6NQdws5KzoIXE=
Subject key identifier:   39:E6:80:84:FB:04:A6:D8:DA:D5:4F:FD:DD:FE:C9:D0:F9:9A:4E:36
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A868001A8BCEF37517400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd411d1a-9af1-3a76-b03c-e25e991fd995.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     19092
IP address blocks:        66.62.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:86:80:01:a8:bc:ef:37:51:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=85350a42-766d-4d53-ac94-8c74ea56b828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:e9:8e:37:1d:e9:1b:2b:c9:5d:8c:7f:26:
                    71:3a:8a:fd:46:ce:32:aa:3b:bf:26:5f:c3:10:08:
                    c5:53:7d:83:49:79:a1:b4:75:bc:eb:86:c7:6a:34:
                    90:76:ff:6c:c6:20:01:59:3b:a6:9e:dd:d7:53:53:
                    91:16:d5:31:85:b4:31:d1:30:a5:76:14:cf:b6:31:
                    81:81:7d:cd:5e:aa:8a:54:23:fe:6c:3c:e7:a9:93:
                    03:d5:b8:5e:2e:59:b9:a1:f0:2f:83:dc:7f:08:71:
                    13:8a:a0:91:31:08:02:06:f9:47:32:38:30:4f:b8:
                    5d:71:96:79:2c:22:42:17:a0:0d:7e:e4:7a:5a:57:
                    66:aa:dc:4a:54:41:ed:4f:50:92:88:1b:78:78:cf:
                    b6:e4:1d:f5:ef:26:84:28:a5:f6:1e:08:36:01:50:
                    71:a9:f1:96:53:5b:c4:bf:80:3e:a7:ea:bf:3b:36:
                    0d:f8:ac:71:67:3f:a0:f4:99:2b:55:bc:42:ac:f1:
                    b4:95:56:82:3a:05:9e:97:e8:71:ff:1b:14:cf:c9:
                    7c:8e:28:9f:ea:7a:68:dc:b2:0d:2a:be:44:8d:25:
                    fb:4b:30:a2:32:6d:8c:ef:86:52:33:c4:90:6d:9d:
                    cb:a5:54:cb:47:3e:fd:b8:47:e9:c9:9c:d2:b1:b5:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E6:80:84:FB:04:A6:D8:DA:D5:4F:FD:DD:FE:C9:D0:F9:9A:4E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd411d1a-9af1-3a76-b03c-e25e991fd995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ae:77:d4:91:92:7e:f5:43:06:ef:ce:a2:54:4d:e2:9e:ed:
         35:24:d4:b6:a1:c0:86:84:e4:39:fa:e6:6e:31:6a:3b:3f:25:
         55:3f:af:ca:e9:24:bb:9b:6c:3b:a1:c8:8a:3d:b6:d3:bb:00:
         52:3c:2c:8e:1e:e0:01:b1:bb:42:4d:a3:7e:ed:71:70:40:5d:
         fd:3c:0a:05:e4:14:38:3b:ae:dd:0b:0e:29:af:d8:3f:1d:64:
         e2:29:d2:18:5e:a5:9f:dc:55:f3:7e:01:39:23:00:09:0b:c4:
         22:6e:d3:f7:29:1e:8d:4b:f3:57:7c:d1:e7:aa:cc:fe:67:8c:
         fa:95:e2:79:36:0c:db:22:74:02:80:b9:00:01:ce:b7:e3:a6:
         51:ef:55:27:95:4e:44:8f:da:7d:f7:59:9b:34:43:60:17:bf:
         a2:7b:d2:46:68:50:01:f6:da:42:7c:45:1b:23:4b:38:2d:01:
         8c:31:1b:bf:93:3a:ef:31:f8:31:0c:0b:b5:97:b3:b5:30:85:
         df:a5:57:95:c6:bf:49:4d:f6:ed:e4:ac:b5:b2:8d:a2:b8:2b:
         95:10:a9:a3:de:d0:74:95:a7:79:65:a9:8c:d1:f4:9f:6a:82:
         87:71:be:df:b9:14:8c:ab:76:c0:26:48:ee:42:e3:c2:be:a0:
         22:aa:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:39:46 2025 by rpki-client