Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
File:                     2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa (raw, json)
Hash identifier:          YXBSPnZtuZs6PtDLnIliix+vEhZZK9lcmIRczz1R/kQ=
Subject key identifier:   93:A1:F2:0A:6A:8D:2E:90:40:BB:3C:47:EA:39:21:BA:E4:32:DC:81
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A5A306ECA80D3C59BE3455658
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     215081
IP address blocks:        66.118.236.0/24 maxlen: 24
                          66.118.238.0/24 maxlen: 24
                          104.249.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:6e:ca:80:d3:c5:9b:e3:45:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=0082bba0-5dae-4e75-a713-499f4deecc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:97:47:65:21:6c:e3:86:d9:a5:95:49:ea:42:
                    3c:f5:2d:9f:a4:50:1d:82:c3:d3:f3:bc:6b:41:fc:
                    29:db:7b:3e:05:90:74:ae:34:ec:cf:d6:65:43:ac:
                    51:99:38:21:1e:f0:8a:57:6f:98:89:69:0a:68:c8:
                    f7:7a:d7:b3:f4:be:44:8a:ed:10:93:bf:c1:6a:fa:
                    1e:48:3f:52:c3:2e:c1:93:e2:8a:5e:e0:fd:3c:e8:
                    23:81:99:c1:66:2d:39:8f:16:b6:e6:e7:38:f3:6f:
                    d0:84:c9:b0:3e:23:04:69:fb:0f:77:a8:43:ed:27:
                    77:7d:eb:12:27:f7:c5:30:c3:9e:eb:4f:fb:5e:68:
                    ec:3d:bf:3e:a7:57:8c:2d:68:42:df:25:ae:0e:73:
                    a6:93:be:36:02:65:6f:67:e6:5d:07:2e:9d:65:a5:
                    79:a2:a3:71:ef:26:26:56:17:53:af:6b:c5:88:6c:
                    fe:c8:2e:34:99:71:6f:97:f3:bf:9e:b3:23:ce:5c:
                    fc:bb:dc:d4:57:58:18:62:cc:53:7f:c4:42:e2:09:
                    46:61:09:60:79:0f:cf:29:89:f8:d8:61:5b:76:60:
                    8a:be:a1:83:22:b6:12:9c:52:3c:fc:2d:9b:1c:e0:
                    64:bd:53:ed:c1:66:3c:cf:2a:05:6d:de:87:fd:2e:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:F2:0A:6A:8D:2E:90:40:BB:3C:47:EA:39:21:BA:E4:32:DC:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2cad8d3e-5f5c-30af-8883-97618c2bedaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.236.0/24
                  66.118.238.0/24
                  104.249.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ac:ac:00:53:7e:b5:a4:da:a9:ac:d8:8e:6e:f8:5c:93:7e:
         a2:2a:bb:cf:7c:4d:4c:b3:73:bb:92:73:e9:c4:7b:dc:cd:2f:
         d4:90:83:ff:43:25:c2:07:d1:13:1b:3f:b9:d2:ab:0c:df:b9:
         6a:a9:27:ed:ac:02:34:ee:b7:57:cd:32:ff:80:6c:e4:77:50:
         4a:fd:b4:9a:a8:78:c5:3f:e4:0a:5e:5c:69:6c:54:17:96:17:
         83:85:46:43:c5:10:a6:13:91:3d:3a:02:0c:5c:59:bf:94:dc:
         8a:57:6c:db:7f:cd:65:e1:aa:a9:0c:92:68:06:c6:ec:89:1f:
         7f:24:2a:33:6c:f2:36:14:45:48:cd:ff:d0:93:05:e0:af:06:
         8c:83:c1:51:d9:ca:f9:d0:9c:79:28:04:6a:90:bc:d8:b1:87:
         a5:3c:a2:2a:12:13:73:ce:c0:45:74:c5:b2:8c:f2:1e:a6:f0:
         ca:ee:a2:82:32:95:f2:81:fb:79:40:dd:98:fc:32:c2:cd:10:
         57:bb:c1:9d:25:e3:5d:ed:53:87:10:8d:83:19:df:44:5e:78:
         84:81:e0:08:b2:a2:97:9d:84:4c:b0:31:da:36:41:e5:06:17:
         87:2b:1f:46:74:a7:9b:13:d1:96:c7:8b:6d:7a:4b:a1:96:c1:
         7b:55:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:01:25 2025 by rpki-client