Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa
File:                     840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa (raw, json)
Hash identifier:          nsyx653t7iYmO/16INPz6RC4EIy5qh+TXgH28snivN8=
Subject key identifier:   21:1D:2F:88:EB:4E:AA:0A:2E:D9:10:F2:F5:25:FF:87:23:6B:A5:87
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584A17300C9FB385B57E74F9DFC0
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     393436
IP address blocks:        66.198.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0c:9f:b3:85:b5:7e:74:f9:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=befa290a-15ee-4e73-9ca9-9267032de94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b6:8a:6c:d7:9c:20:c3:24:19:39:f8:68:aa:
                    03:de:6a:f7:90:5d:4c:dd:e6:e9:ad:ba:10:42:80:
                    e2:84:76:56:ba:e7:cc:f4:db:4e:a7:79:86:66:8d:
                    a2:39:cc:ff:02:2e:cc:f1:4a:18:4d:30:3b:0a:c8:
                    cf:9c:f0:d9:bc:68:bd:4a:0b:52:e7:2f:d2:f7:9b:
                    aa:ff:90:5f:92:8b:66:66:9b:42:cd:01:3c:37:97:
                    6e:59:f6:01:01:43:58:83:30:c1:1b:24:98:b0:b7:
                    a0:e8:58:10:43:0c:aa:8a:18:aa:62:da:74:2b:b8:
                    0d:1c:85:94:f6:5b:37:a8:be:dd:e9:bd:9e:88:1c:
                    ca:74:2d:a4:4f:5a:fd:5a:bd:27:73:ba:b3:21:58:
                    a4:17:d9:1b:73:44:45:2c:98:85:92:63:63:2e:4d:
                    ee:f9:d6:7b:15:f7:69:8b:a4:76:79:00:67:99:7d:
                    12:9a:f9:b6:76:1e:42:c9:7f:6a:c9:b8:82:bd:44:
                    6c:e8:a1:23:4e:12:27:a8:55:cf:53:71:e4:cd:d0:
                    20:ee:91:68:1c:76:f0:97:b2:71:08:d1:44:04:ef:
                    96:dc:22:77:c5:ac:b6:68:eb:e2:02:b6:5a:b4:d2:
                    ed:0e:a9:7f:15:e7:70:74:96:0e:80:15:c1:9e:a8:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:2F:88:EB:4E:AA:0A:2E:D9:10:F2:F5:25:FF:87:23:6B:A5:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:d0:5d:76:61:57:b3:7e:96:95:38:5e:59:08:21:43:ce:
         8b:70:da:b1:9b:e9:a7:79:44:d7:60:72:25:55:ac:4d:7b:c7:
         4e:21:66:11:85:08:bc:55:ec:de:95:e0:0a:84:bc:91:70:05:
         7e:65:f1:4a:a8:2f:2b:88:7e:4b:ba:87:81:b7:82:50:82:b6:
         cd:70:8c:00:88:19:d0:b7:a1:28:9a:53:00:9f:6a:73:8e:4c:
         1a:b1:36:b3:1a:78:33:76:82:d4:4b:1d:a0:0e:83:3f:dc:8a:
         84:a1:4b:40:4a:3c:62:ff:69:0a:2a:9d:3a:5a:19:86:d3:e7:
         10:f2:c9:59:bc:32:1a:27:d4:3c:7f:21:94:78:54:9e:df:fa:
         11:87:fb:c0:e7:ae:2e:70:98:0f:e7:ee:bc:20:6a:c3:4b:25:
         bd:d7:19:4b:1b:e5:6f:c8:56:53:db:ed:88:7c:e2:c1:9f:70:
         d3:90:8b:0b:3c:32:a2:50:2f:18:36:66:f4:82:eb:51:c4:41:
         d1:25:24:a9:a7:e2:f4:31:c4:30:13:a4:9f:c3:14:33:c5:b3:
         ff:f3:f1:08:74:65:71:28:be:2c:27:ef:dd:bd:d4:92:33:51:
         ac:cb:45:9b:90:d8:7a:84:7d:60:dd:6d:eb:b3:f3:f4:6f:92:
         16:c5:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:36:08 2025 by rpki-client