Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa
File:                     34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json)
Hash identifier:          bLCmIV7aN8i+2hs3oiLtEAUTeii4mO2oBsJITw+VVMM=
Subject key identifier:   1E:E5:30:5E:CF:D8:B6:3A:54:45:39:6B:41:20:62:A8:ED:AE:DA:63
Certificate issuer:       /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19
Certificate serial:       010D0C9F4328584A3E45B0DA0B871F3954A99480
Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     63208
IP address blocks:        66.33.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b0:da:0b:87:1f:39:54:a9:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=863733a0-5073-46e9-92fd-d383e50f02dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:40:b5:f6:70:98:70:b0:dd:27:ab:13:47:82:
                    48:c0:16:10:1c:e6:4c:2f:5c:58:8d:84:e0:b9:d3:
                    32:74:48:ca:99:50:8f:51:e3:65:d8:1e:72:e6:c9:
                    86:e9:7c:7d:0b:c8:64:41:cf:93:07:0b:b6:69:96:
                    92:c2:a7:e6:b6:56:7d:dc:53:00:bd:f1:7c:06:d8:
                    13:12:bb:05:86:55:14:63:42:d2:5f:1d:64:2c:d1:
                    ed:07:db:47:ad:1a:c7:b9:08:11:5e:ce:a3:c9:58:
                    d3:55:10:aa:b3:1d:e5:d5:44:ad:fb:8e:70:cc:04:
                    24:af:ab:70:48:4f:d4:f8:f2:24:3c:f8:c4:bc:74:
                    6d:39:69:5e:b1:9e:c0:49:e5:74:3d:34:76:ad:e1:
                    26:a2:07:d6:a6:10:58:53:45:f8:4f:8d:55:17:ea:
                    db:37:e5:b8:80:bb:19:33:85:8d:46:28:34:7f:64:
                    b3:f5:14:eb:f3:63:cd:dc:ca:24:18:30:40:ba:7d:
                    d1:3d:96:30:10:dc:e0:8a:cd:6e:ce:33:a3:05:d9:
                    3d:21:e9:50:19:cc:b1:63:9e:17:f7:3e:06:a3:d8:
                    4f:96:ba:2a:0e:56:3c:49:1c:5e:eb:5a:c7:00:63:
                    86:7a:30:0a:9d:8e:1b:db:3a:6e:ce:b1:7e:23:51:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E5:30:5E:CF:D8:B6:3A:54:45:39:6B:41:20:62:A8:ED:AE:DA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl

            X509v3 Authority Key Identifier:
                keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a8:80:89:d4:8b:6b:2a:ea:b2:04:5a:4a:db:96:f2:df:92:
         93:05:30:e0:93:83:dc:cb:74:15:c7:52:54:d9:79:38:7f:b4:
         8d:4e:bf:0f:40:e0:91:70:a1:b5:6f:d4:c4:04:ee:c3:41:a7:
         50:2d:6d:89:db:ff:23:3f:b1:fa:63:7b:b7:03:10:a9:bb:b8:
         ea:88:76:1f:78:58:b5:06:15:31:9e:92:f5:00:af:bf:17:60:
         b0:e0:28:1d:e3:b0:89:69:3d:c4:3a:88:36:fb:87:20:2a:9f:
         85:24:a1:7f:a4:1c:a7:e6:c7:83:f0:9d:bd:a8:c5:a0:48:e2:
         d5:6a:e9:7e:31:25:9d:a9:4e:06:84:69:79:0b:c1:e3:90:77:
         57:fa:ad:87:16:00:51:c7:8c:1e:65:e0:82:5b:d7:53:d3:f0:
         66:c3:14:93:47:a8:58:71:f8:e4:6c:8e:c7:bf:a2:fa:20:cd:
         a6:12:e6:63:c5:73:33:1d:89:19:f1:ae:7c:5c:29:c8:fe:2d:
         de:37:a1:11:18:8c:60:7e:da:6a:40:63:84:ec:d5:d6:98:ce:
         00:71:69:46:ae:ad:b7:8b:eb:03:68:75:33:e4:11:d9:0f:9b:
         53:7e:ea:38:7e:b0:03:15:85:96:0b:03:f5:52:fe:c3:e5:2a:
         9a:67:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:18:16 2025 by rpki-client