Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
File:                     7a58c066-a3a1-386d-87a0-7cb55812f128.roa (raw, json)
Hash identifier:          +NoDajgnHrtymTL0uZMIUfl+uAQTKXP8AcGZdtP6Psk=
Subject key identifier:   2F:10:FA:51:85:33:47:C0:C0:56:36:3F:C7:8E:8D:50:81:49:53:6D
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584A4DA045E3A121DDC0D45EBD00
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     15171
IP address blocks:        64.66.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:45:e3:a1:21:dd:c0:d4:5e:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=5e916896-6226-4675-b086-7f966f0aac1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:db:22:16:79:f0:f8:43:78:0a:ff:2c:86:
                    c9:70:a4:8a:aa:58:0f:5f:3c:04:04:aa:55:d7:de:
                    c7:41:a7:c5:ed:ee:9d:3f:0a:1e:6f:60:53:b3:20:
                    ce:ac:b0:40:08:0d:ec:b4:fb:06:83:15:81:ab:e7:
                    28:ca:cc:fe:5c:2e:02:ab:d2:a7:13:cd:5c:a6:ec:
                    b5:25:bb:7a:2e:fd:25:86:37:1d:67:89:69:be:67:
                    e6:cd:76:39:ac:68:7a:64:39:6d:39:76:56:92:09:
                    f2:dc:3a:f3:86:fd:6f:64:ee:17:97:40:47:52:35:
                    55:38:38:95:79:44:87:ca:dd:84:26:d1:ee:32:fb:
                    58:bb:fa:5f:02:29:3b:e8:27:44:61:99:8d:9f:bd:
                    23:5d:4d:42:38:48:f8:b0:57:50:88:d7:19:03:0b:
                    92:dc:5a:71:4d:2b:26:49:a9:02:85:a7:27:dc:ea:
                    dc:b0:d4:9e:53:96:75:26:56:8e:2e:8c:1a:69:67:
                    6d:bb:20:22:57:67:ef:0e:0c:d5:dc:fb:15:04:ff:
                    84:97:59:d3:99:b0:ac:05:ef:bf:48:cf:8b:bc:f9:
                    df:5d:45:b1:a9:bf:76:0c:4b:d9:73:34:80:a3:a5:
                    12:92:de:f3:85:f3:0f:5d:d7:b4:20:1a:2d:a5:d3:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:10:FA:51:85:33:47:C0:C0:56:36:3F:C7:8E:8D:50:81:49:53:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e1:13:04:2a:83:dd:97:fb:68:41:58:7c:0b:a6:6e:eb:34:
         06:2c:e2:a4:20:42:78:58:9f:17:ac:96:9e:f5:b2:fe:11:cf:
         f9:cf:46:a4:70:20:a3:a6:2e:eb:67:28:50:33:22:ed:f2:39:
         4c:59:da:a4:49:cb:c3:fc:b4:0a:7e:d3:9a:86:48:0e:3b:3b:
         46:c6:14:a3:7a:67:57:b5:97:97:78:3b:31:62:b2:d7:10:84:
         89:7d:89:3a:77:23:a9:37:2b:fd:b9:04:31:4b:5b:71:58:cc:
         b4:19:92:55:f8:ff:f0:38:ea:67:c4:01:77:7d:43:bb:02:92:
         14:5e:3e:f4:d5:02:77:0c:67:12:32:e7:6b:1a:49:d6:bd:da:
         e4:49:5e:de:a1:b1:77:9c:ef:b1:e1:08:86:f3:ac:41:8d:25:
         30:8d:4d:c1:21:52:0f:9e:f8:fd:f5:2f:dd:64:61:76:61:78:
         39:83:f3:f1:4e:e5:35:a5:1d:ac:ba:88:16:72:ec:76:5e:9f:
         dd:1f:bf:eb:43:b1:91:9f:f6:c0:52:fa:d3:59:58:d0:1e:c7:
         dc:a1:b1:ea:fe:1f:c3:0e:4d:05:70:69:bd:b6:30:c3:fa:ae:
         8b:b2:25:ce:75:45:f5:d3:1a:78:ae:c1:34:57:b5:6a:67:f4:
         d9:62:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:23:14 2025 by rpki-client