Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
File:                     f05bddbd-66de-36a2-be24-ae30e4826c09.roa (raw, json)
Hash identifier:          EpQSXbKwxFUcbtw1/7gCnfrDE4ixl8Xot+vGuKLkxlg=
Subject key identifier:   84:D6:F4:B4:71:3D:99:AF:1D:2C:0D:4D:49:66:B2:D1:7F:5C:D2:29
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584A0D6A9673FE886FC6F1F78680
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     1742
IP address blocks:        192.5.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:96:73:fe:88:6f:c6:f1:f7:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=de1aa94d-8b22-4d37-a02c-e9b8d258dc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:19:f2:dd:38:7c:4a:a3:ea:c9:72:97:3c:
                    ec:58:96:8b:80:ec:02:a7:27:6d:92:43:9b:36:ef:
                    a2:8d:58:43:31:0d:92:8c:13:c5:e9:77:39:8c:23:
                    90:0b:6d:4b:1f:40:0f:bb:b4:d7:46:f3:bb:6f:d5:
                    0b:4c:2d:e5:36:cc:c3:eb:b4:42:be:31:c3:e6:e9:
                    67:99:65:57:be:fc:6d:3f:46:06:db:27:59:8e:9f:
                    79:d0:0b:dd:da:ab:82:61:40:47:fb:9e:07:c5:a5:
                    5c:4b:45:0e:46:52:5d:e5:52:2a:23:40:5a:91:34:
                    40:e6:1d:f4:7a:17:29:26:17:e7:26:99:e8:a0:6f:
                    c1:57:55:5d:cb:76:c8:be:cb:94:63:8b:db:19:d9:
                    ad:aa:cb:dd:13:39:19:d3:13:99:9b:c4:a4:af:ad:
                    b9:1c:5f:74:2f:f8:70:8f:7b:74:09:9d:48:b2:95:
                    9d:ce:22:51:45:c8:dd:c8:13:b9:f3:21:38:87:4d:
                    29:bd:44:35:87:55:d8:5b:37:1c:fa:a8:08:69:71:
                    c5:18:ae:c0:b7:2e:5b:d6:06:d9:f3:93:67:17:0a:
                    8e:d6:cc:ca:f9:ab:3c:fa:11:ba:d9:10:e8:16:dc:
                    0e:b8:4b:9e:8c:e5:52:90:8c:35:39:14:1f:9c:3f:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D6:F4:B4:71:3D:99:AF:1D:2C:0D:4D:49:66:B2:D1:7F:5C:D2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2a:e0:c3:33:55:4b:43:0a:e7:79:83:50:78:a4:4f:0c:af:
         e6:24:fa:56:d5:a0:f9:05:2c:3e:a5:02:63:af:22:66:b4:e4:
         f6:36:09:b0:89:76:3f:98:43:34:c4:10:9e:38:8e:46:08:34:
         c9:88:14:2c:b8:0e:35:0d:51:b2:4c:df:87:95:35:a5:75:9b:
         2f:d4:c7:93:87:d6:9a:3a:4b:d2:36:30:8c:20:dd:e8:49:73:
         5d:46:91:6c:51:00:42:1b:df:87:41:77:b4:19:7c:1b:9f:08:
         a7:f4:f7:45:f3:2e:04:a7:2a:97:1c:6c:71:1c:65:e5:e9:ac:
         d8:52:a4:6b:61:54:65:00:87:1c:88:6f:07:54:b3:1c:0f:c6:
         70:80:c3:c9:12:08:cc:01:af:04:33:18:ef:07:17:05:1e:64:
         1f:6c:da:1d:62:4b:38:1a:19:94:58:c4:f0:76:da:97:a5:0d:
         d8:9f:bc:eb:eb:fd:b9:3b:8a:c0:65:5f:c0:e7:63:b7:f2:cd:
         ed:d5:09:04:ce:46:78:b7:7a:e0:4d:50:48:47:44:89:7e:c9:
         d2:e8:d5:b3:14:86:22:cc:d7:51:cd:ca:84:63:87:0f:ba:95:
         67:49:7c:ef:2b:4b:32:97:01:8c:2e:93:86:1a:74:d8:58:38:
         eb:b5:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:59:35 2025 by rpki-client