Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa
File:                     0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa (raw, json)
Hash identifier:          PhHLdGLwzbag1bYtJUW7+6mio4HNsd9iSZ2Dl7853zY=
Subject key identifier:   CE:1D:B3:F5:6A:14:F2:A5:67:9A:07:DD:7D:68:2E:7F:DE:BA:92:0A
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F4328584ADD66704798F8EC3D54393A00
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        66.179.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:70:47:98:f8:ec:3d:54:39:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=cb5aa369-cc68-4fac-8722-86cece6b28db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:aa:43:00:3f:8b:a1:81:05:a9:0d:2b:3b:
                    e2:61:e3:2f:17:4d:04:00:1e:50:79:da:44:63:61:
                    fa:42:f3:f3:59:02:7a:42:65:af:e2:f5:28:ba:f2:
                    7b:28:e2:17:76:42:9b:ba:71:86:3f:62:3e:57:28:
                    f0:53:ac:65:a2:a2:f5:9f:25:94:97:38:85:e8:dd:
                    34:6b:3c:8f:6e:90:86:55:01:a9:fc:fa:30:ac:3b:
                    ac:e6:ad:02:bd:28:b8:8b:31:19:60:9f:16:b0:09:
                    7c:7c:27:bc:68:00:2c:05:a2:5d:cb:c1:c0:f8:23:
                    7e:c0:7d:da:ec:10:df:fa:8f:87:2e:8b:30:29:b0:
                    e5:d0:3f:5c:33:b7:1a:dd:e7:dc:21:ed:ff:c2:8e:
                    65:28:a3:07:1f:00:a5:d8:78:b0:89:2a:82:a4:2c:
                    60:e3:55:2f:3a:e8:ca:0c:a0:3c:53:f9:e0:4b:46:
                    7b:cd:83:fe:ac:a8:04:0f:7e:81:6e:f9:66:71:f1:
                    02:93:f5:95:03:30:d8:8b:cf:d1:b9:1c:17:23:9f:
                    58:52:90:d2:49:42:44:9b:28:ff:4a:43:fe:63:2f:
                    33:22:57:ef:67:09:87:7c:2b:87:da:de:f0:0d:52:
                    e4:16:b9:90:99:06:12:be:24:72:f3:3b:50:3a:e2:
                    cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1D:B3:F5:6A:14:F2:A5:67:9A:07:DD:7D:68:2E:7F:DE:BA:92:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:97:b9:d1:d9:e3:63:7e:ed:b1:0d:b4:81:22:c4:56:68:
         2f:78:7b:c4:5c:0c:aa:64:d3:d8:66:45:15:78:4c:0b:d1:f2:
         c6:f8:90:92:2b:22:0a:7d:19:88:47:d0:a9:82:55:6c:39:22:
         5a:31:f2:b9:1d:57:b5:5e:6a:1a:47:3f:a1:e3:ef:b4:70:8b:
         96:79:b9:80:c2:8f:f1:4f:00:cc:9d:35:a8:70:4e:97:e9:ce:
         9e:c0:56:64:ba:55:01:ad:3d:c0:ef:60:7e:30:43:bb:36:e6:
         7a:ec:d2:03:5c:21:b2:58:fe:62:0a:63:f1:69:fb:32:f8:b4:
         d7:d6:60:04:4e:ae:6b:0b:3f:85:19:8e:6b:e1:d7:f1:4c:88:
         84:bf:73:df:02:02:4e:39:f9:a5:90:59:24:d9:56:79:91:a6:
         b3:8d:a7:55:d0:8e:97:94:da:ca:23:d7:25:76:e9:54:3a:95:
         e2:c4:ba:04:93:d3:0e:90:68:23:54:d1:2b:b2:6e:d1:42:2d:
         34:c7:91:a6:6f:0d:b0:08:22:10:3b:df:f3:85:25:04:a4:87:
         96:8d:18:73:d7:9a:94:6f:f6:a6:44:e1:f7:26:7a:8e:41:4c:
         c1:fc:87:13:ab:15:49:34:fa:41:ba:65:63:aa:d4:d6:b9:43:
         bd:10:0f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:14 2025 by rpki-client