Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
File:                     1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa (raw, json)
Hash identifier:          Gbf9DUauxHOZsxEAy0RNXZLZMlyVMm5oCQ6mHoLqvT0=
Subject key identifier:   67:7C:44:1C:5A:17:8F:EC:48:CF:D1:4D:45:E6:D0:ED:07:ED:C5:AF
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584A3B7AED79F4C645D3EEFB9B80
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     198949
IP address blocks:        66.22.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:ed:79:f4:c6:45:d3:ee:fb:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=c37988cd-e0b6-4a3f-95bc-97ee47ad5135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:2e:e5:ec:06:d0:1e:08:72:dd:ac:6b:53:
                    1e:69:28:af:d7:7d:ba:7e:c1:e0:d1:43:f6:e1:6d:
                    12:67:c8:e2:13:72:92:3d:57:03:d6:9d:15:7e:0a:
                    b1:49:a1:2d:96:17:73:5a:e4:b7:9f:58:3c:0d:90:
                    df:aa:41:74:e8:53:40:3f:9e:60:5a:9d:97:9f:57:
                    98:1f:02:34:62:5b:de:e8:85:4a:ba:88:7a:b2:d3:
                    87:4b:78:11:8d:c6:0e:da:ac:69:05:fc:99:71:9b:
                    5d:44:44:8f:dc:4b:56:ab:91:d2:00:1c:51:46:44:
                    2b:db:9e:56:3f:20:84:61:fe:a4:95:03:dd:fd:75:
                    c9:12:e3:a4:00:7a:62:08:7b:9d:a3:da:09:ee:16:
                    a1:88:59:62:6c:c2:2a:e2:ea:ca:6f:52:36:de:d8:
                    29:b2:75:bc:a7:ff:85:34:9b:81:0b:29:86:bd:20:
                    d5:50:fd:de:8f:b7:99:0e:de:89:8d:52:1a:03:3d:
                    1a:b6:06:a0:0f:8d:e8:9b:2a:e0:14:8f:03:8c:ec:
                    d7:d6:50:75:20:a9:26:a8:6a:50:20:16:35:5d:6e:
                    10:44:5a:ed:a3:64:b8:ef:c9:3b:9d:56:43:c7:84:
                    45:f4:32:af:3d:60:92:9e:b5:d4:27:03:f3:a2:09:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7C:44:1C:5A:17:8F:EC:48:CF:D1:4D:45:E6:D0:ED:07:ED:C5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:78:46:4a:f9:04:84:08:43:f0:e5:a1:79:6d:f6:94:57:78:
         63:46:16:c0:23:82:a1:40:ae:bc:46:f4:b8:9a:84:7d:c4:4d:
         be:e2:03:95:b4:1d:64:f7:76:e8:8d:4f:25:57:99:aa:c1:df:
         1e:b6:56:23:d4:a4:cb:1f:4b:76:a0:22:5c:ec:a5:d1:bc:47:
         f1:2a:1a:59:10:b7:e8:54:df:7c:a4:09:d4:12:e8:56:75:57:
         48:4b:3b:61:74:63:37:22:ae:33:56:22:66:ef:75:21:2d:d7:
         5e:ea:4e:2c:ec:5d:33:0b:dc:24:3f:01:ea:1b:ed:68:87:57:
         33:f6:a4:04:90:59:86:a5:fa:c2:23:50:f8:91:3e:d2:30:3f:
         fa:6f:a8:2d:f9:9b:03:79:aa:b8:12:82:dc:78:ad:a7:25:96:
         a3:1a:92:6f:3f:77:63:cf:6f:dc:f5:98:a4:2f:6a:03:40:31:
         1f:a5:14:0c:07:36:e8:74:06:c4:50:5e:03:cd:a4:60:77:dc:
         20:85:99:2b:c3:f6:7b:ca:3f:c5:ea:fe:dd:02:06:9d:fe:bb:
         b3:40:56:d1:48:a8:38:9e:07:39:88:76:18:71:c4:f6:39:67:
         49:35:e1:85:eb:5c:ec:2f:b8:36:4f:d8:1e:16:87:58:03:58:
         b0:93:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:17:32 2025 by rpki-client