Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
File:                     30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa (raw, json)
Hash identifier:          gBcZwykX8VK5xC7CnDkXt9TO4YTKW6slz9Wuf+Rqxck=
Subject key identifier:   12:6D:82:54:A5:A4:79:AB:10:5A:B3:96:5A:52:FB:DA:30:12:42:B4
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584AF0F13857B2E8CA18155AD200
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     33185
IP address blocks:        66.187.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:38:57:b2:e8:ca:18:15:5a:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=c0099c06-2562-42a1-a34d-3f646f1dc918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:3e:28:ec:6d:75:88:33:f2:fc:91:7b:42:
                    2f:e4:08:b3:37:1d:4e:7f:47:4e:5d:0d:1c:a0:05:
                    a5:58:72:92:9a:e0:92:c9:d8:cd:e6:c7:c0:84:ad:
                    fa:a9:1b:04:e8:65:fb:3c:b5:bc:9f:09:11:15:de:
                    e7:d8:47:cb:7e:81:11:33:1e:c7:c1:65:93:36:3a:
                    06:8d:b0:2d:19:ac:c0:47:08:1f:45:eb:b2:45:89:
                    6c:c9:98:8d:f4:00:dc:5d:b4:42:0d:9d:89:14:82:
                    7e:92:c8:83:02:1a:bd:c2:0e:5d:ad:9d:50:7a:5f:
                    ff:de:fb:8c:68:bf:74:d0:7d:bc:06:78:ad:8a:4b:
                    7b:e8:7e:5a:0d:62:ff:f0:26:c1:b9:61:b3:b7:c5:
                    e2:25:c2:ea:60:20:0e:42:d7:9a:f0:e4:7b:3d:ef:
                    5e:8f:89:e8:ea:e0:2d:e4:57:4e:4b:71:5b:0c:e3:
                    ee:ed:6e:e1:45:8a:56:ca:a8:18:00:95:a2:f3:ee:
                    ae:5f:cb:ab:ba:f8:54:82:97:b7:30:b8:a9:db:25:
                    25:93:3e:c9:42:ac:27:90:87:2d:9a:ab:47:5b:4b:
                    0a:00:4f:ec:13:2c:b7:59:1a:1b:26:ce:24:16:d7:
                    05:b4:ad:b2:27:fc:e1:7f:ee:c5:f2:67:be:4f:a3:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6D:82:54:A5:A4:79:AB:10:5A:B3:96:5A:52:FB:DA:30:12:42:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/30d6cbf4-a4d1-3ea3-be3d-00086ba0432f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:53:db:1f:75:15:3c:61:2e:2c:e8:a5:12:5f:6a:ba:77:54:
         95:ec:a4:bc:e8:05:14:a9:7c:40:43:79:b0:77:9a:4b:a4:f4:
         43:eb:29:0e:70:18:66:0f:78:fa:55:49:bb:cd:12:33:2f:35:
         af:59:03:06:b8:33:89:92:1d:38:e2:69:57:59:0b:04:ca:f5:
         da:8a:7c:b6:2f:8e:33:f3:de:37:ed:50:f2:35:d6:d5:85:af:
         ac:bc:a7:7c:b0:27:89:a9:41:64:a8:ac:da:2e:ca:31:84:c4:
         e9:a1:d2:19:5e:4d:58:22:72:c0:61:46:0b:f9:32:b8:d0:46:
         f8:17:cc:20:01:1e:1e:9e:04:9d:36:56:1a:6a:1a:6d:25:e1:
         a1:96:eb:2e:5b:af:c1:bc:3e:7e:b2:47:ff:f9:78:3a:67:50:
         ef:d6:c3:20:9c:32:85:07:ca:18:3a:fe:cd:a6:7a:61:b9:0d:
         19:62:87:9e:3d:99:11:8d:4d:1b:45:92:58:3d:0e:fa:b8:48:
         e9:11:30:24:e4:94:28:5c:33:b8:17:95:e4:d4:8e:1a:ef:55:
         8f:db:72:c1:69:e8:8e:a5:51:7e:6a:43:7a:7c:d4:16:29:4f:
         58:ab:97:3b:85:c7:65:71:18:0a:62:d8:4b:77:d6:12:f6:7a:
         82:19:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:01 2025 by rpki-client