Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa
File:                     b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa (raw, json)
Hash identifier:          a7kfWgmvis3DjaQycVVZPY4NNQ4Sq0l/8LnWunlT0xk=
Subject key identifier:   34:42:37:CB:C1:F2:8B:6C:21:5C:66:01:2B:EC:80:4D:F0:4A:E5:9C
Certificate issuer:       /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Certificate serial:       010D0C9F4328584A533599E2C7F679DD2E5DB77C
Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        185.224.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:99:e2:c7:f6:79:dd:2e:5d:b7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=b8234c04-f77c-482d-aae5-99226554de93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:88:10:58:c9:31:ee:2a:dd:d1:ee:31:01:
                    da:d6:aa:d6:a3:98:d6:f9:28:c9:dd:40:34:54:ae:
                    f9:60:95:a2:55:23:25:25:4c:c2:0e:2f:aa:a0:66:
                    3a:56:86:cf:b8:de:e2:3d:3d:f8:74:b8:0f:b4:81:
                    b3:cf:0a:c9:c0:7a:9e:01:14:d7:82:2f:0a:02:67:
                    5a:44:da:61:1b:00:a3:8d:53:61:fb:72:09:90:80:
                    8c:07:b5:8f:4f:e6:d9:f1:5e:77:8a:2e:8e:7d:10:
                    59:ed:f0:7b:6a:d2:89:7b:09:69:4b:64:40:c4:a4:
                    b0:4b:02:44:3a:cb:30:85:e8:5c:ad:b4:a4:ac:54:
                    1e:0b:84:0b:85:c4:22:98:df:c4:1c:d1:16:72:48:
                    5a:05:d1:4e:eb:0e:10:86:29:c2:f0:99:7b:04:97:
                    e3:fa:cf:d4:35:0e:f2:16:1b:17:ac:97:9b:3a:b8:
                    0b:6b:bf:96:4b:be:a0:cb:28:fa:0f:bc:03:6f:33:
                    62:3f:e9:75:35:cc:10:e5:ca:e3:4e:c7:a4:01:6e:
                    35:0d:43:d2:1c:45:e0:29:a0:7a:14:60:76:81:ec:
                    bb:1c:93:5a:cb:33:06:29:a0:53:5c:33:d3:1d:80:
                    78:2e:12:4a:0e:72:8c:7e:95:14:67:91:7f:05:ba:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:42:37:CB:C1:F2:8B:6C:21:5C:66:01:2B:EC:80:4D:F0:4A:E5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl

            X509v3 Authority Key Identifier:
                keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:e4:67:c3:b6:52:15:e5:5f:cc:43:f6:ef:db:0c:3f:b7:
         ee:b9:7f:6e:26:83:0c:c0:1a:48:3f:fc:00:ac:7e:a1:a6:7d:
         54:bd:a1:10:a4:e1:79:27:da:81:51:21:2d:76:d6:fc:ba:df:
         a4:c7:82:d1:9a:a3:d7:3e:28:48:88:c4:74:07:a2:02:a0:66:
         8f:08:eb:a9:52:83:2d:54:a4:3a:6b:6d:e8:5d:50:81:73:98:
         73:e2:03:88:a4:28:41:05:1b:dc:46:4b:f3:1f:51:c3:3d:32:
         cf:a8:5b:3c:b7:7d:a9:95:35:c7:dd:3b:0d:27:11:05:51:d2:
         27:ca:88:c3:a2:d8:0c:dd:72:8f:39:6e:3e:32:b4:54:94:3d:
         66:a0:e7:37:ae:bc:3c:52:00:3e:ea:8b:fa:0d:40:db:c1:0f:
         03:71:1b:c3:e0:2d:e3:89:8d:90:19:de:24:3d:cf:6a:85:87:
         f6:b1:c8:ea:63:f6:e0:b7:63:7d:34:b0:bf:09:ca:65:1f:6a:
         67:b3:cf:9b:18:4b:e5:47:a2:d4:72:a5:7e:d3:9c:8a:77:11:
         67:98:e7:c6:ff:a1:1f:70:28:07:4c:19:8d:19:e1:ce:d0:59:
         ac:f9:e6:69:66:d8:33:4b:a0:3a:be:32:4c:8e:15:8b:29:ba:
         72:72:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:40:49 2025 by rpki-client