Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa
File:                     f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa (raw, json)
Hash identifier:          CKjp4GvSuPrt3SJuzNf2Od7QxWEi+TfTfQ+xPqZCHQI=
Subject key identifier:   59:D4:29:9E:97:87:12:57:80:26:25:42:08:83:DB:16:9F:CF:B0:E6
Certificate issuer:       /CN=edc22fcb-2cab-42b3-9bab-80acf203c651
Certificate serial:       010D0C9F4328584AC710EC1323C59132E75C2800
Authority key identifier: 1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     2914
IP address blocks:        66.6.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:ec:13:23:c5:91:32:e7:5c:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc22fcb-2cab-42b3-9bab-80acf203c651
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=21f45f16-8ab0-4141-8c52-6291c385561c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:de:7a:1d:aa:ad:92:00:e5:1a:05:32:90:
                    a2:12:c3:6c:6c:76:a4:61:83:37:1d:78:08:1f:06:
                    db:2a:1e:72:4e:d2:7e:a3:e0:fd:85:32:95:12:6f:
                    bb:3e:cb:f8:e7:f5:cb:65:e6:7c:15:00:58:34:f4:
                    eb:95:a4:00:f7:a3:51:e7:8c:ff:2b:28:f2:77:84:
                    36:f1:38:f2:af:f5:91:f5:45:8f:50:bc:d5:68:ee:
                    ba:1c:ac:d6:ca:7a:6e:ad:08:8f:fc:c8:62:a7:08:
                    b0:18:f8:7b:7d:3b:eb:8a:41:93:51:f5:bf:db:83:
                    e2:07:94:68:7e:45:7a:bb:25:35:1c:30:f8:53:af:
                    7c:f8:8f:d1:73:16:76:fd:27:7b:a5:5f:dd:7b:a7:
                    36:ca:f6:f0:d4:f2:a6:87:b0:49:f3:78:4c:0c:be:
                    e7:b7:01:d2:4d:de:a1:ae:f9:67:56:6d:60:75:16:
                    fd:d5:c6:62:c2:88:60:33:ef:8d:de:ac:45:38:b5:
                    14:38:f9:8f:9b:11:f9:a7:12:98:76:98:e3:a4:ed:
                    ec:44:5e:e3:fb:14:5d:09:49:3f:9d:dd:89:2b:a2:
                    9a:ed:09:2f:29:95:86:fe:b3:ff:9c:2f:c8:f5:b1:
                    f0:c4:52:0e:06:7d:7a:b4:69:0d:23:79:e6:29:1d:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:29:9E:97:87:12:57:80:26:25:42:08:83:DB:16:9F:CF:B0:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.crl

            X509v3 Authority Key Identifier:
                keyid:1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f5:17:24:fc:1d:54:41:0d:95:64:24:94:98:c4:b6:44:16:
         d9:8c:7b:df:eb:fe:2e:d2:7f:5a:ea:b8:89:bb:5d:48:d9:c6:
         cf:35:ac:d5:06:43:96:2b:6f:14:dc:d1:ba:78:bb:76:20:4f:
         59:b9:40:fe:18:d1:c3:88:ae:a9:0b:5e:fc:34:6b:28:23:e1:
         64:af:49:6f:11:1e:2c:5d:0b:6d:7b:cb:15:94:d2:34:77:83:
         f2:4f:0b:11:ea:44:6b:6c:9a:02:02:13:81:2f:e7:af:7b:91:
         8b:26:22:fb:86:71:aa:0a:d2:99:75:c3:5e:97:b4:ad:41:33:
         9b:3a:39:58:59:f0:19:13:91:0c:c5:96:08:b8:e0:b0:68:31:
         f3:0e:d2:bf:b3:71:8b:53:5f:1c:ae:ef:c3:cc:6e:c7:b6:87:
         44:44:2a:42:ff:00:7c:a2:f1:a8:83:0e:31:a7:36:d6:b3:a9:
         3b:3d:b4:f4:b6:89:ef:40:3c:1c:1d:06:78:02:ea:1e:8b:37:
         0f:3d:aa:e8:0b:95:41:4a:a2:8e:8a:6f:a9:00:60:42:9e:49:
         f8:32:d7:c3:27:19:10:1e:36:1b:98:2e:9b:e2:8d:d5:ff:b3:
         0d:3f:4c:68:34:18:80:2e:d6:5a:55:74:83:73:ac:b0:3d:bb:
         31:bd:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:07 2025 by rpki-client