Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/d32f3728-367e-3c1b-8f84-52028bc0ff73.roa
File:                     d32f3728-367e-3c1b-8f84-52028bc0ff73.roa (raw, json)
Hash identifier:          /fnMmMwHJVQp2oVkhsj9mO2sOn1LsjygNZh8k3K/WGk=
Subject key identifier:   59:2B:94:DD:76:BD:D6:47:D5:9C:83:7A:C3:09:B3:3D:DA:C3:27:6E
Certificate issuer:       /CN=0bed6185-186c-4da8-9253-7f61731aef25
Certificate serial:       010D0C9F4328584B0746D3F02AD214A2E17D8A80
Authority key identifier: 40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/d32f3728-367e-3c1b-8f84-52028bc0ff73.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     11613
IP address blocks:        66.33.33.0/24 maxlen: 24
                          2602:fab3::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:d3:f0:2a:d2:14:a2:e1:7d:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bed6185-186c-4da8-9253-7f61731aef25
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=8ace38d1-fc1a-40bf-8859-e1ebb4b58a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:bd:72:45:7d:0e:59:0d:ab:c7:8a:68:23:
                    82:40:a7:34:34:29:5b:d0:74:14:ff:47:59:d8:54:
                    2c:67:db:d5:f3:f6:b4:34:a9:44:f7:59:02:a4:5f:
                    1a:ee:d5:7f:c1:cf:e3:be:ab:ad:28:06:54:13:c7:
                    29:35:28:55:17:2e:e9:51:08:88:2c:68:c1:d1:b8:
                    1e:01:a9:89:72:fb:2e:6b:04:39:b0:ab:e4:35:1e:
                    76:95:6a:9d:45:77:f9:6d:2d:f4:e7:67:d1:77:b9:
                    7f:f8:cd:ab:44:80:d0:48:b0:01:f5:7d:a5:2b:47:
                    f6:cf:fa:f1:46:03:2c:ba:2b:15:5e:f4:23:e4:75:
                    f7:5e:4c:a3:1e:7f:1e:03:37:7a:bd:0c:9e:43:3b:
                    ce:ce:68:a4:6a:c8:b1:83:02:83:99:93:4f:5d:73:
                    15:28:6b:3d:a6:64:2c:46:f9:6d:ae:61:fc:e8:ec:
                    54:e6:95:5c:5f:e3:76:04:ef:e0:a8:c2:98:33:bc:
                    47:1a:51:fb:a8:9e:4c:89:fb:d8:0a:a0:05:0c:b4:
                    74:ba:16:c4:6c:09:29:17:1d:45:66:11:32:4d:eb:
                    79:8a:ca:d9:a7:1c:1d:13:b6:b0:f4:44:06:c3:a4:
                    af:94:cb:18:4d:70:99:35:fe:8c:40:b6:80:1a:f3:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2B:94:DD:76:BD:D6:47:D5:9C:83:7A:C3:09:B3:3D:DA:C3:27:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/d32f3728-367e-3c1b-8f84-52028bc0ff73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25/0bed6185-186c-4da8-9253-7f61731aef25.crl

            X509v3 Authority Key Identifier:
                keyid:40:22:1A:A4:8A:C4:F7:AA:67:A5:3B:18:62:7B:7A:B9:8C:A8:24:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0bed6185-186c-4da8-9253-7f61731aef25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.33.0/24
                IPv6:
                  2602:fab3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:59:2f:4f:73:85:7a:3b:b0:36:18:e0:11:1b:2a:4e:37:
         61:58:d6:ae:7f:f8:fb:ca:88:20:16:aa:a3:0c:d7:5b:f9:87:
         68:f2:fd:77:1a:7b:6b:e1:1a:20:e0:6d:a6:6c:d8:b7:4b:3c:
         6b:24:ef:be:d8:4f:96:b4:90:e5:0f:95:60:1d:aa:41:38:d2:
         23:a9:9a:a3:36:9f:42:7d:cd:80:67:56:c1:bb:1e:38:d8:15:
         75:5d:5a:d0:77:5a:a9:c3:2e:3f:42:17:e2:04:2e:58:08:ea:
         9d:3e:b0:90:57:09:5c:f6:b3:26:05:53:6e:c8:2b:92:de:c0:
         7e:d9:a3:be:eb:ec:a1:72:68:63:e5:54:9e:4c:5d:1d:a9:6c:
         b9:01:02:f0:c6:f7:fd:72:b9:6e:7c:1e:b0:ef:d9:f4:28:b9:
         0f:ab:72:1e:c9:32:51:5d:db:96:f5:2b:b2:c1:b7:ba:7b:af:
         26:51:f0:46:93:85:b2:78:20:3f:8c:19:11:40:1f:98:9b:dc:
         3b:7a:ff:8c:55:00:09:bf:f5:b2:8d:dc:a8:2d:6a:8c:c7:b9:
         83:09:dc:49:d2:bc:23:4c:ec:37:e4:93:45:2c:cd:8e:b7:40:
         30:25:ea:d6:45:47:fe:a7:25:8d:06:fc:37:91:36:c3:37:23:
         14:dc:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:11:57 2025 by rpki-client