Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa
File:                     6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa (raw, json)
Hash identifier:          j2NqhbrydS8cMpDFIXTEqix3vgobj2ReE8YA83U6bhc=
Subject key identifier:   DA:C0:40:E0:BC:AF:BB:C7:65:74:C1:FA:6D:83:5C:07:99:F3:A1:D8
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584A050A70571DE997D66E2DF940
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     21782
IP address blocks:        66.199.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:70:57:1d:e9:97:d6:6e:2d:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=f39849ae-5889-44f2-82f5-e9f60540a106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:56:e1:ee:e4:ce:fa:e3:ec:53:f5:cd:79:
                    da:84:f1:8a:0b:d8:de:d4:7f:57:66:c4:58:81:6f:
                    6f:20:9b:f1:d1:5b:a8:42:5f:bd:cd:6a:e3:1b:fb:
                    9a:08:b8:f9:de:7e:1b:1d:7c:a8:9c:49:9b:ec:cc:
                    f8:44:dd:78:0a:ec:0e:a0:e2:28:23:14:2b:e1:c4:
                    d5:9b:87:5b:95:b9:ee:fa:62:3a:fa:76:bf:ed:90:
                    2d:a4:77:ea:72:f1:5a:f7:ea:4f:d7:7b:3a:27:58:
                    ab:b3:34:b9:05:97:75:ec:03:99:ce:20:bc:1e:e2:
                    d2:57:d5:ac:a7:18:fd:d8:e0:bb:ac:1a:51:50:80:
                    b0:70:4d:6e:fb:05:fd:a9:0f:8b:82:ab:72:b0:8c:
                    fc:df:a8:9f:bd:a1:ed:45:6a:35:9d:c3:22:ac:2c:
                    8b:b9:bc:96:9e:75:c1:5e:fc:61:50:0f:49:05:de:
                    56:24:e4:6e:38:5e:dd:1c:56:ce:a2:6b:e8:18:ed:
                    cc:35:d6:42:cf:02:68:4a:2d:0e:a8:5d:2e:36:c4:
                    c2:6c:c1:2d:e1:c5:0a:db:e4:53:2a:01:02:20:bb:
                    28:ca:90:54:1f:a2:98:1a:57:35:37:71:41:3b:0d:
                    08:7a:5d:af:4e:4a:09:e0:75:46:79:91:60:e3:40:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C0:40:E0:BC:AF:BB:C7:65:74:C1:FA:6D:83:5C:07:99:F3:A1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.199.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:01:89:c2:1f:bc:fd:78:2c:f8:51:ac:7f:70:44:ac:65:
         1e:2f:53:c7:bc:11:7b:73:38:c8:30:7a:bf:92:27:38:53:1f:
         be:3c:30:56:92:39:54:9a:84:64:08:20:3a:8d:65:55:f6:4b:
         04:46:0b:8d:d5:69:12:c8:8a:a7:b3:ab:94:69:64:d8:6d:55:
         e2:32:4f:4c:bc:d9:5e:4f:ef:fc:17:c6:51:09:c1:a8:4f:25:
         db:30:38:bc:11:66:d1:89:60:b0:4f:e5:e8:62:05:41:aa:76:
         91:6b:cf:da:82:e3:41:ac:63:c7:52:8a:02:d8:eb:8c:b5:28:
         89:36:e7:91:64:97:b0:b0:51:5e:99:dd:a6:86:fc:af:97:dc:
         4b:f2:e5:65:aa:85:eb:3c:70:fa:bb:1f:9d:dd:43:46:35:fd:
         e4:9e:59:47:23:d7:30:c7:48:d7:30:76:b0:24:8c:33:19:e5:
         e1:f2:c2:fb:d1:45:e3:33:20:32:12:82:95:8a:09:c0:74:de:
         4e:ee:91:e0:c9:0d:cf:d3:36:4a:ab:41:1d:6f:56:74:c9:b2:
         af:59:47:fa:14:7f:b0:fe:97:4e:b5:02:45:24:83:19:f2:3e:
         89:7b:a3:0b:57:f5:fc:26:59:41:49:2d:be:c1:2f:ae:b9:10:
         a7:35:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:04:48 2025 by rpki-client