Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/c54fcdbf-3a49-3b61-87d9-b9ec920939b3.roa
File:                     c54fcdbf-3a49-3b61-87d9-b9ec920939b3.roa (raw, json)
Hash identifier:          0KNHbQTvuXN7c2c/6XjkSAr9RQr4M7/VIMOxZdZ80yY=
Subject key identifier:   6C:C6:6E:5E:94:11:7D:F2:66:E6:76:80:BA:CC:F6:BD:5E:1D:8C:A9
Certificate issuer:       /CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb
Certificate serial:       010D0C9F4328584A19FABB982157604933A59B60
Authority key identifier: D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/c54fcdbf-3a49-3b61-87d9-b9ec920939b3.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     54262
IP address blocks:        66.51.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:bb:98:21:57:60:49:33:a5:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=5f458223-3d8c-4ec5-afdb-3340d72d89f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:c7:d0:b5:c2:94:14:ac:d6:ff:1e:71:6b:
                    eb:48:4e:1c:49:c2:20:09:c5:c0:d0:a3:84:1e:ba:
                    29:48:28:95:04:5a:85:5e:01:d4:79:95:b7:01:e3:
                    d0:2e:34:2b:5e:b1:cf:f5:e8:ba:b9:59:1d:6a:f1:
                    de:5d:33:4b:46:eb:ff:3f:95:78:9b:b8:fb:04:89:
                    1c:33:fa:a6:c8:d7:1e:ca:8c:18:eb:d5:10:1a:b4:
                    91:3a:03:2c:45:d4:4c:fe:96:c2:b6:fc:93:24:fe:
                    a5:87:8a:ea:b3:36:7a:4e:25:40:05:d1:c6:27:3d:
                    47:9f:b2:01:30:ec:96:b7:aa:63:da:44:fb:6d:e4:
                    31:85:13:92:4e:73:4f:9b:29:1c:dd:7d:dd:28:dc:
                    f8:be:08:c3:19:9a:03:06:54:45:7c:09:75:15:46:
                    1c:34:6f:eb:29:86:86:db:3f:fc:2b:89:99:c4:68:
                    61:ac:8f:b7:11:f7:db:84:c7:e0:90:14:ec:ad:59:
                    bd:fd:12:28:65:5c:42:76:35:f8:28:22:0d:75:4a:
                    e9:c2:90:48:b7:fe:34:fe:31:f2:8f:94:32:77:51:
                    72:ac:fc:45:e3:5d:ad:d4:c6:77:81:af:3b:e1:e0:
                    0b:ef:e1:10:2c:2a:0a:c4:04:6f:ac:fa:3e:a1:80:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C6:6E:5E:94:11:7D:F2:66:E6:76:80:BA:CC:F6:BD:5E:1D:8C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/c54fcdbf-3a49-3b61-87d9-b9ec920939b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:89:75:9e:95:4c:f3:ed:d4:3b:44:54:f9:d4:93:ab:12:8d:
         6b:08:a2:43:cd:f6:aa:4f:b5:42:fe:07:44:92:f5:96:ba:d0:
         94:5e:80:20:e3:e2:f3:12:50:79:43:ef:93:a6:bd:f7:f4:1f:
         15:de:87:9c:06:4f:9e:cd:61:f4:ea:7a:db:79:48:7c:ba:5b:
         ef:dc:29:90:5f:3b:8e:a7:e6:eb:35:ac:37:3d:9b:c5:98:d5:
         07:c8:a5:ae:4b:08:8e:b7:34:5e:08:5e:d4:8b:da:db:a3:0f:
         c3:79:ac:43:e2:80:cb:aa:99:42:f9:33:19:5d:4d:c4:e8:ed:
         43:07:24:fc:50:ad:84:6c:90:f8:a2:87:8c:2b:28:54:00:89:
         54:33:3f:1b:fc:be:0a:fa:be:4e:7b:32:2d:b0:84:45:a2:20:
         d0:e9:9a:d3:42:fa:f3:21:e8:eb:ea:da:f4:71:4a:8d:18:a5:
         fd:77:30:53:02:9f:85:8e:47:d0:f8:a9:08:88:28:54:d1:01:
         10:6e:a3:e7:07:44:f6:a1:37:ea:fb:d2:13:b5:05:de:3d:3b:
         6e:90:ea:ab:37:07:4a:bd:72:18:6e:cf:5c:ef:d8:8e:41:43:
         6e:5e:93:5b:a1:9f:b5:12:9b:00:ce:43:27:7e:ea:75:79:c5:
         27:7a:46:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:54:07 2025 by rpki-client