Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa
File:                     ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa (raw, json)
Hash identifier:          J/8eZ2eyeX+VKXoIb4z5oj0U/Rx5CufELvQ+5hvnnjE=
Subject key identifier:   1D:94:C6:E8:43:06:DB:C8:9C:B9:E2:1E:D7:54:BB:ED:5E:3D:CE:4C
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584AC2E10A8A51855D9DC6844180
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     2734
IP address blocks:        66.35.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0a:8a:51:85:5d:9d:c6:84:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=62a01bce-ba5e-4f96-ac0e-e15d21725962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:43:4b:18:9c:34:d1:4d:c8:2e:fd:49:c2:
                    2a:27:45:59:f8:85:48:4f:88:e7:0a:84:f3:8e:bf:
                    aa:4f:cb:3d:db:a7:51:c0:96:ae:a9:2d:35:8b:ad:
                    43:e8:ae:74:c5:26:6e:da:70:f2:60:db:03:d6:74:
                    04:66:03:19:1a:8f:69:b0:1d:6a:90:06:81:aa:04:
                    64:61:0b:14:35:21:c6:41:46:bb:fb:2c:8e:82:f3:
                    e5:57:75:76:27:ac:b9:dc:e8:94:d4:d8:46:f1:66:
                    cf:67:f1:36:b8:fa:79:d2:ba:6a:fb:4c:40:6b:ca:
                    07:7b:c2:cc:64:8f:7b:e4:00:ef:01:f3:43:a9:12:
                    6c:80:09:06:92:62:53:e2:f4:b9:21:20:66:a9:9a:
                    d2:13:81:94:24:af:39:2e:f6:8e:dc:08:36:77:ef:
                    f3:af:9c:a4:78:67:47:11:b1:dd:1b:2a:21:aa:c6:
                    99:a9:41:6a:4d:a4:f6:af:e0:3e:26:26:d5:b3:e9:
                    b2:99:ab:cc:4c:d6:47:0f:39:0c:cc:d4:00:2a:e0:
                    3b:b8:65:fc:56:20:b3:11:40:a8:d8:d9:7f:58:e1:
                    73:ea:5c:75:d0:9d:70:75:b9:ea:a3:2d:2f:2a:24:
                    f9:22:da:97:da:50:96:9f:f0:84:4c:2c:9c:03:fa:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:94:C6:E8:43:06:DB:C8:9C:B9:E2:1E:D7:54:BB:ED:5E:3D:CE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ab1dc1bd-823a-3bd7-8c57-95028b1a21e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:96:14:40:52:e1:83:64:3c:cd:56:f6:10:d1:d9:49:64:
         0f:80:70:d1:d0:af:e6:0a:2e:fa:f8:64:d2:62:d0:63:7e:11:
         68:ef:18:56:61:e2:bf:1b:90:5c:5c:5b:0f:d6:64:83:9a:50:
         04:ee:11:2a:bf:07:84:9f:27:7e:56:0e:f4:86:1e:d8:20:1a:
         80:99:41:37:74:f9:3d:b2:a7:50:2e:29:3a:70:00:90:9e:e9:
         09:d8:ad:36:14:b1:30:3a:5f:0a:1b:fc:9e:6f:f7:43:a0:08:
         d4:ac:57:eb:41:d9:fa:50:34:34:7f:a9:8b:4f:24:db:3e:50:
         98:72:56:5a:d3:e1:cd:e0:88:07:41:32:ce:db:42:a9:48:60:
         88:c9:01:6c:18:c8:c2:da:fc:9f:29:b4:0c:ab:f8:be:1c:7f:
         5b:27:d9:71:7c:19:dd:f8:82:44:69:25:86:23:5a:1b:4e:87:
         a5:e5:24:cc:38:5c:78:8d:73:cb:cd:48:75:e4:3b:d8:16:98:
         fc:38:f6:f6:54:72:2b:b2:44:31:8e:7d:ca:8e:a3:5a:66:a0:
         d5:3e:30:57:3c:53:ed:a4:74:db:1d:d3:ce:ac:ef:b7:07:82:
         8f:e2:c8:d1:08:1c:62:06:18:5c:5e:47:7b:f0:63:86:07:70:
         dd:53:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:42:04 2025 by rpki-client