Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b7c6884e-5baa-31f5-923d-b285147205e6.roa
File:                     b7c6884e-5baa-31f5-923d-b285147205e6.roa (raw, json)
Hash identifier:          /F/Bt63huASmBqWgeGmO4SVEV0jS9g7sXVXUepYXyUU=
Subject key identifier:   1E:2D:AF:E9:75:32:9A:7A:61:90:00:F1:36:2D:E7:81:A2:1D:D8:F4
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584A43DB0AC359FE71FC8A91D600
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b7c6884e-5baa-31f5-923d-b285147205e6.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     262415
IP address blocks:        66.35.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:0a:c3:59:fe:71:fc:8a:91:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=2e71de3b-d6de-41a5-b520-3b52299e1d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:29:8f:37:f1:c9:99:9b:24:7f:57:99:b0:
                    6d:ca:dd:17:db:73:df:79:9a:37:5f:d6:8d:55:d7:
                    90:9b:50:6b:2e:c0:f2:1d:60:f4:18:bb:21:fe:a1:
                    e3:e3:3c:05:07:01:63:90:76:7b:d3:23:02:e0:e9:
                    53:93:7c:4b:d6:2c:2a:50:e3:5e:ea:72:f1:94:2c:
                    26:57:60:ca:85:71:f4:59:b4:5e:f3:52:f6:11:7a:
                    83:42:c5:55:94:f2:09:d7:dd:fd:aa:cb:f1:35:5e:
                    09:75:9e:a0:6f:5e:4e:46:02:7e:c9:c0:b2:72:97:
                    db:bf:5a:7e:ac:0d:4f:b2:5c:2f:32:68:0a:db:1e:
                    14:f1:c7:9d:f6:7c:bf:08:89:cc:88:3f:1e:12:f1:
                    20:42:90:3e:9e:b5:0b:31:85:ef:2f:ba:78:a8:d6:
                    6b:9a:b7:27:29:e2:84:48:5f:2c:76:ce:33:15:2c:
                    09:23:9d:49:70:eb:3f:3f:68:30:68:62:64:36:ad:
                    6a:cf:af:81:f7:69:e8:bc:ad:ca:02:e9:ff:32:8b:
                    4d:54:ac:b6:91:90:a9:30:46:c6:0d:69:dc:77:79:
                    11:4b:70:09:52:76:89:84:cd:58:7e:c6:18:6f:03:
                    e1:3c:8a:4a:47:6a:b9:b3:00:08:40:f5:b4:04:56:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2D:AF:E9:75:32:9A:7A:61:90:00:F1:36:2D:E7:81:A2:1D:D8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b7c6884e-5baa-31f5-923d-b285147205e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:49:76:8c:ab:d5:21:cb:a0:89:2d:ad:55:f5:23:cf:16:9d:
         7c:c7:84:71:6d:1a:75:b2:03:d5:b9:5a:90:60:0b:28:97:33:
         f1:d6:de:f7:1f:c5:f9:b5:c7:73:74:71:bb:9c:d2:cb:b2:0b:
         eb:2d:4e:f3:e2:33:7d:03:1d:ed:eb:3e:22:4d:10:5c:0a:e1:
         73:91:74:3c:13:18:09:15:53:8b:a2:13:27:44:82:46:f7:66:
         1d:13:7e:f3:64:f4:d9:79:7c:05:a0:0d:e3:ae:37:c2:64:74:
         4e:4d:90:6f:bf:3a:31:13:3b:d6:2d:f9:e2:12:a8:d5:4d:27:
         8b:8e:1d:8b:dd:f0:24:a7:91:fe:21:86:a8:93:56:34:3b:59:
         2a:95:2d:c8:81:5f:89:7e:37:fd:32:42:e2:df:a4:dc:20:e0:
         c6:cb:35:00:a4:10:26:4b:f4:40:17:d5:0c:b7:fe:b0:f9:f6:
         19:50:4e:5d:db:0b:6a:bb:6d:6a:7d:e0:73:0f:79:a4:2e:c2:
         3d:88:fe:5b:04:18:eb:1f:cf:22:a2:a5:24:1e:4f:65:30:9c:
         a6:eb:60:ef:94:42:68:80:5a:15:f1:3a:4a:83:64:4d:26:21:
         35:84:35:a4:fb:f4:c7:0a:3a:7c:36:65:67:d1:cd:7e:a4:0a:
         3b:27:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:24:37 2025 by rpki-client