Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5805f3ec-d6e3-3834-a421-a19e959f37d6.roa
File:                     5805f3ec-d6e3-3834-a421-a19e959f37d6.roa (raw, json)
Hash identifier:          pCBkfWReFiOAJBCzXgpEXv6NgzPhegijK6UWHRbuKTs=
Subject key identifier:   5C:09:37:1D:EA:0D:EC:FC:11:5B:7E:22:D2:55:06:FC:DE:6B:2E:5B
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584A4152210644BDBF099E2E2740
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5805f3ec-d6e3-3834-a421-a19e959f37d6.roa
Signing time:             Fri 20 Jun 2025 15:13:47 +0000
ROA not before:           Fri 20 Jun 2025 15:13:47 +0000
ROA not after:            Thu 18 Sep 2025 15:13:47 +0000
asID:                     13445
IP address blocks:        66.163.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:52:21:06:44:bd:bf:09:9e:2e:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jun 20 15:13:47 2025 GMT
            Not After : Sep 18 15:13:47 2025 GMT
        Subject: CN=74ec190e-2391-4fec-930c-fa819cb8e4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:30:15:80:16:39:48:23:74:ab:c8:c1:bd:
                    34:a6:37:80:e5:22:fb:ba:00:0b:95:68:7a:22:04:
                    a8:20:13:e2:c2:b9:91:b6:44:0a:8a:a3:78:f8:30:
                    71:39:72:e6:a3:3a:77:64:d5:64:d5:08:51:f3:76:
                    97:0a:33:bb:b4:35:f7:bf:3c:73:a9:38:90:0c:94:
                    cd:72:6e:42:f4:b5:c0:70:8a:6d:02:7c:c5:5a:30:
                    f6:63:0a:40:0b:71:3e:85:10:05:26:32:fa:b1:6f:
                    af:61:04:87:df:44:c0:91:5e:38:88:22:6b:8a:26:
                    ec:38:d7:0e:af:08:f2:e5:f8:13:2c:61:2c:5a:74:
                    83:30:85:6b:2f:47:df:91:30:aa:56:df:c6:79:d0:
                    43:a7:c2:22:02:7f:36:af:e9:f6:45:91:c6:e7:56:
                    66:15:79:ea:d5:0b:8c:13:ab:cc:aa:45:33:a5:c8:
                    a3:c6:a6:81:3f:44:fe:99:e5:5c:c5:fa:49:cb:97:
                    33:c1:12:8a:db:5a:20:d7:30:10:2c:bf:f4:b9:aa:
                    14:b3:50:6f:b5:f0:74:e4:f8:bc:42:75:71:f5:ad:
                    ef:d3:4e:95:7f:9e:c1:db:04:c3:ae:b9:a1:d8:c1:
                    e1:6d:26:ad:a6:d0:91:e2:c1:86:58:c7:67:c0:1b:
                    b8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:09:37:1D:EA:0D:EC:FC:11:5B:7E:22:D2:55:06:FC:DE:6B:2E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/5805f3ec-d6e3-3834-a421-a19e959f37d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:49:c7:9b:c9:f7:4e:16:be:8a:26:bb:6d:ce:18:ea:03:64:
         96:89:42:9c:01:8e:27:e4:19:d5:a3:82:fc:75:ea:c5:1a:53:
         85:ca:78:75:87:83:5a:d2:64:0a:03:a1:7b:70:80:05:f5:88:
         cf:b8:44:0e:7b:fc:8f:a1:bc:6c:52:34:a3:ec:18:93:50:b7:
         e7:37:3b:f3:a3:38:86:eb:43:b2:40:70:66:13:37:4a:3f:03:
         c0:16:dc:5d:5a:9b:05:28:b2:1e:78:31:ac:03:e0:27:3e:98:
         18:30:8a:cc:06:72:bd:a5:d9:64:01:72:c9:21:1e:87:ac:ac:
         8b:6f:1e:5e:31:05:11:bd:9f:54:ca:0a:f6:37:f2:ab:f3:25:
         83:ce:d2:d5:a4:f8:b3:e7:74:b4:63:5f:12:2d:eb:7f:17:e7:
         31:f3:59:1e:cd:e9:ab:01:2d:79:ae:94:3a:15:51:15:24:58:
         a1:60:3e:b4:1f:9c:71:39:68:fc:4d:22:2f:9f:b5:bb:ef:d7:
         ee:88:48:7f:f7:e2:62:67:61:92:d9:60:87:4b:82:a6:39:6d:
         8b:bf:73:5d:4f:44:bb:0c:9b:5d:1b:fb:34:e2:63:61:56:48:
         d2:50:82:5a:5a:23:50:f6:6a:bc:38:4a:3c:c6:77:76:b0:2b:
         2b:42:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:48:17 2025 by rpki-client