Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2d85770a-64c3-371c-836c-f0a527acffe7.roa
File:                     2d85770a-64c3-371c-836c-f0a527acffe7.roa (raw, json)
Hash identifier:          LrVwWXRDXxbN5OXXgZxbxyF9Omg3gwVtfLRuITQfYdY=
Subject key identifier:   ED:47:4E:4E:BE:1E:AC:1C:37:B7:B8:3E:1C:A2:B7:B0:A0:D3:0E:8B
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858498FC9B5D6361E6639645CDF00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2d85770a-64c3-371c-836c-f0a527acffe7.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     5769
IP address blocks:        66.78.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:b5:d6:36:1e:66:39:64:5c:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=6b5d8f37-7960-4f49-a0d0-d5216af25d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:d7:95:12:a3:67:b8:26:17:f0:73:2b:b1:
                    05:c7:13:2f:4d:1b:49:4f:66:7b:5d:df:b2:a3:7f:
                    b0:8c:a7:6f:82:ad:f7:92:8e:30:c7:dd:62:0e:60:
                    88:11:ca:2a:96:3e:fc:fe:3a:3f:7c:c4:65:8c:c8:
                    04:65:7f:34:65:19:66:d0:39:b5:b2:1b:54:1d:35:
                    0d:56:f3:7d:ec:b7:ff:5c:32:0b:79:e0:01:6d:a4:
                    ec:d4:e4:2f:d1:9b:13:60:63:c8:a6:05:6a:7d:88:
                    21:8a:a0:4e:3e:a0:72:79:1f:22:b2:ec:f6:b2:c3:
                    78:fe:f7:d5:02:ff:25:4b:c4:2e:7a:30:6e:5a:b5:
                    30:34:4b:cb:0b:00:6d:79:da:00:23:55:aa:35:98:
                    e4:37:86:12:39:bf:6f:46:90:d4:fe:cf:95:a0:1d:
                    d2:3e:cf:35:3f:6b:87:29:08:de:cc:58:21:78:08:
                    1e:e6:0a:1e:3f:d4:4f:fb:ce:0c:cc:38:db:c3:10:
                    ec:c0:16:e7:2b:23:72:4b:63:e2:a7:bc:87:e0:86:
                    77:dd:a6:3b:57:ee:40:60:41:87:a9:5c:62:a2:40:
                    56:8f:a1:c3:3c:66:58:21:b4:bf:4b:1e:89:87:3f:
                    94:d5:15:12:f5:53:76:7d:0b:83:8d:6a:af:21:1e:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:47:4E:4E:BE:1E:AC:1C:37:B7:B8:3E:1C:A2:B7:B0:A0:D3:0E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2d85770a-64c3-371c-836c-f0a527acffe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:88:8d:39:59:fe:5b:d7:3f:a7:30:a2:a5:2f:d5:05:b4:18:
         74:72:eb:70:10:e4:c2:82:24:07:50:f2:5b:7b:80:7d:8c:50:
         29:af:70:bb:68:c0:1e:16:42:ab:ec:c1:51:5c:06:a6:29:4b:
         d3:c9:09:94:a1:02:4d:5f:aa:20:cb:b8:5a:7f:05:91:42:4a:
         d7:55:4d:7a:9e:ee:c0:70:8a:12:b6:cc:fc:ea:a3:f0:f5:9a:
         62:b3:39:f6:2b:90:63:8f:be:d0:cf:74:6e:b4:4c:12:66:83:
         b3:50:86:30:eb:a6:21:3f:69:45:62:14:ae:40:7f:5c:07:13:
         27:b1:9e:de:f5:14:cd:47:3d:79:a0:95:69:4b:c6:c3:4d:cf:
         6c:cf:b8:f4:cc:5a:ec:53:7b:0f:b8:81:b3:78:0f:9f:a9:13:
         b4:41:72:6b:cd:59:9c:5b:58:6d:37:e5:6b:47:dc:aa:c6:95:
         88:db:6a:5f:61:a5:ff:91:86:50:b0:82:01:3b:e9:bc:2f:69:
         89:f3:8f:07:7c:f8:f8:70:90:12:23:c4:09:57:a9:10:8c:29:
         ea:c5:ad:46:7a:a6:59:9f:53:23:0a:ed:d9:b3:6d:f4:f0:f9:
         f3:49:2c:2a:de:f3:a0:0c:7d:a9:c1:c5:8a:56:ac:5e:51:2d:
         d1:d1:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:39:25 2025 by rpki-client