Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
File:                     dfc21920-33d3-36af-9d3d-f32de48afd1f.roa (raw, json)
Hash identifier:          o6wXkOSm8szf+8aLuMAFSPMJT6PoGVaRxeOUYvIy38s=
Subject key identifier:   2F:89:0A:C2:2F:AE:74:82:4B:8D:9E:E7:7D:59:C3:71:41:97:73:4B
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F4328584961B9931F42519024E8203AC0
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     138997
IP address blocks:        65.75.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:93:1f:42:51:90:24:e8:20:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=36dbc2d4-400e-4778-a673-ecef029a97b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:76:fe:6f:ce:d9:0a:82:4a:fa:a2:40:48:
                    57:1f:fe:66:22:21:63:39:4f:0b:d6:8b:50:0a:9c:
                    78:2c:f8:3a:48:b9:e9:5f:a9:ba:31:66:cb:49:aa:
                    22:18:4b:7a:06:a9:08:bc:50:c3:ff:d6:34:70:61:
                    99:ae:a0:e7:5c:48:2f:ca:d8:d3:ef:8c:b0:4e:20:
                    c1:a9:02:f0:91:a6:4d:98:ac:5c:08:6d:a0:ac:af:
                    37:7c:2f:04:8f:bd:71:fe:30:a9:1c:63:f3:44:24:
                    0f:60:f9:b3:b4:71:41:7f:12:3d:ea:58:f9:03:98:
                    70:23:d6:2e:a0:5a:d0:cb:fd:6d:65:01:45:9e:86:
                    4c:86:3d:48:fc:7d:d0:f6:0f:89:0c:f2:d1:d5:1f:
                    a0:8a:50:18:f2:4e:ce:eb:b9:55:23:87:f4:24:71:
                    d6:13:d7:84:4b:cb:35:59:6f:09:a7:1d:5e:94:29:
                    55:3f:dc:c1:55:b5:8e:6d:8b:8b:f0:a8:dc:f9:e8:
                    6a:2e:35:a1:fe:48:47:ff:5f:8e:4a:af:b9:37:8f:
                    05:a1:80:4f:4f:76:96:ec:63:7c:b5:5a:b3:8a:be:
                    ed:cb:d6:27:fd:25:af:17:46:51:b9:96:ac:15:d3:
                    c2:ac:b1:52:f2:99:c1:2f:25:12:12:18:f2:5f:86:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:89:0A:C2:2F:AE:74:82:4B:8D:9E:E7:7D:59:C3:71:41:97:73:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c4:da:e9:24:c5:2b:94:a0:46:b8:00:6b:6b:0a:e9:4d:fe:
         c5:66:f9:6f:ef:53:ef:bc:01:75:24:75:bb:d0:66:35:0d:c2:
         46:ba:d0:d1:08:ae:4b:c2:60:05:e8:81:96:ee:b2:d6:97:57:
         9c:08:31:a5:24:39:c4:b1:0b:21:4b:ea:69:f5:e3:38:17:21:
         8f:c1:36:ba:ef:76:9d:13:43:4d:1e:09:66:bc:61:aa:57:04:
         83:cc:5d:42:6f:cd:25:0a:89:9f:99:19:f4:87:77:d6:49:2a:
         23:7a:47:90:0b:1f:17:3a:8e:3c:bf:63:fc:bf:4c:60:b8:c5:
         63:e7:a4:db:50:6e:d0:a5:ab:e8:73:30:11:59:c4:cc:ff:e3:
         43:91:af:29:3a:d7:03:f0:4f:fe:99:ce:6f:22:12:dc:55:a9:
         a7:ab:d8:ad:12:62:0d:12:a8:69:a7:ba:f9:f9:a5:77:26:a0:
         57:59:d5:77:4b:44:e7:b6:1f:b0:13:21:17:a8:58:90:a3:3b:
         82:86:23:6c:23:60:9d:04:aa:07:ad:38:d8:1e:e6:e9:bd:71:
         fa:6c:7d:48:21:41:6a:40:14:25:12:bc:7c:27:d9:5f:ee:b9:
         36:33:c6:f1:85:48:9e:5e:91:61:b1:f4:4b:0d:8d:61:1c:24:
         ca:78:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:21 2025 by rpki-client