Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/f602662a-169f-37a9-9fcc-25a42547847d.roa
File:                     f602662a-169f-37a9-9fcc-25a42547847d.roa (raw, json)
Hash identifier:          ye5h4MQwklm2ABfCET8pnqdqjFwOh3ktT0SzTl4aG+o=
Subject key identifier:   EB:65:38:A2:13:47:61:4D:F0:9D:33:5D:8B:C5:C0:00:4C:38:E2:04
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F4328584A268AC43372B1E63DA8C9C760
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/f602662a-169f-37a9-9fcc-25a42547847d.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     13768
IP address blocks:        66.180.146.0/24 maxlen: 24
                          66.180.150.0/24 maxlen: 24
                          66.180.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c4:33:72:b1:e6:3d:a8:c9:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=6f6adfe6-5095-4ee9-850f-5d792c6bb93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:97:fa:94:ad:0c:c6:a6:53:4c:4e:7a:6c:
                    ce:a0:2d:1d:0a:63:a7:d2:cc:61:eb:7d:49:c3:60:
                    92:51:af:76:9c:b2:09:3a:2d:e8:26:32:98:81:e1:
                    ee:b8:b2:7e:37:f5:02:cb:90:1f:9a:bc:58:b4:ae:
                    0c:37:ee:af:27:a3:1b:ed:33:3b:24:96:6f:67:c6:
                    3c:bb:cf:25:4f:33:57:6b:04:f6:22:23:4e:51:7d:
                    1b:14:4c:ee:82:b6:05:b2:6b:69:5f:79:cb:31:aa:
                    a6:fc:61:d6:95:0d:9f:10:8f:1f:58:f2:68:ae:d7:
                    ac:c7:80:02:98:c0:98:b4:0e:00:89:71:c7:96:6f:
                    21:f3:26:93:4d:fa:e7:8f:6e:13:c8:5c:11:54:0e:
                    ba:30:f2:10:c1:d9:3a:04:f8:65:c9:24:55:03:73:
                    9a:b5:3e:b0:95:7d:f2:2b:61:64:17:8b:93:14:8e:
                    78:e6:ec:4c:92:05:ca:b8:aa:b6:e1:c5:08:ca:34:
                    cf:44:fb:26:02:ed:b8:d2:ad:d8:fc:53:ed:b8:b9:
                    cc:e3:63:8c:91:59:5d:d6:be:00:b6:1a:0b:a3:27:
                    e8:7c:59:82:e6:cb:19:d1:fa:f9:fa:c9:80:70:65:
                    d2:2f:20:c2:7b:a7:4a:be:09:7b:50:d9:7b:92:d7:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:38:A2:13:47:61:4D:F0:9D:33:5D:8B:C5:C0:00:4C:38:E2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/f602662a-169f-37a9-9fcc-25a42547847d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.146.0/24
                  66.180.150.0/24
                  66.180.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:0e:5c:cb:69:ab:74:e3:7d:53:0e:f9:6b:7d:4a:77:48:3d:
         52:d3:10:bf:fa:5a:3d:e4:04:db:66:ff:dc:48:5a:d1:90:35:
         d3:9b:22:8e:da:14:61:2d:19:2c:c6:fb:37:01:b8:d7:51:d8:
         14:24:0b:02:9f:07:b6:6c:e5:6e:33:ff:08:b9:b6:a4:da:7d:
         47:7c:39:b0:b7:06:16:fa:2a:c6:0c:c8:c5:f3:20:f4:b7:42:
         f0:f5:7b:0a:1b:2f:eb:b5:c4:05:ea:8b:53:45:60:44:d5:f7:
         1b:09:84:c4:e4:77:f5:dc:be:fa:aa:fc:e4:43:fa:8b:fe:03:
         7e:52:76:31:a2:07:1e:75:7b:94:57:4c:17:92:f1:71:30:44:
         4e:d1:d9:c3:63:e6:d9:b3:c4:85:6e:ff:82:4a:fd:63:4c:7c:
         9d:79:bd:3e:81:b5:8c:8a:b5:35:f3:6c:84:61:94:d9:c9:5b:
         41:09:a7:7f:09:50:55:f0:3c:fa:a8:72:a9:66:d4:1b:93:09:
         1f:1d:92:3e:79:76:77:10:de:ef:4f:58:7c:78:04:01:12:ef:
         a6:bb:50:25:57:df:12:3b:21:d2:4c:d8:5e:cf:cb:83:a9:95:
         e4:66:65:4e:1d:1f:ea:5a:d6:c1:47:23:b8:fa:79:7f:22:a3:
         3f:9e:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:08 2025 by rpki-client