Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa
File:                     413e9f7d-2d3d-3845-aa41-861d68125bfb.roa (raw, json)
Hash identifier:          9ybmsvAILh2V/7Fki2gc+v47/FvxqIoJSzEmDMq0zXA=
Subject key identifier:   98:B7:90:8F:52:7B:06:61:3D:F5:BF:30:EA:C3:D1:AA:59:9F:96:04
Certificate issuer:       /CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
Certificate serial:       010D0C9F43285849C20A20B6656CBB7C168FE7C0
Authority key identifier: B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        66.45.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:20:b6:65:6c:bb:7c:16:8f:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=901cf44b-4bd6-4abe-8c12-d43d706091cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:96:d0:94:7c:6f:e6:2f:b6:5c:1b:88:89:
                    76:db:90:d3:84:d8:93:24:06:ce:0f:77:40:a7:19:
                    75:32:de:4d:2f:a7:6a:31:58:16:f5:c5:93:30:3c:
                    46:27:22:fb:cb:a2:40:66:89:63:2d:4e:31:90:96:
                    ff:00:7e:d6:b1:24:f5:26:8d:45:9c:88:14:e0:23:
                    5d:c1:f5:f9:aa:31:16:07:07:f8:b5:04:11:6c:3a:
                    da:13:0b:8b:9e:12:58:46:f3:fa:6e:f6:91:12:47:
                    0e:bd:b1:bb:5d:dc:18:37:40:bc:48:3f:76:3e:70:
                    5e:17:ff:d2:fa:0e:66:91:41:67:21:f9:ae:7e:e9:
                    43:e7:ef:dc:ad:8b:ab:5c:0b:b4:11:c4:ba:89:15:
                    ee:ae:c2:08:a1:e0:57:9a:c0:68:2e:4b:f2:27:bd:
                    f1:22:f7:7b:22:f0:63:02:b0:e3:5d:2f:42:a7:01:
                    07:de:c3:c0:43:c6:fe:b6:d4:72:1a:0f:3a:1c:c7:
                    fa:1b:bd:9f:0b:39:94:22:fd:73:d9:c1:ce:3b:03:
                    21:c4:69:78:83:1c:77:23:f0:10:8b:46:73:76:36:
                    84:5f:11:d0:a8:4c:44:bd:d8:cf:ce:13:d1:a1:88:
                    5d:a2:bd:ca:d2:d7:ca:86:a8:37:d0:42:36:aa:3b:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B7:90:8F:52:7B:06:61:3D:F5:BF:30:EA:C3:D1:AA:59:9F:96:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl

            X509v3 Authority Key Identifier:
                keyid:B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1d:e0:51:3a:b5:f9:1b:83:39:a9:b3:b5:9f:98:75:d2:06:
         97:df:66:5a:b0:2c:92:be:90:80:6b:d3:35:cc:6a:ae:ea:3f:
         a3:a0:76:8b:75:02:ce:f4:42:6a:bb:ad:b6:be:39:70:a3:de:
         88:b4:9c:3e:77:1c:f3:e6:dc:ff:e2:01:e7:e4:1b:35:1f:d4:
         fa:61:92:47:3c:ce:3f:be:0c:f3:d9:79:5f:32:f1:10:be:af:
         24:f5:b0:d9:7c:85:0f:4b:a5:b9:ca:3a:30:15:5a:77:f7:6a:
         17:19:2e:82:c4:14:26:d1:59:68:cd:4f:e7:28:ef:8e:50:c6:
         8a:e7:bb:ee:7d:91:6e:58:1b:ba:e8:a6:26:e1:48:30:75:0c:
         79:36:26:f2:61:7d:75:9e:03:f8:ff:3d:f0:10:5d:5d:0a:8b:
         3a:ce:ea:fb:a7:37:39:48:d0:fc:21:7b:c7:a6:67:75:17:85:
         60:d9:93:fa:be:52:51:04:4f:09:ec:20:5a:27:2c:b5:c5:80:
         ae:bb:45:35:75:56:ba:3c:b5:e2:0d:0a:c0:5e:bd:f3:24:2f:
         96:96:11:9f:cb:3a:e4:80:bf:c5:14:a8:c9:12:8b:5d:62:fe:
         14:33:12:9b:35:8f:2a:f3:82:18:d9:68:fe:11:c2:38:c4:62:
         bb:8c:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:08 2025 by rpki-client