Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/7fb0d524-54d0-3c92-a488-c505132d0330.roa
File:                     7fb0d524-54d0-3c92-a488-c505132d0330.roa (raw, json)
Hash identifier:          ANfEPZQyrZMkFDa7Z+T7lsL2W0VgObkmSkJXLWKK39M=
Subject key identifier:   92:0C:BE:CF:B5:BE:A3:2A:90:88:51:B7:98:46:C1:FD:95:30:9D:51
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285849DD094E6C3DCFBE34F6678C00
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/7fb0d524-54d0-3c92-a488-c505132d0330.roa
Signing time:             Thu 15 May 2025 17:06:13 +0000
ROA not before:           Thu 15 May 2025 17:06:13 +0000
ROA not after:            Wed 13 Aug 2025 17:06:13 +0000
asID:                     397062
IP address blocks:        66.235.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:09:4e:6c:3d:cf:be:34:f6:67:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: May 15 17:06:13 2025 GMT
            Not After : Aug 13 17:06:13 2025 GMT
        Subject: CN=a8ea00bd-d9da-4c66-9254-bb57e07fb3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:e7:97:21:64:c0:d9:15:1f:12:f6:66:91:
                    7c:c7:04:b9:79:15:3e:d9:f7:2e:65:9f:d7:77:72:
                    b9:9f:1e:50:f4:e4:35:f5:77:37:ff:3d:55:07:03:
                    b0:c3:62:bb:3b:ed:64:9d:47:d0:69:e1:ec:2f:d4:
                    ba:50:77:b4:8b:61:36:2e:4c:0e:5d:82:3c:46:0d:
                    14:0b:9e:19:c9:84:8f:d9:0d:ee:0c:e5:0c:c3:59:
                    1d:7e:83:5c:3f:59:e4:9c:df:0d:18:da:47:4e:ab:
                    0a:91:ee:ae:26:27:72:fa:eb:36:80:6f:4a:30:25:
                    60:42:27:51:0b:0c:f8:c7:55:4d:e6:71:62:1e:83:
                    f7:ae:96:f5:56:9e:70:a1:b6:dc:75:b8:13:70:78:
                    fb:0e:d2:b5:93:fe:cd:93:01:7e:47:14:db:c3:e6:
                    6c:1b:a9:a9:c8:31:0a:af:35:17:94:b7:cd:cd:89:
                    b6:ae:c0:5f:20:11:98:d4:c6:37:2c:d1:6f:6d:b7:
                    82:3a:1b:f2:86:f5:f0:34:13:4a:68:23:ca:8c:9e:
                    3c:78:c3:f9:ae:68:18:41:a5:74:3e:b6:ce:e6:a5:
                    e4:aa:0b:4f:95:76:49:a1:4b:27:3b:7a:0f:05:42:
                    49:63:29:97:35:28:37:19:d9:57:1d:30:d3:bd:72:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:BE:CF:B5:BE:A3:2A:90:88:51:B7:98:46:C1:FD:95:30:9D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/7fb0d524-54d0-3c92-a488-c505132d0330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:4f:6e:e8:ad:46:37:c1:0a:fa:bd:41:ed:c8:59:1e:f2:
         e6:85:cc:b9:2b:d2:9a:ff:58:42:96:f9:57:59:36:88:a7:c3:
         77:3f:7c:56:8a:ba:0c:f2:b2:b1:78:48:39:41:d4:d4:9d:a4:
         32:0a:d5:b9:95:d2:7e:ef:02:62:23:ec:54:ac:e2:aa:07:37:
         0f:d3:91:29:eb:20:6b:be:81:90:c3:b5:fc:d6:a9:bf:40:c2:
         cf:c2:5d:ee:69:0b:d6:81:cd:d8:7f:e4:63:87:6f:c8:00:d6:
         43:e3:b6:80:4a:aa:7f:12:4a:99:1c:b5:86:08:0d:69:43:4d:
         a0:fd:aa:00:52:3f:3f:1b:5e:a2:57:75:dc:ba:43:84:76:7e:
         1b:6c:16:7e:23:5a:82:e3:27:66:29:94:18:36:96:e4:b0:84:
         04:a6:6c:9f:87:4b:00:a8:a6:6d:94:11:df:76:b9:2c:17:e2:
         4b:dc:d1:80:86:30:d6:e0:74:16:43:28:b4:f0:05:5d:8e:15:
         f6:2d:a7:0f:7a:20:fd:4f:de:a5:79:3a:ca:03:fd:a9:2e:29:
         f9:ce:03:a3:f3:d3:6e:94:ee:03:ae:77:ea:4a:ed:aa:8e:6e:
         65:6f:e5:11:08:cc:b7:e1:ed:6d:6a:d2:40:d7:a5:0a:f8:2b:
         86:4a:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:52:55 2025 by rpki-client