Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/207a10cb-c8b6-34ce-be19-e300e16ba781.roa
File:                     207a10cb-c8b6-34ce-be19-e300e16ba781.roa (raw, json)
Hash identifier:          tAen+myVcIXgvgCaBIQfTZwHgXTWf/F++kIzYCELOS0=
Subject key identifier:   6A:62:32:53:9F:03:27:66:66:04:C4:7B:79:A1:8E:F2:CA:76:94:05
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858497B2B564463B3BCDCE53FC638
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/207a10cb-c8b6-34ce-be19-e300e16ba781.roa
Signing time:             Thu 10 Apr 2025 15:45:34 +0000
ROA not before:           Thu 10 Apr 2025 15:45:34 +0000
ROA not after:            Wed 09 Jul 2025 15:45:34 +0000
asID:                     54131
IP address blocks:        66.210.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7b:2b:56:44:63:b3:bc:dc:e5:3f:c6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 10 15:45:34 2025 GMT
            Not After : Jul  9 15:45:34 2025 GMT
        Subject: CN=67cc5cb2-fe83-417a-9017-403862f259b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:5f:d3:65:7b:8c:17:bc:8e:db:ba:1a:2a:
                    90:e9:c0:9f:b5:d7:76:7b:5b:c2:a9:69:cf:c5:41:
                    6c:88:9d:84:df:07:89:36:d4:c2:c4:52:58:fb:8b:
                    21:75:d6:c8:1c:be:c1:7a:51:ac:23:2c:c7:58:ce:
                    6a:c7:46:8a:28:7f:02:33:22:7c:aa:c0:8b:1f:5e:
                    2f:d9:ee:12:71:aa:27:19:41:c5:86:41:f1:b9:4d:
                    63:e3:a7:bb:2a:d9:f7:40:ef:46:6a:7e:11:c3:0d:
                    9b:ca:bb:2b:bc:45:80:06:df:61:56:7a:b0:7f:9d:
                    d9:c1:91:a5:ca:51:4b:61:b5:fc:11:32:26:33:83:
                    91:29:7a:b0:bb:d4:76:78:9d:0a:94:c4:5b:60:6c:
                    d1:1b:95:36:b5:1d:5c:73:0f:6c:dc:a5:6e:7b:fa:
                    9e:36:dc:c6:2f:f4:aa:f9:bc:84:ac:89:a5:e6:93:
                    56:16:cc:ab:b9:6e:d9:9a:67:97:b2:be:8f:2e:7a:
                    ec:f1:b5:83:93:9a:94:30:22:bb:cb:e7:37:98:cb:
                    05:29:fd:89:95:cb:10:ab:9e:52:83:1f:b7:c7:1a:
                    a0:7f:fd:3e:6a:88:1d:5d:b4:8a:d6:5e:28:4f:0b:
                    13:dd:b6:ef:79:d5:57:58:3e:64:7a:27:5e:b6:f1:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:32:53:9F:03:27:66:66:04:C4:7B:79:A1:8E:F2:CA:76:94:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/207a10cb-c8b6-34ce-be19-e300e16ba781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.210.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2c:d4:67:fc:11:06:09:a9:11:64:91:fc:ba:86:d5:04:bb:
         75:65:9d:fc:2d:8c:da:9d:f6:32:8e:66:3f:66:e7:4d:81:63:
         92:ca:1f:fe:43:d7:19:a9:48:df:3f:af:cf:0e:36:59:75:5d:
         ae:d6:1b:a0:19:00:67:1c:b6:d1:c8:cf:33:ff:11:60:90:bf:
         9d:ed:75:75:c7:80:bd:05:1c:63:97:94:32:02:66:73:cb:3c:
         bd:34:a8:93:04:c8:46:91:ac:81:1a:6a:67:bf:fe:a0:9f:b7:
         76:c0:1c:60:40:62:68:fd:55:d2:70:d1:8a:09:64:1d:c9:ea:
         12:37:78:33:12:93:e3:fd:5f:22:20:3f:b0:24:15:2f:46:5f:
         f3:71:d9:a8:56:60:ff:a8:5c:12:57:06:b6:94:88:5d:32:e8:
         56:ce:da:3b:d3:c0:3d:f1:1e:11:b6:a9:4f:1c:b8:92:74:1d:
         93:0d:b2:1a:2e:d3:5f:e7:f4:fa:1d:fd:72:e1:07:3f:fe:84:
         20:7c:20:88:4d:e2:f9:48:3a:19:b0:4c:8d:86:e2:cb:4a:3d:
         a4:90:93:98:42:98:7d:a4:b6:68:56:bd:4a:21:99:02:a4:15:
         e7:ed:5b:3c:6a:79:db:a9:5f:75:c7:76:48:ca:02:1e:07:6f:
         03:81:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:05 2025 by rpki-client