Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa
File:                     f2d4c297-8283-3225-9709-7307bf5ce1fb.roa (raw, json)
Hash identifier:          hrO9S4hTt3f+W8o50UdHij+ouwjE6H/ltTPai/5oejk=
Subject key identifier:   55:E1:57:F2:B5:C0:C1:2F:8C:B1:66:94:99:79:0E:7E:57:AB:D0:28
Certificate issuer:       /CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
Certificate serial:       010D0C9F43285849E22538311B33C7552954E6F6
Authority key identifier: C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16436
IP address blocks:        66.187.12.0/23 maxlen: 23
                          207.174.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:38:31:1b:33:c7:55:29:54:e6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=2139da8c-db45-4793-bc4b-ba45bf3336bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:b4:9c:96:e3:44:50:71:16:d1:07:ca:61:
                    c2:0f:7d:89:d0:a4:6e:a0:bb:03:ca:9f:94:89:2b:
                    b0:d7:62:df:5e:24:8d:49:94:ea:7b:6e:84:51:0f:
                    43:e5:99:d6:30:4e:5f:dd:32:63:32:35:3f:36:39:
                    fe:fa:b3:c4:a1:b0:a2:ac:b1:8b:c8:ad:2f:9b:f4:
                    25:fb:14:6d:4e:7b:39:cb:25:7c:09:c3:92:87:9d:
                    f8:e0:f2:7d:60:c9:87:85:81:16:ad:f9:ae:5d:43:
                    42:92:d4:1a:ab:a0:e1:80:fe:a6:42:9f:78:8f:6b:
                    d0:2f:d8:03:d0:57:34:81:93:34:56:b1:53:3f:c8:
                    7d:34:f8:61:cb:25:4c:98:b8:32:12:0c:d2:37:31:
                    b2:a1:aa:90:62:39:61:6c:9a:6b:8d:d8:0e:81:ac:
                    5e:d8:94:d1:da:2d:9d:df:73:06:ce:3d:d1:af:5b:
                    b9:0c:61:91:7c:9f:ea:14:69:b5:01:1b:74:bc:45:
                    3a:01:36:bb:24:75:01:c0:46:e3:4e:d3:21:7f:ac:
                    5f:f0:8c:df:0f:7d:fb:74:32:67:9c:d8:af:4a:fa:
                    22:3e:fd:65:d6:a1:19:39:a8:57:59:89:f0:75:9a:
                    40:91:45:f8:fe:88:fa:55:a5:15:b3:b1:66:f0:3d:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E1:57:F2:B5:C0:C1:2F:8C:B1:66:94:99:79:0E:7E:57:AB:D0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.12.0/23
                  207.174.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:d8:78:2e:3d:ca:25:4f:3f:29:1a:4f:4f:d3:91:70:7d:
         c8:75:30:30:c7:f7:e1:d2:9a:21:f0:b5:fd:2b:f0:3c:32:a0:
         b0:4d:25:d1:20:bd:49:fe:70:8e:ff:d9:28:de:4e:eb:ac:62:
         cc:c2:ab:f8:55:39:1b:ef:f3:14:d6:c5:78:57:35:bd:a3:76:
         1b:b9:cc:74:cc:d5:50:90:87:2e:b7:28:f4:40:fd:40:4f:7e:
         41:91:1f:2c:23:83:71:c6:24:e4:70:e4:0c:7f:04:71:39:6c:
         7a:70:a4:75:c4:f7:e3:c6:c6:ee:02:be:76:6e:4f:09:4b:3c:
         e5:6d:d1:a8:90:1e:94:98:1c:8b:fb:28:87:18:91:86:8c:87:
         d7:08:c8:fd:fb:98:91:5c:f2:f8:81:68:6e:70:7b:bb:75:44:
         09:f6:c3:d3:55:af:10:27:51:44:35:cc:64:37:ea:35:3b:ff:
         f2:40:d7:a9:13:af:ea:1f:50:92:68:91:6b:8e:e0:05:5c:bf:
         4f:2b:b2:90:69:51:2d:b3:43:f1:c5:3d:7a:aa:25:89:a4:db:
         ae:62:50:52:3d:a7:e5:f4:27:e1:28:43:1e:15:5a:40:cc:ec:
         c5:93:b0:a3:82:2a:65:6c:c5:49:cc:b0:af:f0:d9:8d:9d:9d:
         87:6c:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:03:19 2025 by rpki-client