Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a69757bb-1c17-31a5-ac06-05082dfd1df6.roa
File:                     a69757bb-1c17-31a5-ac06-05082dfd1df6.roa (raw, json)
Hash identifier:          N0G0gVmR9YDbBWAVZ+aGoqKO967XZzcCQILPUyp/ePk=
Subject key identifier:   D9:1F:31:DC:C8:BA:08:9E:9B:1B:36:FC:2D:F1:9F:65:90:94:71:D6
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD9A5B2ED0C54BC05EC00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a69757bb-1c17-31a5-ac06-05082dfd1df6.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        66.46.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d9:a5:b2:ed:0c:54:bc:05:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=a03134ab-3daf-485c-9a14-d85685b11ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:1d:24:92:a7:ca:90:10:32:c7:4d:82:60:
                    03:54:10:f8:f7:ac:2c:40:e1:84:30:18:50:0d:9b:
                    f2:03:05:b0:18:0a:f3:7e:45:d9:db:41:29:e6:83:
                    53:6b:ae:de:56:53:f3:d1:b9:db:71:ba:a2:67:6a:
                    d0:aa:59:62:87:4b:ad:f0:86:ba:63:04:87:1e:ed:
                    8c:91:d2:0d:03:e6:fe:47:40:4d:d6:cb:5d:18:7a:
                    df:f5:05:b2:7c:c4:4a:de:67:65:c4:f5:00:71:7e:
                    a7:28:43:6d:09:68:63:7d:85:9f:43:c4:65:88:f8:
                    0d:82:f2:48:a3:6c:7c:b3:0c:e7:4a:73:93:20:0e:
                    97:fc:aa:b7:95:10:89:e4:aa:8f:6b:74:91:09:64:
                    bd:bc:b4:27:00:9a:5c:1f:be:41:7f:23:73:29:90:
                    a6:eb:b0:93:3b:ab:6c:cc:96:1c:a4:df:51:9a:2f:
                    69:8d:92:29:ed:18:7c:33:0d:09:ab:79:d3:2a:fa:
                    34:88:3c:98:4e:74:d4:71:6c:41:1b:c5:17:ad:af:
                    92:24:a5:da:23:13:35:53:a0:22:5f:dc:7c:f3:1d:
                    da:64:a4:d9:67:a3:4b:00:eb:d9:63:70:89:e3:1e:
                    94:84:6d:81:7e:62:2f:90:5b:4b:d6:04:f7:51:00:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1F:31:DC:C8:BA:08:9E:9B:1B:36:FC:2D:F1:9F:65:90:94:71:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a69757bb-1c17-31a5-ac06-05082dfd1df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9a:e5:f5:75:dd:06:11:98:f7:2f:ae:b4:25:da:b6:ac:de:
         36:08:4f:e0:c8:1d:bd:f0:30:39:bf:81:73:57:cc:dd:14:91:
         ed:70:bf:c9:a4:4e:72:8b:6a:57:56:9b:53:cf:0e:f0:81:0b:
         cd:72:89:fd:2b:57:b5:7b:46:f8:a3:fa:36:a5:14:8a:d6:73:
         7c:79:5e:36:5f:14:f5:21:93:ea:dc:86:71:6a:f2:cb:30:f3:
         9c:3c:02:cf:eb:e0:b4:82:23:b0:ac:ac:f7:04:31:72:91:91:
         a7:24:29:a8:8b:d6:45:d8:a9:00:3b:43:40:05:f3:12:65:44:
         20:0a:3b:d4:4e:5a:a8:7e:89:61:4a:20:ba:11:14:da:37:bb:
         c3:ad:71:6f:26:34:8a:89:67:48:9d:23:89:ea:8a:bc:88:2d:
         2e:de:1b:a7:bb:82:44:4f:df:80:ff:11:b7:13:4d:6b:a8:13:
         61:26:7f:df:2f:d8:7c:f3:1d:78:9b:c5:7e:0b:d6:c6:5f:bd:
         4b:95:7a:3e:80:3f:fa:24:ae:80:41:14:54:0d:c1:8a:c9:bb:
         46:e4:1b:bb:aa:6b:e6:df:0e:39:05:a6:3f:99:a9:dd:9b:f8:
         0b:d6:c8:3e:93:64:5a:82:5b:c2:37:86:29:87:31:2b:0d:bb:
         de:b7:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:32 2025 by rpki-client