Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/573e55ea-c7b7-350f-b662-649ca448d46e.roa
File:                     573e55ea-c7b7-350f-b662-649ca448d46e.roa (raw, json)
Hash identifier:          IzauTMIVfZlbkd+9qRbVgl46aVXgHk6zXiXKXFOWHes=
Subject key identifier:   ED:92:01:40:19:44:EE:E7:FF:D2:8B:21:D2:49:C5:2E:A4:25:F6:09
Certificate issuer:       /CN=fcbea799-ceab-4c67-b016-1b60d5b80826
Certificate serial:       010D0C9F43285849C4D4CB59B313A3CB3201D200
Authority key identifier: EC:56:E9:71:0D:61:88:FB:4A:FF:69:78:B4:16:0B:E4:CC:2C:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/573e55ea-c7b7-350f-b662-649ca448d46e.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     400865
IP address blocks:        66.132.140.0/24 maxlen: 24
                          2602:fa5e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/fcbea799-ceab-4c67-b016-1b60d5b80826.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/fcbea799-ceab-4c67-b016-1b60d5b80826.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cb:59:b3:13:a3:cb:32:01:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbea799-ceab-4c67-b016-1b60d5b80826
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=dfb68773-affb-4157-a862-c9e53887dcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:bb:c7:71:12:e2:73:81:46:1b:9e:7e:40:
                    f8:c6:f6:b7:ac:ee:68:75:0b:f9:9e:1d:bf:43:fc:
                    46:63:23:9f:8f:97:b8:d2:57:8f:a8:47:e0:d2:ef:
                    89:fd:a0:34:5e:d7:41:b0:03:74:d6:b7:2a:27:35:
                    2c:fd:52:5f:40:86:92:b3:cd:df:50:cf:8e:c4:a0:
                    fe:24:35:01:77:ee:e9:a7:b1:e4:93:98:fd:cb:f2:
                    f9:1e:90:3d:16:50:f5:af:46:f0:37:40:3a:e2:f4:
                    f0:9c:25:fb:22:7f:09:76:cc:5a:a9:ec:0c:47:c5:
                    07:3f:c8:f8:31:98:5d:c3:79:88:6d:88:bc:fd:16:
                    ed:56:8d:4f:24:83:27:95:6e:fc:ef:a7:64:9d:64:
                    bf:64:1e:9f:51:cb:b8:2e:37:bc:0c:22:61:20:55:
                    8c:f5:d7:a9:e2:1b:8a:c2:b2:ce:f8:62:44:bd:f7:
                    d8:5b:e1:24:83:35:de:58:e4:49:de:98:9c:93:00:
                    ab:ad:82:a0:87:10:47:51:bf:7c:64:d6:35:06:e2:
                    74:41:cc:3e:24:47:0d:2d:96:fa:44:2f:52:89:25:
                    c7:5b:df:52:7f:e4:3b:17:c4:ed:35:1d:29:ed:59:
                    b4:e8:8c:2c:45:26:71:03:de:85:16:05:26:04:2a:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:01:40:19:44:EE:E7:FF:D2:8B:21:D2:49:C5:2E:A4:25:F6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/573e55ea-c7b7-350f-b662-649ca448d46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826/fcbea799-ceab-4c67-b016-1b60d5b80826.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:E9:71:0D:61:88:FB:4A:FF:69:78:B4:16:0B:E4:CC:2C:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcbea799-ceab-4c67-b016-1b60d5b80826.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.140.0/24
                IPv6:
                  2602:fa5e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:87:23:10:94:68:84:7b:88:60:fe:5b:19:15:26:68:b1:
         d2:d3:80:a0:5a:de:b9:2d:b8:fa:82:c4:e4:ed:78:59:72:94:
         04:1f:5b:f6:92:63:33:6b:1d:2a:60:1a:7f:a9:29:c1:43:1b:
         c5:53:79:e5:51:20:0f:a0:f6:c4:3b:bc:14:7d:8f:55:e4:8c:
         6c:54:a2:2e:97:f4:8b:8f:66:1b:68:c1:94:ef:42:d3:a4:ca:
         a4:70:ac:d3:13:10:ab:c8:e5:8b:4c:71:f8:19:5b:bd:33:0f:
         b1:b2:38:57:01:eb:6a:dc:23:e6:d9:29:8f:f0:1e:86:0b:89:
         a0:64:eb:89:92:f7:0f:98:52:29:c9:1c:83:fe:4e:4d:b3:20:
         1a:9c:77:32:7e:4f:7e:99:19:b5:10:e8:4a:a0:02:f3:69:3c:
         8a:af:f0:7e:01:0b:2d:a9:01:fd:23:a3:83:5f:2b:6b:57:85:
         e5:1c:6b:a3:12:29:7d:98:0b:b4:04:89:62:a4:f6:1f:1f:9e:
         1f:9a:1a:c4:84:d2:45:95:ce:9a:c5:51:68:4a:06:3e:48:dd:
         10:a5:d6:c2:8f:6b:69:15:2b:cf:72:a6:45:75:49:17:5f:bc:
         30:be:04:db:5f:05:2a:58:73:e8:47:70:0c:70:5a:ad:79:ee:
         94:c9:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:49 2025 by rpki-client