Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa
File:                     c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa (raw, json)
Hash identifier:          bY7hFfVhZyGVp66fyAFNrUQeW3p1XZeRrWKAm/yeEJU=
Subject key identifier:   08:52:1A:7C:9A:B6:5F:D0:E9:64:1A:08:20:DF:7E:E8:FE:6C:36:DE
Certificate issuer:       /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
Certificate serial:       010D0C9F43285849A8E9E3AFB03B486AA1091280
Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     36221
IP address blocks:        66.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:e3:af:b0:3b:48:6a:a1:09:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=8cbe5474-66c3-402e-bdd4-ee782301425a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:0c:6a:b6:ae:ee:8d:db:95:3b:45:e2:03:
                    53:19:6c:34:b4:65:26:88:68:e5:bf:d2:0c:06:29:
                    36:0a:31:7d:fc:4e:80:30:3c:ba:fa:93:a8:87:45:
                    8a:bf:e0:4d:0f:d2:56:2d:b3:25:65:6b:f9:ae:56:
                    7d:76:a9:78:d8:eb:01:0c:84:b2:9a:24:0c:76:53:
                    ae:68:a6:71:49:e5:c6:ff:da:49:b5:67:92:50:a9:
                    29:9e:bc:c2:72:4b:41:8b:66:92:85:6b:2f:36:90:
                    80:6e:cc:bc:a8:41:e2:e0:54:26:84:fa:38:90:b9:
                    b1:de:d1:12:a9:43:81:41:35:0a:df:43:cc:a3:fc:
                    3b:4c:54:e0:a5:44:51:26:19:3d:cf:60:f9:33:3b:
                    5e:39:a2:27:4f:62:16:c7:6c:c6:1a:7d:f5:17:30:
                    54:41:aa:0f:13:7b:30:4d:6f:7d:52:66:f9:d1:33:
                    94:0b:ca:43:37:eb:59:40:a4:9b:e4:37:40:f4:81:
                    c0:7f:36:0e:96:ed:41:7e:8d:41:32:4e:89:64:dd:
                    b6:35:ed:2a:1c:32:79:9e:01:80:a1:18:12:32:d4:
                    94:83:f3:46:fa:84:a5:5b:dd:18:cf:2f:60:31:35:
                    68:c4:06:05:d1:1e:c4:50:7c:9e:30:d8:c5:2c:db:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:1A:7C:9A:B6:5F:D0:E9:64:1A:08:20:DF:7E:E8:FE:6C:36:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:75:f3:b5:76:88:50:13:bd:b3:4b:be:de:04:97:24:ac:
         c5:92:ef:08:49:77:5d:67:53:5e:a1:63:39:55:5a:84:0e:0b:
         54:16:67:2c:4b:5b:0f:a5:de:7e:2c:58:ab:ca:fe:09:4f:ab:
         62:e2:ba:2e:bb:9e:77:e2:a3:a7:41:87:65:02:b8:68:6a:7d:
         f5:aa:51:1d:a0:58:4a:73:02:4f:a7:f7:93:29:bd:ce:d1:59:
         a8:0f:8b:b8:d9:7c:62:ab:04:3c:05:90:18:21:92:28:7e:6e:
         79:54:21:b8:e0:ab:d6:bb:e8:87:ae:23:91:05:33:66:34:d7:
         10:84:e8:d8:5f:0a:e5:0d:a5:ba:ce:96:a9:99:0c:41:29:a6:
         05:4c:a4:5f:dc:ff:97:9e:c0:85:8d:a2:f6:2c:9a:34:97:13:
         77:65:68:e4:99:f6:aa:d3:59:e2:48:32:51:0f:a9:cb:56:58:
         e0:c9:7e:8f:5f:13:81:3e:a4:46:66:88:6d:b8:69:35:1a:7a:
         13:d4:15:8c:30:22:f6:0c:af:12:42:7b:c7:a1:46:86:7a:f2:
         c3:ec:04:3e:a6:a3:4a:65:fc:67:66:9d:14:ef:57:ed:c8:6a:
         5c:f8:fa:06:c7:b4:43:bb:6c:1d:1d:52:e3:0c:19:6b:a7:92:
         ad:a6:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:50 2025 by rpki-client