Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/c21ec598-4eee-36b3-892b-96082647c51d.roa
File:                     c21ec598-4eee-36b3-892b-96082647c51d.roa (raw, json)
Hash identifier:          tugzvU4Bw2MaV/lYEji88/Zk2XKrg3giF60JC/iZDOM=
Subject key identifier:   1E:B7:AF:53:0D:41:12:62:E4:A0:EA:B4:D6:01:B7:FB:9D:92:52:D7
Certificate issuer:       /CN=0af55262-eca7-4517-9ccb-1a0296435eaa
Certificate serial:       010D0C9F432858498D29A34B9E3213E503831E80
Authority key identifier: BD:69:18:99:02:C4:51:38:94:2D:5F:E2:77:19:AA:02:2A:18:E3:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/c21ec598-4eee-36b3-892b-96082647c51d.roa
Signing time:             Thu 17 Apr 2025 02:26:42 +0000
ROA not before:           Thu 17 Apr 2025 02:26:42 +0000
ROA not after:            Wed 16 Jul 2025 02:26:42 +0000
asID:                     399700
IP address blocks:        66.97.168.0/24 maxlen: 24
                          162.33.184.0/22 maxlen: 24
                          185.212.5.0/24 maxlen: 24
                          2602:fc73::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8d:29:a3:4b:9e:32:13:e5:03:83:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af55262-eca7-4517-9ccb-1a0296435eaa
        Validity
            Not Before: Apr 17 02:26:42 2025 GMT
            Not After : Jul 16 02:26:42 2025 GMT
        Subject: CN=9148f458-04d2-45b4-bc1c-7f875435903c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:5e:f7:ac:fe:e7:ba:11:fb:04:85:85:f8:
                    05:3a:c1:34:9f:02:7d:83:37:62:93:92:fa:93:40:
                    ec:d0:56:3c:1f:35:ee:d8:bc:8c:2d:0f:ef:e6:8c:
                    57:3b:74:2e:4d:fa:65:f1:19:fa:38:71:f3:fd:eb:
                    43:a9:dd:da:97:33:bc:0f:d0:20:31:ac:ec:e3:5e:
                    ee:09:80:4d:be:60:ad:be:dc:44:5d:23:2c:c5:44:
                    84:de:a4:f2:29:93:80:1c:97:35:d1:5f:b9:51:17:
                    1b:3c:d8:fd:51:22:9d:a2:c7:33:ba:b2:4c:c7:4e:
                    63:92:f9:60:f3:ff:82:d4:b2:94:93:0f:6a:b0:92:
                    70:70:8c:b0:82:56:e6:28:c3:bb:e2:31:f4:bf:76:
                    50:64:81:27:5d:67:78:ca:91:fe:ed:d0:02:93:03:
                    8f:13:48:88:b4:02:9d:4e:3d:8b:e8:76:a6:a6:b1:
                    2a:59:44:61:f6:94:83:96:ad:8d:8a:f5:e4:b1:ff:
                    74:fa:40:c3:27:aa:6e:7a:2c:aa:56:c5:2e:1b:a3:
                    9f:b9:bd:2d:c1:db:f2:b7:4d:c5:7c:69:b6:93:66:
                    1f:d8:b9:c0:7b:bc:a5:e2:4f:1f:76:bb:df:5b:9b:
                    54:47:43:ce:b1:84:6f:df:d3:27:09:c0:f1:64:70:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B7:AF:53:0D:41:12:62:E4:A0:EA:B4:D6:01:B7:FB:9D:92:52:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/c21ec598-4eee-36b3-892b-96082647c51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.crl

            X509v3 Authority Key Identifier:
                keyid:BD:69:18:99:02:C4:51:38:94:2D:5F:E2:77:19:AA:02:2A:18:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.168.0/24
                  162.33.184.0/22
                  185.212.5.0/24
                IPv6:
                  2602:fc73::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:82:28:74:72:ad:f6:7e:e0:64:5a:56:94:0b:bf:96:e5:
         e2:28:5b:bc:6c:01:96:ee:2e:78:36:89:7f:7e:27:77:f8:8c:
         7a:1a:f3:f9:a1:24:96:45:bf:dc:60:94:2a:a7:05:0d:eb:f3:
         27:0e:dd:29:19:e4:6d:b5:4c:4b:8c:44:e3:80:e9:ac:0c:65:
         c2:fb:50:8a:66:e0:c1:e6:d7:50:d2:a3:25:d8:39:9e:59:61:
         52:25:e1:f7:9a:83:38:ca:67:56:62:cd:d2:d5:5f:7d:e2:01:
         6f:5b:44:af:42:a0:34:c6:cb:f9:49:19:20:56:25:ac:73:7b:
         5c:57:ad:e4:d0:18:fe:c1:51:03:17:15:32:ed:dc:9d:5e:50:
         1f:8e:f1:1a:58:e8:2a:a0:da:f2:60:b3:0e:63:90:d7:9e:bc:
         b2:fa:02:58:40:40:fb:65:7f:fd:c1:9e:61:77:b9:df:ca:28:
         1f:d8:ba:ff:45:b0:9c:e0:cd:6a:39:aa:03:f7:d2:65:5a:a4:
         97:86:76:69:11:e4:17:ef:f4:2b:6d:f3:42:4f:4a:26:d9:0a:
         9b:b7:d4:70:5d:3f:ed:d8:59:f3:bc:10:a3:1b:41:6a:47:5c:
         50:f6:b5:2a:ad:1d:be:c9:97:51:72:e6:07:23:89:b4:12:4f:
         50:ca:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:07 2025 by rpki-client