Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa
File:                     e16baff4-7918-391a-b882-0b5aec46e403.roa (raw, json)
Hash identifier:          cg3r2hJ29mzWKg6nFYek9D6IGN7zuAjTqiy2SU5mIG4=
Subject key identifier:   5C:B9:BA:A3:E4:BD:B5:7D:7B:C9:C9:5D:C6:0C:8A:EF:03:3D:07:B4
Certificate issuer:       /CN=f36f7462-c7a9-4aa8-af42-792dae19380f
Certificate serial:       010D0C9F43285849D42FADC6E4EB936AD617BE00
Authority key identifier: 3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     394564
IP address blocks:        66.112.201.0/24 maxlen: 24
                          66.112.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ad:c6:e4:eb:93:6a:d6:17:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f7462-c7a9-4aa8-af42-792dae19380f
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=414da246-ffac-4aec-a95d-7a7f88bc5f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:2c:0c:cf:c5:07:04:27:9c:17:fc:85:11:
                    ad:ee:9a:25:99:6d:28:54:4d:a0:a5:06:c0:c4:e0:
                    16:c7:1a:71:7b:f8:24:73:c5:8c:34:15:33:ad:af:
                    43:64:b4:11:bf:cc:b1:94:05:53:25:92:2a:d5:b1:
                    b2:38:69:9b:97:1e:43:eb:fc:bc:bf:66:d3:10:04:
                    51:19:20:c0:47:10:86:58:20:71:9f:9d:e1:1e:86:
                    5d:88:c0:29:bb:ef:e9:fc:a8:5c:e7:e6:b6:08:5c:
                    6c:5b:74:81:d2:ec:b2:39:4a:6f:aa:01:33:60:ae:
                    43:f0:10:fc:ee:bb:92:20:12:90:7a:43:07:89:69:
                    b7:71:c3:0e:8f:b1:49:a3:64:47:50:6b:77:d3:21:
                    0d:49:4c:bb:ac:0d:ab:a6:82:4c:49:17:be:f2:65:
                    d9:21:cf:96:9a:a1:31:e0:80:58:06:a2:97:bd:d9:
                    2c:10:3e:f3:bb:cf:ee:7d:14:08:90:7a:4e:4d:8b:
                    ba:d0:f3:57:59:37:52:19:9e:5b:8c:da:00:e8:d8:
                    86:63:7e:55:fb:fc:9a:56:90:ed:c8:2e:82:76:1d:
                    5a:c8:d4:cf:5c:8d:75:ee:08:1a:02:18:f5:10:bd:
                    49:6f:74:45:aa:24:cc:1a:6a:c3:e5:07:78:80:fd:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B9:BA:A3:E4:BD:B5:7D:7B:C9:C9:5D:C6:0C:8A:EF:03:3D:07:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.201.0-66.112.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:2e:78:7f:0f:ff:a2:68:57:ab:38:76:29:c5:ec:75:e1:
         d0:fe:21:5c:66:9b:50:bc:e4:fc:a1:85:df:b6:22:27:ad:42:
         c9:31:cc:90:a3:8a:fc:1a:1c:43:62:f4:07:b7:ec:fc:da:d3:
         b4:67:e6:e5:ab:ae:1b:bc:18:5e:e4:51:7b:41:70:15:ea:d7:
         3e:3e:29:ac:ab:95:b7:77:08:52:b0:9d:4d:7c:38:92:6c:8f:
         c5:7b:ae:11:ef:ff:e0:a3:81:8a:93:db:cc:1a:b6:a6:6d:ed:
         b0:fd:00:89:ff:41:99:bc:84:a5:c3:db:7a:e3:e7:1e:65:f2:
         54:0d:e3:c8:c1:17:77:58:c4:1d:51:be:ef:fb:fc:59:c1:08:
         a2:d6:bc:a9:3e:ba:a6:b9:9a:96:24:02:7f:5c:61:4d:b6:7c:
         77:3f:b6:ad:60:15:9f:86:4c:7c:79:3b:9e:50:d3:57:ee:73:
         9d:60:1c:ba:03:62:07:dc:42:e2:e9:60:b8:2c:7f:a6:18:66:
         79:2f:75:d4:f1:42:a5:47:11:31:95:52:8f:01:16:15:23:25:
         2c:97:90:2d:cf:c3:57:5a:31:ec:74:57:63:6f:f4:f8:02:cb:
         e3:7a:e5:ad:b2:d1:5c:0c:0a:6b:e8:8f:29:ee:cc:60:00:41:
         d8:93:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:16:36 2025 by rpki-client