Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa
File:                     0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa (raw, json)
Hash identifier:          RV0c2QGCB38DGqMQCE1tazewcRqVFrr5aJEJH9e1HSQ=
Subject key identifier:   08:D5:06:07:AF:A7:C4:5A:3F:BA:58:4E:7E:3D:47:5E:93:71:3A:0D
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F4328584A1895485AE1A5AA377C28DF00
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     8015
IP address blocks:        66.179.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:48:5a:e1:a5:aa:37:7c:28:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=0687c562-0757-44af-8e4d-cb909913c8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:32:4a:6e:2d:e6:94:7f:54:f3:d7:19:91:
                    58:9b:3a:2c:ba:7a:fe:db:72:55:68:cd:13:c1:19:
                    4b:a8:cc:1c:b5:70:78:6c:c1:17:7b:7a:2f:47:7a:
                    9f:a3:8f:62:a0:43:ee:6e:6d:25:15:ac:1a:18:3b:
                    17:c2:6d:d6:5a:49:14:29:5d:49:3a:4f:0f:de:c7:
                    11:df:bb:42:d2:93:3e:17:53:8a:7e:4e:fc:42:e5:
                    a1:46:a3:a9:4f:82:17:cd:e3:d9:f7:5a:97:a2:cc:
                    3f:f9:20:2b:99:b6:29:41:60:6c:83:d2:75:de:00:
                    a0:df:54:8f:4e:d6:8f:bc:b9:68:30:b6:79:4e:b1:
                    83:4c:bc:44:df:5f:19:1b:8e:5c:39:09:52:67:a8:
                    1f:d4:28:58:fd:a2:61:cd:c7:4a:19:21:a9:7c:ee:
                    1d:46:b0:85:9b:64:44:2b:e3:a7:82:04:7d:24:07:
                    d7:bb:8a:67:d0:4c:9d:9f:97:e6:1b:9a:e2:85:f4:
                    17:63:c4:69:61:20:fd:16:ed:d5:da:da:e5:37:d5:
                    62:fc:14:8c:60:4d:cf:d9:35:82:3d:ad:07:d8:82:
                    d6:19:e9:08:81:23:b3:93:d2:e7:30:2f:68:86:fa:
                    11:ac:50:9a:3a:a6:3f:5b:45:b0:05:bd:4f:d9:d8:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D5:06:07:AF:A7:C4:5A:3F:BA:58:4E:7E:3D:47:5E:93:71:3A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:0d:26:5e:24:6f:30:a0:17:38:70:e1:af:7a:b0:f8:31:
         e9:80:70:c9:72:e2:58:20:f7:63:d9:cd:7e:c2:3a:a3:c5:e6:
         c0:82:ac:07:e6:a9:e0:00:20:44:2e:66:06:81:9d:26:52:bb:
         88:92:bf:83:ff:3c:03:31:98:3b:69:58:13:0c:7d:7e:2f:ce:
         22:31:e2:ed:54:39:43:92:4f:e4:50:aa:c4:16:f7:9a:a9:eb:
         6b:9b:b8:55:9c:1b:04:ce:74:da:47:39:06:fe:05:f1:8c:2c:
         7c:e8:d2:68:a9:29:19:e6:88:87:70:9f:30:44:23:3f:5a:44:
         fd:35:0c:76:85:10:c0:d6:7d:a2:d8:fd:ec:bc:b1:d4:59:93:
         d4:d0:d5:90:8d:23:34:e1:07:1b:ba:30:bf:f0:0d:fa:9e:8b:
         41:fa:d1:fe:88:ce:8e:f5:e5:ad:90:e5:74:c0:9c:b0:6a:ed:
         b4:d8:9d:96:65:e1:22:a9:ab:47:2a:75:03:79:61:31:38:d5:
         9e:c3:19:f4:be:8e:ba:6f:f4:cb:a4:8f:25:4a:c6:42:8f:f6:
         6a:f3:75:fe:99:3f:24:50:47:d4:53:a3:82:71:15:32:aa:35:
         73:f3:b2:17:d4:0a:94:b9:45:21:6d:17:52:fc:fa:ae:fd:01:
         e2:e9:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:57:41 2025 by rpki-client