Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa
File:                     0272f9e1-576e-3684-8d67-64211f32881e.roa (raw, json)
Hash identifier:          4DlmA3DM5KjjimFClYQz7a+cuTaTeReyB/4V6KXig3E=
Subject key identifier:   A4:E9:BD:69:4C:E7:A2:C2:58:15:B1:1C:0A:C1:B9:42:8E:2D:B2:68
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584981D4609CFF73055481E86680
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     398324
IP address blocks:        66.132.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:60:9c:ff:73:05:54:81:e8:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=f60e6c16-a3d1-407b-a9be-97a6c9cee5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:a3:c7:c0:f6:cb:5d:01:23:21:85:ef:32:
                    9a:f6:15:0a:9f:c2:c8:30:2a:08:4e:24:09:fd:a2:
                    b2:28:73:72:11:af:1f:2c:9e:bb:fd:78:09:56:9b:
                    18:57:1e:74:d0:5b:16:11:21:86:51:af:ca:ff:0e:
                    78:cb:2b:7d:b4:05:1f:af:85:96:5c:8b:ce:62:c1:
                    6f:5c:c5:59:8a:db:0e:9b:ea:70:35:d8:92:02:bd:
                    a2:22:49:1c:60:d8:90:25:03:6c:0e:34:68:d2:fb:
                    5d:ac:15:a3:69:0e:c4:39:c5:84:ad:58:56:3a:3f:
                    5a:77:75:77:3e:50:11:c0:c6:5d:93:91:f4:42:2a:
                    45:99:95:54:f7:3a:af:d5:68:18:ca:4c:58:54:4f:
                    71:9c:ed:a8:a6:58:89:c8:60:b5:72:fc:4e:68:0f:
                    3b:00:8c:8a:ea:d9:e9:7b:8d:f8:4c:32:7d:b4:fd:
                    8a:94:1a:01:35:9c:b9:b3:3f:80:2d:0f:a6:2a:32:
                    91:f5:47:e1:69:f2:a4:7a:ac:92:99:91:ef:82:df:
                    ef:79:ee:e4:bb:b0:da:d7:21:3e:8d:a1:87:0a:8a:
                    aa:a4:2f:15:52:6b:5f:ae:79:81:6f:bc:f9:f8:4c:
                    c8:9e:27:5d:c7:30:b2:0a:39:1d:43:f5:33:f7:6d:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:BD:69:4C:E7:A2:C2:58:15:B1:1C:0A:C1:B9:42:8E:2D:B2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:57:96:2e:e3:46:a8:e7:58:62:a8:73:d9:79:3e:e7:a3:eb:
         4f:1b:e8:bb:1e:37:74:7b:05:14:67:89:64:eb:bf:18:56:82:
         d4:68:f9:d7:97:72:77:1e:47:7e:88:9b:32:9a:53:41:c7:7e:
         90:21:5d:c1:12:be:1e:06:d5:d1:3d:1a:6c:57:bd:aa:69:13:
         30:8d:55:46:2e:d3:49:71:59:5e:9e:f7:24:07:c2:0d:12:d6:
         d3:ce:b7:d0:0e:45:b1:1f:67:a4:00:da:bf:90:77:57:1d:0f:
         a9:71:55:68:6e:d0:44:79:c0:f7:6b:20:0d:b9:07:2a:65:c2:
         aa:c9:c6:e7:e3:aa:82:73:bf:6b:36:a3:fb:2a:ea:34:ed:12:
         72:c4:45:fb:45:4b:47:c8:5b:9d:6f:eb:5e:e8:87:16:2f:c2:
         c7:07:88:a4:c9:36:3f:1a:4a:30:a2:69:ee:91:ff:01:4e:02:
         3d:9c:d5:4c:54:6b:c5:dc:c2:6f:97:1a:cd:d3:d9:73:89:8b:
         3b:ef:c2:88:6a:1a:79:77:bd:63:09:e6:51:cc:45:08:38:e6:
         87:70:93:b1:bb:31:a0:18:2b:9c:25:27:c6:22:7a:ee:ea:06:
         e2:6f:49:5c:47:87:a2:14:bd:e4:58:12:02:f8:83:b0:00:f6:
         8a:57:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:03:18 2025 by rpki-client