Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/e2ad97bb-fe9b-353b-852f-50488213688c.roa
File:                     e2ad97bb-fe9b-353b-852f-50488213688c.roa (raw, json)
Hash identifier:          Ba59f9XBC62blKPKAcvMb0h+Fi6vk/8K+gV/Qa0KjxU=
Subject key identifier:   CC:C7:44:C3:BA:29:C7:DE:8D:F0:C2:4F:FA:3B:AB:B8:69:EF:12:FB
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F43285849D85F9A1A4A86B9F2B45E6E40
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/e2ad97bb-fe9b-353b-852f-50488213688c.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     396121
IP address blocks:        205.166.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9a:1a:4a:86:b9:f2:b4:5e:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=af06095f-099c-44f3-8e97-1e9a3858a57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:cb:bd:7c:dc:e1:d4:df:30:7a:54:d2:d0:
                    e3:11:51:2c:c2:f8:e0:91:88:64:80:5a:7e:b3:9b:
                    28:9c:74:74:23:92:f6:5e:50:ad:6e:de:36:66:69:
                    a4:2f:cd:05:81:e2:98:4e:11:26:d6:70:3b:4c:f5:
                    71:c8:a2:b9:93:e3:93:12:61:14:7e:b1:38:70:58:
                    53:f5:73:dc:78:6e:a6:7f:5c:5b:24:e6:b3:fe:3a:
                    91:b6:67:95:55:af:dc:ef:49:a3:9a:e3:36:57:7e:
                    02:48:54:24:fd:43:e3:d2:95:c2:07:23:d5:31:7a:
                    b2:ef:cb:ea:a9:77:4e:f2:e7:8f:c2:24:44:84:16:
                    00:73:b9:fe:b6:de:7e:0c:d0:bc:ff:88:bf:fa:c4:
                    45:a4:27:20:46:a0:a4:4e:16:2a:2f:c2:2d:22:fd:
                    22:82:81:cf:01:38:62:0e:b5:81:07:3f:bc:bf:8c:
                    c9:c2:37:cd:62:7d:3b:31:3c:6a:40:5c:c0:ab:d1:
                    92:d2:5b:30:72:ae:9c:6f:e1:0a:3a:bf:87:ab:01:
                    d0:73:62:b9:ab:df:d3:d3:ea:89:f5:73:84:59:2c:
                    c4:ab:39:eb:86:78:6e:f5:3d:59:0e:aa:fb:63:ae:
                    25:f5:a0:e0:67:b0:91:ec:59:94:25:cc:de:0f:84:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:44:C3:BA:29:C7:DE:8D:F0:C2:4F:FA:3B:AB:B8:69:EF:12:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/e2ad97bb-fe9b-353b-852f-50488213688c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:b8:a3:3a:de:d6:90:f0:14:53:ff:d8:7f:56:4c:3b:c5:
         54:1d:62:a1:52:f9:1b:46:a4:f7:b7:ee:f7:b4:73:51:7f:41:
         6f:9c:ea:e7:92:1c:02:af:1a:34:e9:fc:a6:4f:17:43:55:9b:
         3e:27:39:08:4f:41:b8:ec:fd:06:fc:03:7c:f8:13:d7:d4:2c:
         ef:fc:46:56:3f:5a:5d:85:f5:cb:25:64:78:34:57:78:32:23:
         6b:4a:6f:ed:55:65:e0:66:42:34:47:1c:45:fe:8c:23:79:15:
         f0:78:31:fb:e1:ce:ff:d3:13:01:56:8b:5d:77:23:60:fc:fe:
         0b:1e:46:d0:11:95:bd:6f:67:6c:ed:cc:4e:fe:25:20:58:5b:
         c9:ec:d8:dd:d4:9c:5b:30:96:07:1a:65:bd:99:6a:24:49:14:
         fe:19:b4:f9:2e:17:85:ba:15:b2:59:b1:99:c2:d7:86:53:dd:
         98:4a:e9:8e:41:1c:39:6b:17:3c:44:17:cb:de:e7:44:a1:1b:
         74:2b:81:90:76:5e:fa:7c:7d:52:d0:9b:2c:c9:f6:9b:3e:31:
         a6:65:00:63:d6:72:d8:96:12:0e:d2:e4:c2:05:28:e6:cd:b3:
         7b:5f:ce:bf:c3:ee:2b:00:b6:53:ac:3e:ec:c9:ff:7b:1d:dc:
         34:2b:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:00:24 2025 by rpki-client