Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65db882f-f2c5-3703-af87-e6d758b69350.roa
File:                     65db882f-f2c5-3703-af87-e6d758b69350.roa (raw, json)
Hash identifier:          ArJVZRbEAEfZ7nnFFL2VcJHUsCFeSPKBlC7JZXORzG0=
Subject key identifier:   07:5D:D7:E9:3B:62:F0:4B:F5:A2:60:C1:2B:4E:E2:3B:C1:9F:60:B6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A345F2A5C6AD57FB0612280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65db882f-f2c5-3703-af87-e6d758b69350.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3360
IP address blocks:        66.54.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5f:2a:5c:6a:d5:7f:b0:61:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=948fc40b-a14d-45ff-a832-563e2da968b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6d:1a:8f:c9:c4:33:a7:4c:66:1b:e5:07:bf:
                    cb:b8:7d:97:ad:b4:f7:bd:c6:1f:46:19:36:1d:03:
                    bd:3e:7a:d4:69:77:85:55:06:6c:8e:05:90:32:67:
                    d6:35:0a:da:7d:5e:e6:7f:4f:30:c9:b6:de:5d:6f:
                    77:e7:21:e6:cc:b5:67:04:33:39:2e:79:3c:3a:39:
                    3a:d9:fb:4b:4e:11:1c:26:2d:b0:bf:04:28:20:6d:
                    ba:fd:e5:5e:ad:91:73:f9:bb:d2:30:4c:51:cc:8b:
                    b3:5b:85:b5:df:6b:84:a8:69:f7:f0:7d:b6:90:c6:
                    38:f0:f9:b0:da:7e:1e:ae:c1:60:e2:e7:f7:db:99:
                    bc:93:4c:9e:9e:0d:dc:a3:8a:5d:24:b7:a6:e9:80:
                    55:79:1d:ad:94:b3:d6:5d:96:f6:f2:1f:37:51:81:
                    a6:7a:19:0b:44:62:61:91:a5:fa:05:50:6a:bd:18:
                    e3:0f:6d:4d:3a:1f:fe:16:f8:34:31:14:54:90:06:
                    d8:d1:b9:22:4b:30:1c:7d:8b:a6:7f:9a:71:72:a2:
                    2f:ca:7d:14:d5:3d:c7:6c:07:eb:d7:e6:50:bc:b9:
                    bd:88:3a:79:5d:d0:f1:6c:49:d4:da:5e:27:db:0a:
                    f3:e2:a8:ef:62:56:6b:31:c2:be:9e:e8:0f:9f:35:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:D7:E9:3B:62:F0:4B:F5:A2:60:C1:2B:4E:E2:3B:C1:9F:60:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/65db882f-f2c5-3703-af87-e6d758b69350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:50:4e:ed:6a:6f:ff:ee:74:fa:9c:ff:04:0c:23:c1:b4:e4:
         50:9c:01:fb:3f:ab:3e:bd:48:90:65:cc:3c:5c:c9:73:fb:2e:
         3d:e7:0b:96:fe:03:e9:d3:1e:60:0d:a0:ae:f5:ac:00:c5:71:
         43:62:bd:78:81:90:67:a1:14:20:5c:ee:cb:6e:24:83:8b:41:
         ea:09:cb:50:23:8e:e6:02:4d:aa:3d:db:05:7b:1f:b2:50:05:
         de:46:05:27:77:d8:fb:4e:b7:78:c7:a5:16:9a:cd:f5:e9:d6:
         e5:50:5a:be:0f:df:5f:1c:7b:df:d1:1d:60:54:e4:b0:29:25:
         68:b7:b3:27:3e:a9:ff:40:fe:a0:e4:c3:e9:6c:94:02:ce:a9:
         54:34:fb:09:3f:09:90:d3:db:d9:cb:0f:52:1f:4f:b2:29:f9:
         b9:db:08:24:fb:2c:62:c3:80:7e:20:cd:4e:2f:c2:79:c5:ff:
         72:ff:27:e1:f9:40:a0:26:24:93:ae:41:c0:42:b3:86:ed:83:
         13:ed:26:00:35:8f:23:ca:af:87:d4:66:6b:a5:bc:c0:c5:be:
         bb:f5:91:9a:89:9b:aa:a0:ea:a9:41:9e:4c:1a:22:64:4f:e1:
         bb:a5:07:e1:70:3d:d3:be:d3:bb:43:72:e7:3b:ec:9b:c0:39:
         4c:1a:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:59:52 2025 by rpki-client