Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
File:                     5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json)
Hash identifier:          ePisr4F2Rnj0d1q9VmsnEFfsQV+d+YbbQ95VuMohElU=
Subject key identifier:   15:10:AA:47:CF:DE:21:A4:E0:77:82:A3:1F:44:11:71:A1:34:0C:52
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584A295561BBAFF8E74DD2DFF830
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     27768
IP address blocks:        66.249.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:61:bb:af:f8:e7:4d:d2:df:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=d9451f52-feeb-4f52-9482-2189b306f7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:8e:de:36:ac:3b:24:04:5e:7d:c8:f5:48:
                    dd:9a:da:d6:b7:a7:e4:6e:f6:ed:e0:2c:5a:45:ae:
                    21:0f:2d:df:3a:6b:d9:67:64:23:f5:fb:a8:b4:c2:
                    40:8a:0f:33:7e:01:ef:38:57:80:56:24:c8:db:47:
                    0a:8d:31:01:93:3d:fa:f1:cd:94:3b:a3:f8:6e:dd:
                    84:3f:6e:c1:40:99:d9:0e:25:c9:08:40:d2:53:f4:
                    6d:f3:12:ee:87:fb:17:40:7a:24:8c:d8:9a:62:e2:
                    33:a5:d1:b5:fa:05:5f:ff:0b:f0:1f:4c:fa:b9:ed:
                    45:db:26:20:b9:e0:73:b2:53:6a:4a:68:6b:cd:f2:
                    e5:8d:8b:7c:d1:49:f3:3a:79:f3:6d:42:b3:3f:6f:
                    a9:9c:6f:94:ac:10:0c:25:69:fa:5c:24:da:12:e8:
                    cb:6a:28:35:8b:f1:9c:69:4b:86:00:db:b1:89:01:
                    16:24:f9:bd:59:16:47:bc:e4:d4:25:30:7f:e2:ea:
                    2c:4c:2d:51:f0:be:1a:24:1f:02:36:24:ed:89:8d:
                    85:4f:92:d1:75:78:84:3a:ba:d9:21:19:b3:62:02:
                    6b:37:3d:9c:c2:2b:c8:8e:1f:a4:f8:83:fe:f1:7a:
                    24:9d:7a:f0:cc:09:76:ce:07:ca:2d:69:6d:81:26:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:10:AA:47:CF:DE:21:A4:E0:77:82:A3:1F:44:11:71:A1:34:0C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:45:10:f5:3c:d4:81:67:9d:ad:a6:56:2e:1a:cd:52:3e:
         e3:92:93:cd:b0:63:2b:a0:8f:93:d7:d2:a4:c1:ab:a3:32:6c:
         62:45:37:ee:92:03:0d:1a:79:e2:1f:8c:4e:fd:20:13:26:a0:
         b8:cc:30:89:84:0f:f1:ef:21:88:01:d2:1c:24:16:a5:80:0a:
         bf:7f:34:4f:9a:91:11:01:8c:5a:85:7a:8c:0e:96:80:41:1e:
         8e:59:a0:5c:c6:22:61:b7:d1:ea:b3:a1:1b:60:eb:fd:16:15:
         9b:f7:6d:7b:21:57:92:8e:51:75:b6:d2:7a:a9:dd:6f:bc:54:
         80:06:40:89:d0:cb:a9:68:2a:58:f6:40:82:e3:40:7d:ad:a6:
         62:fe:94:a0:70:25:70:2e:e3:11:70:5b:54:43:99:f9:1a:68:
         04:b6:57:12:c3:58:85:c6:f7:9e:a6:6d:1c:8a:3e:28:4a:81:
         cd:80:7a:c3:20:0a:23:cf:b8:c8:52:23:5f:99:cf:19:43:e7:
         9d:ce:4e:1f:3c:50:c0:9b:67:08:7a:3f:0a:2a:43:98:21:00:
         e1:cd:2f:2f:a8:96:39:48:fd:ac:c0:fd:08:0c:b6:83:54:a4:
         68:0a:03:9b:e0:53:e0:66:f9:0c:32:56:1d:9a:05:34:20:7c:
         11:c9:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:24:48 2025 by rpki-client