Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/75dec98b-0438-33df-b1fe-dda199f56012.roa
File:                     75dec98b-0438-33df-b1fe-dda199f56012.roa (raw, json)
Hash identifier:          fY/5euSm5s2eBTzA5/AP1V2XS8n4hcgjwVXeTE1yfso=
Subject key identifier:   6B:E2:01:DD:62:24:F8:33:1E:F5:72:87:4A:0B:CB:2C:9B:28:5C:45
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6A06B682D5CF730B0580
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/75dec98b-0438-33df-b1fe-dda199f56012.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        68.66.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6a:06:b6:82:d5:cf:73:0b:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=f4ca4f06-a811-4e9f-9845-9548f3522e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:05:9f:1c:42:6f:75:fc:ff:f5:9e:6a:59:
                    a6:0f:a2:f0:92:1f:15:a9:03:4c:b6:e4:43:f3:5c:
                    25:1a:00:33:17:93:2b:eb:d7:19:4d:1a:80:66:2c:
                    4a:f7:33:8a:ea:41:15:fb:65:75:bc:a0:aa:ce:8d:
                    14:d2:fc:4b:26:ce:38:37:a3:42:fb:01:07:e3:24:
                    79:91:35:1e:a5:d2:6a:e7:43:ad:ea:a1:76:29:ab:
                    5a:f8:89:7c:ca:d0:14:1c:01:27:31:31:98:c2:16:
                    ff:10:0b:1d:6c:01:32:da:0f:de:c7:85:af:eb:a7:
                    48:41:dd:e6:4b:ee:cc:18:cc:15:5e:77:fd:9a:f4:
                    4d:de:1a:ae:b0:62:c0:5b:13:8f:be:cf:99:7a:d3:
                    91:59:49:a5:78:90:7e:d9:eb:56:57:28:5f:e4:b8:
                    53:a1:09:a1:dd:a1:e7:6c:e1:f1:09:11:f8:a5:41:
                    b3:be:40:44:34:09:f2:2d:2f:b0:3c:d1:fd:85:7e:
                    8c:63:bd:23:80:8f:98:b7:f0:91:d5:71:80:0d:ca:
                    08:55:53:c4:1e:30:5b:49:56:c3:1b:62:5c:92:88:
                    a2:4a:1c:46:d8:b3:e0:f7:05:83:ef:aa:9d:d0:a4:
                    6a:ab:0b:e5:bb:e8:12:06:2b:da:de:d0:a3:c7:30:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:01:DD:62:24:F8:33:1E:F5:72:87:4A:0B:CB:2C:9B:28:5C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/75dec98b-0438-33df-b1fe-dda199f56012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:58:9b:34:3d:9a:29:c4:37:0a:d8:7e:ab:73:16:0e:94:bf:
         ea:96:a7:79:04:11:ad:94:92:b5:31:49:23:71:25:83:c9:0d:
         32:73:53:1a:9a:26:8a:3b:b2:af:45:5d:83:ea:37:f7:ff:17:
         97:72:73:f4:b9:51:fd:c6:a4:c4:cd:7c:49:66:28:07:f7:26:
         a5:76:13:53:3d:12:0a:28:de:b7:66:57:0b:d7:a3:83:49:9b:
         3d:02:26:06:e7:db:fd:e4:71:ab:f1:fb:db:b0:2b:27:4e:49:
         42:90:0c:49:d7:76:1b:fc:31:b8:89:e7:77:19:98:c5:d2:ce:
         a9:c9:b4:5a:52:5d:69:0f:33:0b:2e:f9:76:f0:74:64:02:65:
         e8:87:83:5f:36:3d:34:b6:15:6f:bc:e4:bf:a6:7c:47:5a:32:
         bd:1a:d2:1d:a7:1d:80:20:bd:a0:02:b7:b0:a9:79:a7:ce:1a:
         7c:55:1b:49:fb:51:85:bf:84:7a:69:16:50:63:a8:18:12:af:
         fe:57:fa:9e:67:ca:04:1f:df:6f:f6:b7:a0:75:4c:22:7c:76:
         9e:b8:bf:42:73:b9:a7:bd:e7:1c:21:33:d0:0a:e8:ca:e7:a5:
         ba:a9:cf:af:fc:5a:80:ac:95:a7:bc:55:9a:cc:27:66:60:d0:
         dc:f6:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:55:48 2025 by rpki-client