Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/76319991-ad50-381c-8233-2047bb916638.roa
File:                     76319991-ad50-381c-8233-2047bb916638.roa (raw, json)
Hash identifier:          ihi6wqGODKFBsJlCXQkx8TZ2xuxVkDOroITBxt8Pr8s=
Subject key identifier:   EF:E5:EE:39:CC:48:D5:B6:87:9B:8F:73:C6:93:D2:21:0D:53:C6:2C
Certificate issuer:       /CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
Certificate serial:       010D0C9F43285849F17FBF6498BA2F43D5E90380
Authority key identifier: 26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/76319991-ad50-381c-8233-2047bb916638.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     36309
IP address blocks:        66.9.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:bf:64:98:ba:2f:43:d5:e9:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=04a87e70-6a93-4507-836a-418c81266e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:58:17:ef:ea:66:e4:20:15:ea:6f:aa:be:
                    ee:56:b8:f4:22:0c:2a:10:1a:bd:b0:76:cd:a7:1d:
                    44:48:d7:a5:3d:8e:94:b1:1a:28:3c:41:3f:bf:c4:
                    8a:21:b0:73:9a:c1:92:b3:8c:ca:b8:e1:19:b3:a0:
                    89:48:e9:d2:3a:3b:bb:28:c6:a5:b2:fa:6d:b5:a4:
                    1a:28:ba:df:45:6b:cb:ce:2f:81:e7:2d:97:ab:ab:
                    8b:bc:72:0f:fc:f5:2b:d5:b0:ca:2c:99:71:81:0f:
                    af:17:7a:b9:24:e1:85:50:d0:5e:a4:f0:99:74:96:
                    8a:d5:ad:69:75:21:8f:d9:a3:d1:b3:bc:ea:ad:21:
                    04:4c:e1:33:99:f5:25:f8:75:bd:a8:56:52:91:fe:
                    cb:7b:89:98:e3:82:90:e2:3e:5e:bb:2a:f3:2f:63:
                    36:a1:a4:ca:b6:c3:c6:41:b9:b4:39:a0:07:0b:39:
                    cf:48:4f:e4:f7:11:f9:e8:fb:b1:9f:77:85:db:f4:
                    07:be:3d:52:4b:65:fa:2b:75:08:5b:09:60:e4:bd:
                    1e:f4:c3:f2:19:c4:ee:cd:be:9e:ab:63:5c:af:65:
                    eb:76:7c:95:56:91:6d:a7:b9:17:15:50:ba:7c:c3:
                    df:c3:4b:81:96:e8:59:f8:28:a0:5f:dd:22:ac:c4:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:EE:39:CC:48:D5:B6:87:9B:8F:73:C6:93:D2:21:0D:53:C6:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/76319991-ad50-381c-8233-2047bb916638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.crl

            X509v3 Authority Key Identifier:
                keyid:26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.9.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:1a:cf:cc:1f:17:3b:5c:a2:f2:c2:28:46:a5:44:ec:4a:
         25:f5:3c:17:be:32:fa:30:22:f3:e1:09:bc:64:eb:a4:3d:35:
         d3:cd:9a:d9:95:3b:f2:51:f6:39:52:63:22:e0:1d:0a:f1:c3:
         2c:f0:c3:e8:5a:fe:69:84:a5:8c:90:4b:2e:f9:85:d2:7b:b8:
         37:9c:d6:a1:e5:be:2f:0b:12:75:88:14:b9:b9:1b:6e:63:a2:
         95:55:e7:48:e5:b3:b1:44:1b:6d:38:64:76:09:38:9b:1a:a6:
         92:01:1e:1d:54:a7:18:a8:7d:74:19:07:f0:fb:c8:73:e8:97:
         0b:ab:5b:e9:73:54:a5:53:82:3e:2e:3f:dc:0e:61:74:b0:70:
         62:bb:ef:ca:5a:0d:da:61:1b:41:2b:4b:c2:f6:5c:f3:12:ce:
         96:e9:af:76:13:28:ae:05:9c:d2:34:b4:3f:63:11:fa:be:f7:
         60:32:e7:1b:18:d7:f5:19:42:19:5d:6c:6d:c0:f5:07:90:c3:
         04:80:c5:a8:6a:bc:2f:a9:71:71:92:65:1b:49:d5:01:bf:5d:
         9a:db:3b:6c:e8:49:29:fe:28:8a:65:3e:51:bc:8e:49:a8:e1:
         89:f5:7a:00:60:4e:ca:92:e0:cd:e0:6c:a5:c6:e4:3b:87:87:
         7c:b4:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:10:19 2025 by rpki-client