Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/27f758ef-5e16-3cc2-8633-28286481977f.roa
File:                     27f758ef-5e16-3cc2-8633-28286481977f.roa (raw, json)
Hash identifier:          PWxZpS/Occ+SrWspL/CyUC5UUIYaGjFE+uRf165/9vg=
Subject key identifier:   9A:46:10:2E:B2:24:2C:4C:FD:0E:BB:A5:C9:EB:8D:9B:BE:47:CD:E1
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F43285849DC732202E3876210B142DDC0
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/27f758ef-5e16-3cc2-8633-28286481977f.roa
Signing time:             Thu 15 May 2025 12:03:38 +0000
ROA not before:           Thu 15 May 2025 12:03:38 +0000
ROA not after:            Wed 13 Aug 2025 12:03:38 +0000
asID:                     22709
IP address blocks:        66.110.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:73:22:02:e3:87:62:10:b1:42:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: May 15 12:03:38 2025 GMT
            Not After : Aug 13 12:03:38 2025 GMT
        Subject: CN=54f8deac-7c2e-4bec-ab49-b06da919786d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:7b:68:16:4b:b5:c3:34:17:02:3a:75:4b:
                    d7:0e:60:5e:10:7b:d1:0e:a0:6f:e4:81:2e:ce:a9:
                    ad:ac:9a:db:44:a3:be:e0:14:dd:e7:79:76:b0:e6:
                    89:13:ee:f1:20:63:da:f0:f8:db:0b:9f:bd:65:f9:
                    dd:43:e7:e9:91:8d:db:f0:66:63:d9:98:06:7c:0d:
                    e6:72:28:cd:c5:57:9d:41:02:75:b9:72:82:be:18:
                    70:9e:f8:69:5c:2a:74:de:60:1f:4c:0c:95:c5:66:
                    f2:80:d3:cf:4b:88:6f:94:4e:ea:70:0d:b0:bd:2f:
                    7d:85:df:4b:29:ce:40:8e:85:3f:4f:91:32:b5:b5:
                    b5:55:c9:6c:66:be:c2:9e:01:8f:be:71:5c:06:f3:
                    3c:23:ca:eb:93:b9:7b:49:49:60:01:f6:ea:fe:d3:
                    8b:6f:77:88:7e:2b:cc:40:6f:bd:d6:fd:7d:14:98:
                    01:b4:b6:fd:92:5d:65:80:79:ce:6f:7f:02:ae:c1:
                    be:b8:0b:5b:c3:73:60:b8:7d:d7:82:e1:1f:d5:d5:
                    71:e1:3e:df:f1:f0:55:a9:77:c5:66:f4:b8:24:35:
                    29:f5:ab:d1:d0:ab:a8:1e:21:66:1a:f7:68:69:00:
                    15:93:bd:f4:11:e2:81:5d:7e:4d:14:be:76:c6:1f:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:10:2E:B2:24:2C:4C:FD:0E:BB:A5:C9:EB:8D:9B:BE:47:CD:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/27f758ef-5e16-3cc2-8633-28286481977f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:24:d1:aa:15:77:21:39:e2:ba:ef:83:4e:47:40:55:4c:
         4d:d6:7e:14:9c:61:80:11:be:30:88:b8:b6:ab:95:16:99:cb:
         b3:8e:dd:d2:33:e2:5b:4a:60:87:d2:41:7e:75:04:5a:3d:11:
         23:aa:41:b7:ce:0c:63:8a:f4:85:8f:f2:bf:d0:49:2c:d7:6f:
         97:fd:b8:0d:63:3e:14:fd:0d:cb:f2:d4:4f:2c:4e:fb:05:15:
         1e:16:43:c7:fd:7d:b5:8f:7f:fd:88:59:c0:45:8e:94:89:d4:
         0b:59:9b:b7:bb:c9:81:ef:aa:05:8f:00:d2:6c:ec:b3:8c:44:
         76:95:12:d8:a4:0a:c5:6f:64:e2:7d:a4:bb:f3:ff:36:99:a4:
         09:dd:1d:3f:81:30:7f:99:e5:94:a5:29:3c:52:f5:aa:f9:e3:
         1d:bd:a8:d7:b3:43:c9:42:a0:87:ff:5f:84:d1:63:f5:94:f8:
         19:74:6d:2c:7d:8a:72:42:4f:3e:59:4e:2c:69:cd:4d:e4:62:
         80:93:9f:a8:b7:eb:37:74:f6:e6:1b:d7:9f:08:5c:41:de:4e:
         2d:f3:18:61:f1:ce:a8:ee:6a:b9:4b:34:86:3e:56:9c:f1:e1:
         76:44:2c:b7:8f:c9:ed:16:ae:d7:89:be:6c:77:af:32:77:08:
         d8:50:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:12:56 2025 by rpki-client