Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/4f3b051f-3ef9-38fa-aff8-76a50a9fb80f.roa
File:                     4f3b051f-3ef9-38fa-aff8-76a50a9fb80f.roa (raw, json)
Hash identifier:          F6sxMcCop9MA+iL1gkBHGy7Do/lp/JtYEMgJH4+F2uY=
Subject key identifier:   FB:46:34:71:E4:51:31:8C:6F:BC:C6:CA:1D:E1:BA:40:99:9B:11:68
Certificate issuer:       /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
Certificate serial:       010D0C9F4328584A28A12E56C29BC7216668BAA0
Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/4f3b051f-3ef9-38fa-aff8-76a50a9fb80f.roa
Signing time:             Wed 11 Jun 2025 18:57:51 +0000
ROA not before:           Wed 11 Jun 2025 18:57:51 +0000
ROA not after:            Tue 09 Sep 2025 18:57:51 +0000
asID:                     4150
IP address blocks:        66.170.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:a1:2e:56:c2:9b:c7:21:66:68:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
        Validity
            Not Before: Jun 11 18:57:51 2025 GMT
            Not After : Sep  9 18:57:51 2025 GMT
        Subject: CN=226751e9-c270-489d-80b3-ab1abef1f510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:d0:42:ec:be:ce:14:3b:3b:47:75:e6:5b:
                    23:dd:93:03:fb:b5:02:36:ec:bb:74:ec:5b:14:cd:
                    06:15:88:fb:a1:34:9b:cb:51:44:a7:aa:54:72:16:
                    14:fe:49:b0:0a:4a:02:d6:49:3e:cd:ef:1c:b2:9c:
                    b9:6c:7f:80:f5:3f:26:29:06:9e:a7:69:01:da:c1:
                    6c:f2:dd:09:4f:1c:0b:13:aa:0f:ed:6a:6e:b8:af:
                    54:04:8b:84:71:81:26:33:ba:fb:fa:81:9c:d0:1a:
                    b1:84:33:78:37:f7:3e:99:f1:56:db:da:ef:ec:e8:
                    ae:86:17:74:ca:4e:8f:77:47:d0:67:f5:b8:b9:8a:
                    c2:3b:c5:75:d6:d4:76:8b:1b:8f:75:bc:0c:bc:73:
                    17:b3:52:67:d3:f1:ae:e4:e0:00:4d:d5:46:46:25:
                    f6:24:c7:69:75:d0:15:37:96:69:dd:a8:cb:e5:d3:
                    df:c2:0a:ef:f7:f5:5a:80:58:3c:08:49:bc:2b:0d:
                    78:c3:31:12:0a:c9:76:a6:a7:62:85:87:1a:2f:bf:
                    d9:fc:f4:d7:2e:4d:43:7f:d9:39:c1:99:78:92:68:
                    9f:9b:28:35:a8:8a:18:83:45:85:39:16:bd:2a:3e:
                    02:bb:d4:e6:30:20:4e:51:d1:28:c3:8c:67:43:21:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:34:71:E4:51:31:8C:6F:BC:C6:CA:1D:E1:BA:40:99:9B:11:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/4f3b051f-3ef9-38fa-aff8-76a50a9fb80f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.170.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:2c:a7:84:72:cc:94:2c:50:be:10:00:b6:7d:28:ca:87:05:
         f4:b3:f4:e8:34:9c:54:9f:2f:34:67:82:07:a2:91:f0:a3:b9:
         8f:85:32:80:9a:ca:ed:e0:77:06:94:1d:c4:69:d0:55:d8:08:
         ee:22:41:09:dc:c8:d1:69:c6:89:96:33:af:47:e9:ef:0a:ef:
         26:dd:8a:72:84:47:37:5f:4f:7c:9a:e1:3c:86:5d:64:46:14:
         44:e5:bc:81:83:cd:18:c7:08:e7:e2:b6:ca:90:63:24:8f:00:
         9d:fc:b1:25:7d:2a:2a:47:75:38:50:16:6f:45:88:8f:bb:72:
         ce:13:78:fe:7a:b2:0a:18:6d:e8:b8:61:6b:a0:51:ad:75:88:
         b2:aa:b9:29:64:87:21:03:74:9f:2c:9c:38:4b:c2:aa:03:17:
         ca:ac:ae:06:cc:ef:48:40:74:48:f1:4b:d0:32:27:da:e7:e0:
         6b:f3:e8:e6:53:9f:9e:96:22:a4:a7:cd:52:5c:18:22:9f:f6:
         ea:9e:8f:05:af:c9:33:a1:a1:bc:fe:3b:53:f9:71:36:b5:77:
         0d:46:5e:46:0f:2f:7d:22:33:f7:bf:06:2b:fb:d2:03:1d:e2:
         86:d8:d5:6a:47:7a:6a:e3:82:27:01:f4:2e:7a:36:62:1c:ad:
         30:a1:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:00 2025 by rpki-client