Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c55c636d-1647-30d1-b0d3-5c2fd0a64b18.roa
File:                     c55c636d-1647-30d1-b0d3-5c2fd0a64b18.roa (raw, json)
Hash identifier:          Sp7Ny+7GzMlVpJUmXqxKOPxB9/A96DJgkKtcF7n7kqM=
Subject key identifier:   A7:FF:A1:54:72:93:C0:A8:88:39:36:6D:73:B8:DB:E9:68:E7:66:1B
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285849A1EF76E2BC8A153F680C7200
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c55c636d-1647-30d1-b0d3-5c2fd0a64b18.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     6079
IP address blocks:        66.203.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:76:e2:bc:8a:15:3f:68:0c:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=f917965e-530f-4dfe-bb09-d42194b1c0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:2c:f8:63:d5:6c:56:b0:fd:8f:2e:d3:2a:
                    cd:c3:dd:7e:cc:3f:8a:03:b2:34:27:9b:7f:f7:46:
                    2e:c9:87:f7:9c:e8:c7:2b:04:92:a1:44:0f:54:8c:
                    cc:dd:e1:5b:7f:e2:b4:86:9f:3b:5c:bd:15:c5:2e:
                    ee:53:20:9d:4b:11:84:83:5f:5b:9a:bc:32:a7:31:
                    a6:14:79:9d:4b:20:fc:d4:ae:6d:c8:ad:95:fc:8e:
                    ac:14:76:82:b9:26:47:f9:50:2f:4a:b4:e9:38:29:
                    79:25:b2:db:1c:d7:45:c1:c2:e2:e7:b6:f8:56:c1:
                    cb:68:9a:36:c4:ef:12:79:19:62:9b:ca:cd:56:10:
                    b5:b8:3b:23:af:00:d6:44:80:65:02:d3:f0:d4:ae:
                    1f:83:9f:95:d2:b6:d2:a7:6c:26:23:70:53:92:de:
                    ce:1d:f3:b3:3e:60:de:07:7e:2a:db:7f:49:c5:95:
                    20:bd:69:39:b9:b5:8c:b9:5b:24:ba:0d:e5:eb:7f:
                    50:ab:b4:ef:d1:dc:0d:61:f8:59:d5:90:2b:a3:86:
                    97:e0:93:4e:c2:19:9c:db:f2:e0:a1:36:5a:28:01:
                    9d:de:be:e8:eb:c5:77:4e:0f:61:0c:10:87:05:67:
                    7e:84:0e:e1:33:b6:c5:34:55:37:f4:bf:7e:42:12:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FF:A1:54:72:93:C0:A8:88:39:36:6D:73:B8:DB:E9:68:E7:66:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c55c636d-1647-30d1-b0d3-5c2fd0a64b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ba:3b:b4:97:30:13:80:e0:bf:36:e0:ff:d0:77:e2:b1:25:
         6e:27:e9:68:01:55:37:38:dc:0f:bb:0d:92:be:62:36:3b:07:
         5c:89:fb:f4:cc:f3:a5:69:c1:ae:a3:65:11:18:b7:4c:6d:eb:
         c3:77:b2:70:db:e2:47:f8:ca:1a:17:a6:1d:69:4c:ef:09:36:
         d3:46:f5:58:65:9c:06:9d:76:28:c2:a7:78:b0:3e:7a:77:ed:
         3d:87:53:40:1c:d2:c8:a9:03:e8:df:49:1f:14:4e:42:1b:16:
         22:1e:da:8c:9e:c0:84:7f:bf:2d:00:6c:0d:38:c3:a6:79:69:
         ec:12:97:3b:bd:df:cc:76:99:21:21:28:28:c1:6a:e0:d8:38:
         99:e7:7a:9e:53:75:40:bf:47:21:a8:59:f8:a8:d5:16:40:37:
         f0:db:7a:0c:db:75:46:01:dc:08:94:02:91:a8:9f:27:b6:99:
         a1:73:82:ce:24:47:81:c3:2c:3a:4d:d6:d8:c3:18:51:e6:bf:
         9d:51:d3:21:d2:b7:e7:5e:6b:bc:e6:8c:63:11:86:cc:9f:37:
         69:42:af:d6:ee:d9:7a:77:87:04:b5:1a:4a:d5:0f:ed:c8:6e:
         dd:c7:47:71:1b:ef:0a:7b:ed:ec:e6:02:3f:3d:1b:41:02:38:
         b3:81:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:53:14 2025 by rpki-client