Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/c44e61b8-7798-3f83-86be-f00f980cf35e.roa
File:                     c44e61b8-7798-3f83-86be-f00f980cf35e.roa (raw, json)
Hash identifier:          uEyW/n1LpPxxeIksHOdQwiWr+IvV3HlyI1/+l+Gd1rk=
Subject key identifier:   0C:B0:4A:D6:3B:FA:53:DF:02:11:CB:A9:1F:AB:28:55:7C:40:A7:A8
Certificate issuer:       /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial:       010D0C9F4328584975445C3F848ECC4C92CE4200
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/c44e61b8-7798-3f83-86be-f00f980cf35e.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     23483
IP address blocks:        66.244.4.0/24 maxlen: 24
                          66.244.15.0/24 maxlen: 24
                          66.244.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:5c:3f:84:8e:cc:4c:92:ce:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=73022878-2904-40d3-9ba5-7aadd62c26ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c4:83:e0:62:21:2c:ad:f1:c4:f3:e2:64:4a:
                    9a:da:e8:72:c1:8e:ad:39:58:6e:bc:0b:2e:cd:7a:
                    93:2e:38:53:66:14:dc:01:e2:66:bf:f5:cb:0b:53:
                    4f:cb:4d:90:d6:2c:7b:05:6d:61:e3:f8:c9:13:69:
                    57:34:9d:3f:69:aa:84:c3:ca:e4:6c:be:70:81:ef:
                    d1:bc:cf:2d:b1:96:58:36:0d:69:06:dc:69:58:ca:
                    44:e8:40:75:e1:95:16:e7:9c:21:51:4c:43:97:66:
                    40:c7:cc:ec:ce:63:9e:38:89:31:57:2e:2c:7a:d0:
                    76:e7:51:f1:61:04:4a:c7:1f:0a:17:e3:15:e3:e3:
                    07:d3:77:05:d0:6a:f5:a2:e3:8d:cd:64:bc:17:95:
                    6a:9a:88:d4:f3:7f:33:4b:15:5e:65:1d:93:51:8e:
                    c2:4e:e0:d0:9c:0f:cd:f1:54:6b:2d:7d:a0:88:cb:
                    e9:cb:55:02:41:01:79:2a:0b:7b:a2:9d:8f:91:e4:
                    bd:3b:a1:ab:d2:64:4c:dc:b4:1b:6c:bd:34:3b:d0:
                    be:e8:87:02:c0:f6:a7:11:f8:81:a9:e3:31:5a:c9:
                    9a:db:e6:26:7c:8a:0b:af:83:34:68:57:bd:df:81:
                    d7:46:a9:17:4a:c7:a5:e0:7e:af:02:a8:f1:a9:b4:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B0:4A:D6:3B:FA:53:DF:02:11:CB:A9:1F:AB:28:55:7C:40:A7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/c44e61b8-7798-3f83-86be-f00f980cf35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl

            X509v3 Authority Key Identifier:
                keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.4.0/24
                  66.244.15.0/24
                  66.244.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:c1:95:a3:aa:40:e0:98:eb:c3:b9:a2:d4:23:62:50:13:
         68:8c:1e:98:dc:9a:67:f4:f1:c7:4b:e4:5f:2a:4d:7e:e8:32:
         46:85:07:fc:9f:60:b8:20:72:f7:b0:3f:71:62:2c:f1:2a:cc:
         d5:34:9e:5c:d2:a7:10:b6:68:4d:0d:37:01:d8:68:8b:7b:d0:
         5e:06:01:f8:72:c6:d4:8f:ac:d1:0b:4e:c5:98:3c:b2:45:b0:
         b3:50:75:3b:de:86:90:4c:d0:d0:67:64:84:e3:fb:e0:24:1c:
         ca:3a:08:1a:80:6a:e6:c6:81:78:01:46:21:2c:5a:13:67:22:
         00:56:08:45:bb:02:12:1a:bc:41:0e:11:76:2f:fb:be:ce:b8:
         19:9a:41:80:22:d0:a0:23:0b:e5:04:54:d6:23:3b:07:9d:bc:
         35:8e:31:a1:dc:e8:6b:ad:43:25:31:e8:8c:29:28:8a:11:e9:
         db:86:21:cc:52:4a:7b:48:dc:f7:8c:ec:cf:9a:f0:52:fa:94:
         81:86:e7:36:ef:37:6f:cb:5c:ee:02:36:c5:1f:b2:8e:82:e3:
         e5:b0:a8:fe:7f:b1:f1:14:6d:92:84:88:dd:78:83:da:0b:32:
         1d:1c:42:86:7a:97:59:88:0e:c5:47:ca:39:64:ef:1d:ce:75:
         33:fd:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:09 2025 by rpki-client