Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa
File:                     0a5a6f69-3335-3826-9d7e-893e816a4189.roa (raw, json)
Hash identifier:          /zel8aIIrfuf7dCvWzM7BYKlED69ItRluj+kPnf6Ed4=
Subject key identifier:   45:F6:38:0E:57:D8:D7:B2:5E:61:83:28:3F:2B:07:33:0C:9C:88:3A
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A295565D988FB610A76F112D0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        207.202.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:65:d9:88:fb:61:0a:76:f1:12:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=2e192efd-bd3e-4c0e-9e3c-bb07f18883d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:de:71:24:3d:d6:d5:5d:61:e9:c7:bc:93:
                    ac:a2:89:2a:b9:2d:a7:aa:5f:f1:82:16:bf:5c:a5:
                    e6:9d:bc:f5:33:9b:52:87:b3:28:90:48:d7:68:fc:
                    b9:0c:0b:52:c0:e0:28:bd:41:5e:ec:60:b9:d1:11:
                    76:56:a9:f6:57:1c:48:12:5e:7a:3a:b1:2c:b4:0a:
                    ae:fe:86:86:92:d6:53:fe:b6:a0:d6:50:0b:af:03:
                    72:ed:56:ce:4c:fe:eb:f2:fd:42:52:f9:e6:84:c0:
                    68:9b:4e:fa:5a:01:18:ca:04:95:a4:99:fc:44:0f:
                    3a:ed:e4:4c:5b:45:87:24:c7:cc:d3:f7:e4:92:2c:
                    5d:4b:33:c9:12:2c:42:3f:9d:5a:ab:98:88:11:58:
                    ae:0a:31:a0:64:b6:07:81:71:d4:fd:6b:52:52:45:
                    db:14:71:34:b6:b6:a5:dd:ff:26:f4:e5:7d:1b:74:
                    d0:db:3f:13:27:23:62:dd:b9:fc:88:5a:c8:25:91:
                    f7:75:f4:4a:35:c5:75:60:5b:9a:6d:7b:f6:aa:62:
                    62:b6:b5:61:87:99:13:3e:e5:4a:2b:4b:12:75:2a:
                    f4:86:b3:b5:7f:a8:80:6a:31:d0:0d:dc:dd:3a:8c:
                    80:a9:31:ef:7a:c0:8c:e9:8c:20:d2:82:45:da:67:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F6:38:0E:57:D8:D7:B2:5E:61:83:28:3F:2B:07:33:0C:9C:88:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:dd:7d:d3:48:95:57:fb:5f:53:ed:28:c9:ac:7e:07:98:
         4f:e6:31:1b:bf:93:5a:fc:2b:85:f4:8e:40:09:5f:45:48:91:
         04:7a:7a:e6:4b:c9:2a:af:33:c6:a5:87:48:e4:4b:b2:f8:74:
         87:d3:5a:12:a0:30:dd:e4:65:15:b3:8d:fa:88:b4:8d:62:e5:
         e4:ab:a0:20:4d:96:88:ac:8f:73:11:91:49:00:4a:de:02:79:
         a6:58:40:c5:46:64:c3:67:db:af:2d:de:06:ec:a3:8a:17:1a:
         f3:89:04:8c:cd:39:e3:a9:fc:e0:14:5f:e0:7b:9d:36:ce:95:
         d2:8a:e7:64:4e:ea:ba:58:d0:2b:0a:a1:b1:94:78:58:24:7a:
         26:96:96:2e:a5:f4:67:c7:60:00:95:31:b7:f6:31:a4:47:58:
         26:39:b8:ca:e9:58:10:04:25:11:e6:ff:7f:59:54:b5:1e:fa:
         24:ce:c2:8a:de:bd:8c:5e:49:94:cc:09:3d:3a:12:c6:66:ef:
         15:e6:92:5f:ba:7a:80:57:19:40:0b:4e:b8:9d:18:f7:22:f4:
         74:92:79:d1:13:e0:ce:c5:8c:39:72:03:b2:fc:b3:78:75:e3:
         ba:68:0f:12:6e:85:d9:11:71:7b:a1:b8:14:b2:c8:f9:53:85:
         a3:e7:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:38:26 2025 by rpki-client