Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/fd90a3d4-503f-3ff6-9dd6-a3b634b2ea66.roa
File:                     fd90a3d4-503f-3ff6-9dd6-a3b634b2ea66.roa (raw, json)
Hash identifier:          UTtNBA575fYyhXUhhZLd054GfErXnfPbQqEi2kLknRo=
Subject key identifier:   50:AF:AB:0B:67:94:F8:E3:BB:43:DE:04:25:AD:31:C6:C3:5C:44:60
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A295565FCCEDAD94FFC877080
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/fd90a3d4-503f-3ff6-9dd6-a3b634b2ea66.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        207.202.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:65:fc:ce:da:d9:4f:fc:87:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=ecdf70b1-54d7-49f7-b069-c72f37176d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:3b:3c:e1:b0:f1:e0:34:73:b7:00:cc:8c:
                    72:de:ff:37:4e:34:7a:96:99:63:e6:70:47:9f:fd:
                    33:ef:89:fe:25:cb:19:77:32:cb:68:d0:a5:8a:ee:
                    94:26:4c:84:f1:a2:4b:61:fe:aa:f0:57:39:82:d0:
                    77:97:ad:53:e9:c9:77:04:5d:3e:9c:c1:d9:7d:c7:
                    16:c6:ca:81:98:0a:d7:8c:5c:b7:fa:44:65:66:1f:
                    b0:7d:30:aa:bb:a8:eb:d8:b7:a6:08:58:45:e5:03:
                    92:16:5a:3e:22:4c:20:ef:23:cd:eb:74:f6:a1:89:
                    cc:7d:a4:ef:88:59:8c:12:df:92:02:34:b6:98:b7:
                    70:85:c1:ca:5a:a0:40:84:c7:9a:c3:f8:d3:da:9d:
                    81:32:3f:94:93:6c:0c:c4:e8:d0:33:cc:be:33:77:
                    78:5f:a1:d6:36:96:31:15:5a:c2:48:48:39:f5:dd:
                    ce:cb:91:74:04:ba:34:83:4f:52:20:f3:95:fc:fd:
                    70:e4:8b:1c:e8:df:88:7a:d1:79:7e:99:61:52:f3:
                    79:7c:7f:5b:be:bf:36:77:70:f4:e0:74:0a:ac:df:
                    9e:07:97:bd:cb:02:67:c1:48:c2:73:2d:67:af:5c:
                    e8:8f:c0:e7:4b:39:7f:69:3d:b2:0f:2a:7e:09:d1:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AF:AB:0B:67:94:F8:E3:BB:43:DE:04:25:AD:31:C6:C3:5C:44:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/fd90a3d4-503f-3ff6-9dd6-a3b634b2ea66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:8d:d5:c5:c9:85:69:c5:f8:2d:91:40:6c:48:d3:dd:57:
         63:13:d7:81:79:d6:1d:ee:18:5f:35:4c:34:7b:ea:4f:09:ad:
         cf:f4:be:3d:d0:7a:be:3b:62:77:0c:4a:e0:c5:cd:62:ec:22:
         5d:a6:12:af:4e:84:03:ac:b7:6a:7f:c7:fb:bb:73:3c:99:4c:
         cc:ea:e7:57:62:a6:57:71:e0:bd:aa:42:51:8e:03:b8:b8:14:
         a7:8e:ec:a4:46:d1:a8:c1:56:1f:2e:37:b0:4c:e0:a3:31:b9:
         1d:7b:d1:13:fa:13:45:7d:59:be:f9:df:ac:4c:6b:6a:94:75:
         3f:da:03:af:ca:61:4c:8e:5f:d7:57:49:45:7c:82:ad:95:e4:
         b1:ae:6c:18:9c:26:1a:d3:24:e4:d6:14:10:66:c6:68:14:b5:
         86:ff:ce:5f:a5:4a:fa:63:2a:a8:b4:66:b3:0d:19:74:bd:6d:
         17:a0:ad:cd:2a:9a:5f:dd:a0:d8:59:17:5d:e5:d7:58:fc:d3:
         85:bc:9c:e3:7b:fa:72:6b:d7:65:2d:c4:e6:b0:be:c6:e7:6d:
         26:4a:f5:9f:cc:fd:cc:72:d7:cb:27:2e:20:c0:5f:43:30:fc:
         4d:be:81:43:38:d4:75:cb:21:a4:59:33:7b:b8:e1:6b:26:51:
         bb:f2:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:09:37 2025 by rpki-client