Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/ea76fcf9-94d6-3588-81d9-7a0f0b76afcd.roa
File:                     ea76fcf9-94d6-3588-81d9-7a0f0b76afcd.roa (raw, json)
Hash identifier:          1YKKD91jQE+23gt1FPP+T0i6hsIRlzRszh+iDIMl38U=
Subject key identifier:   22:5A:9B:F0:C1:85:A6:99:B0:A1:AD:B3:FF:7A:7B:CC:39:E9:62:52
Certificate issuer:       /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial:       010D0C9F43285849ABB498490A55A60B585D2100
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/ea76fcf9-94d6-3588-81d9-7a0f0b76afcd.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401200
IP address blocks:        66.163.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:98:49:0a:55:a6:0b:58:5d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=d8534006-60a0-4ed8-a441-d2fd604a416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:c3:bb:f1:33:a2:fe:67:d7:38:1c:b6:8b:
                    7d:53:f0:ed:78:10:72:2d:62:c4:00:4c:8f:e6:ec:
                    08:b3:b3:49:9a:9f:63:fc:8b:a6:53:f7:29:b6:e7:
                    e1:7a:73:73:b2:f1:12:22:51:6d:cb:05:c2:f2:85:
                    43:10:6d:2d:27:b1:95:ef:a2:69:ca:01:69:21:17:
                    3b:a9:ab:77:6f:09:65:a6:78:cc:17:73:cb:95:2e:
                    7e:d5:9e:c4:bb:81:74:f8:36:50:aa:38:e8:6b:93:
                    1e:db:23:c7:1f:08:95:47:46:b4:d9:65:93:1d:9f:
                    19:5c:1f:cc:f6:a4:45:99:78:c1:fa:eb:9e:09:12:
                    b9:f1:92:26:67:af:3c:8b:ca:6e:a2:3c:aa:9b:58:
                    56:5d:ae:42:59:b8:40:53:8b:2e:37:53:67:05:02:
                    f4:38:98:de:3b:ba:7e:a7:56:2f:67:3c:3d:ef:6d:
                    be:66:a6:89:40:ae:34:ad:ee:66:94:eb:bf:92:3c:
                    1c:a6:23:fb:f1:e1:c2:33:a5:8d:73:33:f5:81:cf:
                    a6:4f:b1:22:60:e9:24:a3:8b:d1:37:2b:62:a3:ec:
                    4e:74:3f:0c:ef:22:b6:96:a4:09:98:b4:1c:52:9a:
                    ff:48:fc:bf:1f:fd:d8:21:23:f0:c5:98:62:95:5d:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:9B:F0:C1:85:A6:99:B0:A1:AD:B3:FF:7A:7B:CC:39:E9:62:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/ea76fcf9-94d6-3588-81d9-7a0f0b76afcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl

            X509v3 Authority Key Identifier:
                keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:95:0d:81:ba:3b:3c:5f:ec:1d:d6:e2:1d:2f:c8:d0:ea:
         3a:09:d2:fc:8a:4d:d6:88:9b:e8:6b:91:62:4b:c9:0b:07:c3:
         46:47:d2:d8:6c:0a:48:ef:89:94:2c:d4:49:f4:19:7b:ab:5d:
         27:ad:25:26:a2:da:f7:c9:5f:47:4f:ad:f3:dd:6f:dc:e1:de:
         31:4d:b4:5c:3a:c3:65:42:f0:b0:97:e4:53:85:0e:a7:14:c6:
         f3:7c:f5:61:54:e1:92:7e:e7:b7:49:44:48:36:4c:2f:4d:91:
         7e:ab:f4:d2:43:8f:38:69:f1:d3:d2:e3:68:10:93:59:4e:7f:
         f1:ea:7c:46:fa:5a:7e:07:ee:7b:df:c7:ef:7f:09:7f:88:e8:
         88:c8:fc:e6:29:13:69:26:77:e6:f9:3d:df:ab:1f:af:79:4a:
         c1:0c:e4:72:1f:19:fb:e8:c8:4d:16:f6:c0:c3:98:8f:18:66:
         94:ee:90:24:6d:5f:75:1f:aa:3b:d9:b7:09:61:b0:5a:03:77:
         7d:24:98:da:cc:8e:84:47:83:61:e1:94:27:58:ec:c8:94:f9:
         d6:ed:5a:60:32:08:32:89:b4:af:d3:50:87:56:b9:6c:80:3a:
         88:77:90:54:67:d5:44:8a:39:cc:ad:cd:34:07:ad:4d:7a:b0:
         e2:3d:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:53:14 2025 by rpki-client