Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16f28434-f5b0-3a09-b31e-f1259e40a13d.roa
File:                     16f28434-f5b0-3a09-b31e-f1259e40a13d.roa (raw, json)
Hash identifier:          49QikCpZfs0dyabPkhlOnDuL1G6qAfHe/cnY9njA5x4=
Subject key identifier:   C9:17:C0:70:CA:7A:CC:BE:DE:30:7D:A8:B0:6A:0B:BF:88:CD:79:AA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20A755BC97312DB0216EF20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16f28434-f5b0-3a09-b31e-f1259e40a13d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        66.168.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:75:5b:c9:73:12:db:02:16:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c5eca988-7413-4222-a7be-45aa0ea9f4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:cf:b9:b2:17:b1:bd:20:35:ff:22:5c:5d:
                    cb:66:c9:8e:b3:6b:ae:79:a4:56:12:45:aa:03:22:
                    e3:7d:d2:21:7e:a1:fa:fa:2d:26:02:0e:6e:ab:1d:
                    b5:18:aa:6e:44:13:51:f3:55:8f:70:a2:8e:9b:8a:
                    8f:c2:25:5e:59:23:83:8c:6f:a2:5d:8e:f3:24:37:
                    ea:fe:e9:23:6f:b7:be:7c:56:fa:7d:a2:77:45:18:
                    31:29:3b:79:f1:ae:5e:d7:fb:b7:f8:c3:ea:89:02:
                    ce:9b:f5:26:47:12:1b:96:0b:ac:8c:6a:d9:ef:4a:
                    6d:39:34:23:4f:5a:99:20:d1:7b:6f:d1:72:4d:c5:
                    d4:ce:49:3d:f4:06:81:41:98:8b:26:ee:f8:92:ed:
                    dc:49:a1:e4:e8:0a:22:dd:31:91:af:de:f2:83:7c:
                    fc:e6:51:03:5c:53:ac:3c:f1:e7:04:0f:ac:4f:ff:
                    58:64:de:81:99:28:90:2e:40:89:dc:d3:f6:14:78:
                    6a:1b:b2:6a:17:e0:07:7f:6e:30:a1:de:be:06:05:
                    bf:ff:29:9a:b3:56:54:c7:ff:19:98:67:cd:3e:02:
                    1f:0c:e5:14:72:2d:e2:70:6d:d8:c9:85:b9:89:1e:
                    82:51:46:d1:89:dc:4a:d7:e2:6b:4f:e3:f4:c5:34:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:17:C0:70:CA:7A:CC:BE:DE:30:7D:A8:B0:6A:0B:BF:88:CD:79:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/16f28434-f5b0-3a09-b31e-f1259e40a13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:3f:c6:ab:6f:21:cf:2a:75:83:cf:5a:86:91:d2:1a:d1:8f:
         21:b8:ae:05:c9:74:a3:f8:64:1f:b0:c9:36:d2:6f:75:69:1c:
         d9:a7:1f:49:e6:ed:a5:2a:3c:62:c8:b3:4a:38:f9:e7:3b:20:
         f7:91:34:88:73:39:93:f1:cf:ff:b0:54:2a:c5:a0:14:c9:de:
         7a:01:66:a1:80:d9:fa:57:ca:62:5f:77:fd:6a:b1:24:10:e0:
         01:c2:36:76:1b:9e:94:03:d9:aa:8d:16:d5:83:29:b9:bb:67:
         af:a2:a3:ec:80:0c:b0:36:67:5a:b5:e8:d8:f4:3b:3b:c0:c2:
         f7:f3:a8:3a:c4:87:9e:ea:45:57:b0:4e:e8:75:96:30:94:99:
         cd:98:38:8c:8c:99:98:8b:71:51:33:48:0e:f7:c4:85:e1:83:
         ae:6d:af:99:9b:1d:87:c8:ab:31:ec:17:d7:b8:67:ec:f9:be:
         46:cd:de:e5:82:32:c5:32:f0:96:ce:5b:cf:c4:7c:dc:53:04:
         fa:e1:48:e7:f6:de:d5:7a:62:e4:1a:75:98:e5:37:be:85:c7:
         c7:e1:ff:91:f4:28:1f:1f:79:e3:39:b4:7e:d5:ce:d1:d6:c7:
         a4:18:02:a4:cf:0f:65:9a:10:44:79:48:93:8d:1c:6d:e4:01:
         33:5e:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:50 2025 by rpki-client