Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/8c05cb5e-b37a-3645-ad5e-78f196ca922a.roa
File:                     8c05cb5e-b37a-3645-ad5e-78f196ca922a.roa (raw, json)
Hash identifier:          AFbt+iqPMvJUfRXBOm5qF5t1FsGPlulrBxbEFghjT3w=
Subject key identifier:   B8:41:2B:B8:4B:6A:85:82:F6:DC:A1:B9:70:A5:FD:C3:72:50:1D:3A
Certificate issuer:       /CN=dc81e524-050d-4a15-9043-39314922cc81
Certificate serial:       010D0C9F432858499829D30F579ED20162329AC0
Authority key identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/8c05cb5e-b37a-3645-ad5e-78f196ca922a.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     400146
IP address blocks:        66.33.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d3:0f:57:9e:d2:01:62:32:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc81e524-050d-4a15-9043-39314922cc81
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=6441562e-9a1c-40d2-a2a3-3a62f0339ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c4:e5:57:1d:72:b3:76:5f:13:84:42:d3:bd:
                    9a:c1:73:eb:01:85:52:42:12:7a:8c:af:47:94:a8:
                    56:7d:79:7c:69:b2:f7:bb:63:f8:0b:5d:41:99:e5:
                    ee:c6:85:10:30:a6:27:90:d5:fd:dd:c2:5a:30:da:
                    f7:d5:47:87:60:2f:83:4f:f6:87:53:6a:34:d9:f4:
                    b8:a4:1e:e1:33:ff:2c:d7:8e:96:b8:2d:c0:7c:3f:
                    10:2a:62:3e:2c:d5:75:62:47:f5:98:3c:39:0d:bb:
                    d2:db:38:ea:45:04:0d:ea:2e:e3:58:2c:67:ec:36:
                    98:8d:b6:cc:fa:cf:58:cf:d7:45:0e:f1:6c:dd:f5:
                    17:8c:fb:70:f2:3a:e9:a7:05:a0:9f:55:ab:d4:af:
                    43:92:92:30:40:7d:d8:a9:24:97:6f:e5:e4:93:75:
                    88:fe:ed:da:5c:d6:ee:ef:e1:0e:0e:b8:1f:30:6e:
                    8f:7d:c1:a2:fe:4b:4c:cd:e5:7b:c7:cf:75:88:79:
                    8d:22:c0:64:8c:7b:76:2d:a3:1c:f6:f4:71:2d:a3:
                    63:d9:6c:70:55:98:39:6b:f3:23:02:a3:92:9a:6f:
                    35:b3:c2:b0:db:94:6c:b3:f4:43:48:88:27:66:f9:
                    59:0d:7c:44:f5:a9:a2:fc:e3:1b:c2:42:55:c9:aa:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:2B:B8:4B:6A:85:82:F6:DC:A1:B9:70:A5:FD:C3:72:50:1D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/8c05cb5e-b37a-3645-ad5e-78f196ca922a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl

            X509v3 Authority Key Identifier:
                keyid:12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:74:48:1c:00:34:e4:47:f4:09:b6:ae:65:8b:57:df:27:
         1c:07:31:e8:f5:ff:79:24:3a:23:f7:08:96:e3:5f:29:b2:b3:
         c5:0b:b4:6a:9b:84:c2:5e:ff:b8:c2:29:3a:35:07:16:4b:3a:
         19:0f:57:fd:02:62:1c:2d:e4:64:54:16:fe:f7:14:e6:49:b5:
         09:e0:3f:d5:91:0f:5d:6e:86:6b:b6:18:7d:86:cb:e0:22:49:
         d2:30:66:d5:95:10:e7:41:b0:ba:2f:a3:68:97:16:1a:1f:d4:
         0c:1e:e4:39:fc:3f:37:f5:9d:0f:42:02:f4:97:cf:43:85:47:
         73:a8:40:d1:3a:86:b7:d4:fa:b6:ff:19:9b:a4:84:9c:dd:19:
         5f:e4:56:90:26:d2:99:8a:bf:63:52:a3:ba:55:dd:0e:0e:31:
         32:1b:e8:c5:9f:43:0b:e6:0e:6a:c8:4d:df:46:6c:6e:d4:61:
         e1:2d:0b:02:7a:4a:e8:b3:f6:ee:70:0d:b2:03:67:15:ac:67:
         80:a3:fe:4b:53:e8:d8:08:d7:3c:b3:63:d7:6c:a5:34:99:18:
         26:05:97:25:9f:55:c6:99:19:7a:b0:26:07:25:2a:6c:8c:21:
         82:81:18:8f:78:09:94:2e:15:3c:f0:15:3c:05:14:3e:1d:c6:
         6e:00:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:09:40 2025 by rpki-client