Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa
File:                     290a97eb-7241-31b2-bc68-434e03367db9.roa (raw, json)
Hash identifier:          LGN2k4NIexnvVPfhU0fzzXY+sw2q3b3PLOjDqpqrfGo=
Subject key identifier:   15:1C:9A:75:08:7A:81:44:6C:BF:C9:69:E2:7A:D0:DF:E6:6A:27:38
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F432858496FAF0BEF931D00872D788A00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     63062
IP address blocks:        66.82.230.0/24 maxlen: 24
                          66.82.231.0/24 maxlen: 24
                          66.82.232.0/24 maxlen: 24
                          66.82.236.0/24 maxlen: 24
                          66.82.237.0/24 maxlen: 24
                          66.82.242.0/24 maxlen: 24
                          66.82.244.0/24 maxlen: 24
                          67.47.19.0/24 maxlen: 24
                          67.47.20.0/24 maxlen: 24
                          67.47.21.0/24 maxlen: 24
                          67.47.22.0/24 maxlen: 24
                          67.142.156.0/24 maxlen: 24
                          67.142.187.0/24 maxlen: 24
                          67.142.192.0/24 maxlen: 24
                          67.142.203.0/24 maxlen: 24
                          67.142.204.0/24 maxlen: 24
                          67.142.243.0/24 maxlen: 24
                          67.142.251.0/24 maxlen: 24
                          67.143.99.0/24 maxlen: 24
                          72.169.71.0/24 maxlen: 24
                          72.169.73.0/24 maxlen: 24
                          72.169.215.0/24 maxlen: 24
                          72.171.6.0/24 maxlen: 24
                          72.171.11.0/24 maxlen: 24
                          72.171.14.0/24 maxlen: 24
                          72.171.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:0b:ef:93:1d:00:87:2d:78:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=fc46f1d1-33a7-4a9f-af7e-f745475d0ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:9c:3a:f8:f5:a1:9b:3b:af:e8:ce:66:20:
                    42:c9:20:c0:cd:5e:7c:c9:f8:de:e0:2b:07:80:96:
                    9a:79:95:b8:b8:3d:f8:0e:f5:39:8c:23:35:25:47:
                    ec:d9:1e:29:d0:a7:07:8e:a1:98:5d:82:06:fe:76:
                    e0:fe:db:4b:04:53:94:80:7a:a9:00:52:52:4d:b0:
                    5a:85:c1:27:b5:17:5a:b3:0b:b8:73:db:b8:c0:14:
                    19:81:a5:79:c7:22:ba:99:ae:db:f4:13:ce:c5:64:
                    5a:25:17:4f:9f:ff:6c:03:9a:7d:e2:d8:5c:b3:b4:
                    d9:fd:9c:af:d3:b8:3c:8c:c8:f5:9c:c9:1e:0c:03:
                    56:2e:6f:9b:81:02:2b:5b:32:46:f9:db:be:95:25:
                    87:e7:f2:ad:8d:d5:6e:d3:d1:69:36:23:60:94:20:
                    2d:c7:a7:28:95:ae:d5:81:9e:30:62:a1:d6:52:16:
                    d4:05:94:f9:85:63:29:e6:47:35:2c:48:6b:d9:e7:
                    c1:72:fd:5f:4f:1f:6e:a8:27:63:e8:eb:9c:cb:e1:
                    ec:f6:6f:74:ce:fb:26:9f:a2:83:50:c2:85:84:a2:
                    04:3c:5b:b8:e2:d3:cb:7e:b6:c4:0d:03:50:08:f6:
                    83:c2:2f:7f:39:ab:34:db:85:47:7a:d0:02:a0:41:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:9A:75:08:7A:81:44:6C:BF:C9:69:E2:7A:D0:DF:E6:6A:27:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/290a97eb-7241-31b2-bc68-434e03367db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.82.230.0-66.82.232.255
                  66.82.236.0/23
                  66.82.242.0/24
                  66.82.244.0/24
                  67.47.19.0-67.47.22.255
                  67.142.156.0/24
                  67.142.187.0/24
                  67.142.192.0/24
                  67.142.203.0-67.142.204.255
                  67.142.243.0/24
                  67.142.251.0/24
                  67.143.99.0/24
                  72.169.71.0/24
                  72.169.73.0/24
                  72.169.215.0/24
                  72.171.6.0/24
                  72.171.11.0/24
                  72.171.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:de:95:f1:12:d2:a9:77:9b:73:0d:04:60:b1:fa:44:b5:c7:
         3b:ec:c2:bb:72:0e:b2:2c:aa:c5:26:1c:5e:02:03:87:40:4d:
         b2:99:04:7d:d0:6a:a4:fd:0b:8f:79:cf:3e:30:e0:db:fe:0f:
         48:c2:12:99:05:68:be:59:41:f1:bc:28:3a:67:61:bd:3b:f6:
         29:07:32:97:04:9a:54:9e:74:d1:79:54:d8:35:f9:ba:8e:6e:
         ae:ce:fd:26:5b:af:6e:e0:01:0c:da:41:a4:44:35:44:ab:cf:
         bf:c4:c2:90:94:9b:7a:68:19:c5:f7:72:cb:5f:20:eb:7a:e8:
         46:e9:82:8c:ca:1d:4a:db:a3:6c:38:5a:7c:0d:44:54:e0:e5:
         76:ae:16:67:c5:d6:62:4e:3d:b8:3d:8d:d6:41:0f:ec:97:fe:
         10:d6:0c:b4:94:e2:77:86:15:75:a2:c4:14:3e:55:28:ed:98:
         61:b6:69:e6:1a:33:21:36:8f:81:c4:44:c5:a7:f0:d7:8a:6b:
         99:95:78:4a:ab:65:55:bd:58:1e:5d:bd:07:41:8f:08:51:0b:
         0b:44:11:a5:f2:48:bc:33:02:ff:fe:83:bf:48:be:cc:ee:8c:
         52:32:7e:2d:a5:81:af:50:d8:73:59:4a:b6:5b:69:a4:f7:21:
         06:6f:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:38:51 2025 by rpki-client