Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa
File:                     b02d7254-2264-3097-86e7-bab31bccdf77.roa (raw, json)
Hash identifier:          e80k+iwfiGu5Yr3YecECvll9F2DE/4yAI+Wv1V5pmtU=
Subject key identifier:   0A:C4:BA:B7:A8:5F:3C:73:3F:FA:1C:29:A6:64:19:A1:10:DB:D3:1A
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F43285849C20A174C2FFD4EA867066678
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33717
IP address blocks:        66.171.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:17:4c:2f:fd:4e:a8:67:06:66:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=0be0fa83-9eca-4f12-aafc-562553e46301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:df:12:a0:67:a8:82:2f:d4:ae:cf:d8:50:01:
                    68:cf:55:37:4d:73:1f:89:0f:82:ed:bd:84:11:0e:
                    a2:77:e5:5d:86:99:5e:b4:90:89:35:9c:88:8f:5b:
                    ac:26:8c:a5:43:4b:8f:ec:13:49:df:7a:d5:ef:ac:
                    cb:ad:ed:62:a4:25:b1:14:d8:1b:ea:57:d0:43:55:
                    69:8a:d2:6e:70:c1:9c:97:60:43:08:ae:88:6a:8f:
                    19:6f:06:8c:13:35:97:bc:0e:4e:29:05:73:33:bb:
                    a6:0b:92:4c:2b:39:2e:26:ce:15:f0:ce:d7:51:f5:
                    a1:b8:09:ba:f7:5b:06:c7:3b:67:44:ba:37:fd:05:
                    5b:95:3e:4d:c7:04:82:9f:2d:55:92:8e:9a:52:1e:
                    b6:44:fd:56:c9:df:a3:7a:a8:c2:05:9a:fa:5b:d8:
                    04:64:25:46:28:a5:3d:7e:a6:dc:f1:ae:d7:34:dc:
                    a8:b7:7a:36:27:dd:89:3e:2b:52:f2:71:5a:2f:41:
                    5b:d6:83:08:bb:eb:81:bd:3a:cb:1f:7b:39:13:c1:
                    46:ab:08:4b:bd:1b:b0:af:56:da:2d:6b:e7:93:2a:
                    d9:f2:60:66:7b:d7:f3:08:c6:1d:14:a0:a8:ee:0f:
                    af:48:45:46:cb:34:b4:bb:a7:82:38:d0:4f:3f:5c:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C4:BA:B7:A8:5F:3C:73:3F:FA:1C:29:A6:64:19:A1:10:DB:D3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:93:22:30:a8:01:75:bc:df:ea:ff:45:87:04:56:9f:f5:7f:
         bd:fd:b7:47:d4:e7:4a:fe:5d:db:2b:d6:25:5d:18:19:0e:db:
         8d:28:0b:d2:fd:73:d2:33:30:4d:31:fb:83:a9:18:6a:58:8a:
         e9:b2:5d:b3:e5:58:84:45:3f:18:7a:2e:94:a1:e0:bc:3a:67:
         d5:52:ad:5b:98:be:5f:4c:f8:0a:95:ba:50:ec:03:2d:b3:71:
         b6:38:dc:6c:17:64:8e:5b:43:b6:1f:a7:8f:02:b6:84:2b:89:
         e7:fc:fc:0d:a4:44:5b:39:22:1f:c4:d8:f1:a6:40:e8:e5:3e:
         ae:f2:d2:c8:61:f5:f9:f3:76:64:e9:93:84:5f:ec:83:2e:a0:
         9e:6f:6d:b0:64:22:38:a5:61:b3:7c:e2:87:64:33:5c:a4:1b:
         33:f7:b5:9e:f6:e0:fe:94:51:7b:6a:4c:46:7d:f2:97:47:95:
         3f:7a:95:57:93:16:d1:46:b1:53:8c:58:42:8c:8c:c7:59:51:
         6c:86:51:65:9d:96:13:dd:8d:e4:40:bc:2f:94:46:e1:d1:f3:
         2b:67:15:2f:a2:5f:c0:b3:a6:ff:78:b4:f4:e5:e0:22:e2:65:
         c3:b2:d2:48:c2:30:55:8f:fb:d9:0b:93:35:a7:0f:4b:96:a9:
         d8:57:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:24:21 2025 by rpki-client