Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa
File:                     66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa (raw, json)
Hash identifier:          aaftezZSXrnqforIhm6QnLUjt33mMe9mndkC1Yx5rvA=
Subject key identifier:   7A:69:E3:6E:7A:75:94:5E:3B:AC:00:23:8F:EA:94:91:D1:BF:6C:41
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285849C0A4D46BF71760C996051BE0
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     21928
IP address blocks:        100.128.0.0/9 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d4:6b:f7:17:60:c9:96:05:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=d41f02c1-d05a-4401-895a-5d7ce72ce903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:d6:7a:08:c7:16:81:27:54:6a:3c:f4:5b:
                    51:2d:a9:17:1b:87:b0:79:34:06:06:08:c8:03:c9:
                    11:50:7b:ad:2b:d0:2a:6a:80:7e:53:37:f7:34:75:
                    4b:69:d8:86:96:01:7c:91:d6:72:ed:54:60:70:68:
                    cb:50:e9:d4:1d:db:f1:a3:4f:26:cd:c0:8a:c5:59:
                    2b:99:b4:5b:cb:0d:6a:f3:0c:b6:7b:ed:2c:52:d6:
                    c2:ad:fe:29:2c:ff:7c:f5:37:7d:4c:62:eb:15:a2:
                    0d:4d:32:a4:6d:f9:b2:30:93:33:a2:e6:e5:2a:4c:
                    99:fd:2d:17:71:91:c9:d7:a1:3a:9a:32:b3:df:7e:
                    6b:f8:da:c4:a1:0a:54:a5:eb:04:58:5e:81:ba:4d:
                    d7:27:e2:cc:a7:90:b9:65:2f:9c:cd:bf:75:6e:96:
                    8f:d8:55:c9:ef:bb:cc:64:db:d4:67:17:ad:4a:90:
                    8d:cd:4b:d3:38:e8:35:4e:85:c5:59:eb:c5:fa:8d:
                    94:1e:fd:74:98:71:8a:e8:51:a7:8c:62:9e:1e:54:
                    bc:ef:6c:b5:04:bb:14:75:94:38:36:dc:22:dd:bb:
                    ed:a7:9b:47:52:ab:d6:4d:c5:07:4e:cd:07:37:2c:
                    c8:94:40:82:71:5b:dd:1b:58:5d:b9:38:b7:5c:d4:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:69:E3:6E:7A:75:94:5E:3B:AC:00:23:8F:EA:94:91:D1:BF:6C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.128.0.0/9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:3e:0f:20:29:c4:a2:12:ef:02:57:31:36:40:77:34:da:ef:
         bf:97:a3:c4:54:7c:fb:1b:2a:4b:ca:b9:fe:05:63:d3:2a:07:
         68:d0:fa:ea:90:d0:c8:57:84:14:a4:c6:cb:b1:61:76:64:37:
         77:9f:88:7a:09:e1:7d:a0:66:95:89:7f:d3:db:b5:66:41:dc:
         ab:6a:bd:5a:5c:aa:0f:8f:8d:b9:c2:2d:33:88:30:80:b7:dc:
         8b:4b:45:cf:47:24:e3:b3:4a:52:30:0c:0b:f4:d5:1b:15:46:
         15:04:7e:e6:8e:4f:08:38:ce:c1:39:71:66:6b:01:04:e5:d2:
         67:c4:be:90:bb:ef:f3:6a:a0:98:0c:2e:83:79:7f:61:5f:8c:
         d5:a2:95:53:c6:75:03:66:5b:bc:5f:b4:bc:44:60:8f:7a:40:
         a4:58:5a:79:b6:fb:de:93:a9:e9:0c:68:04:d5:1c:de:98:ef:
         a9:12:49:e3:e3:47:25:a9:53:d9:14:0d:10:71:90:65:cd:09:
         da:ec:d8:ac:7f:f3:fe:8b:44:bf:b8:0f:6d:dc:bd:59:ce:9b:
         ee:97:99:3a:a6:d5:75:c7:d6:71:20:0c:cf:13:cb:c1:0e:f3:
         0c:88:26:1c:7d:be:b2:81:ce:7b:7c:12:79:4f:97:23:c7:47:
         f8:7c:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:47:14 2025 by rpki-client