Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7eeaba41-3ed8-3af3-b9e7-1e4263732d4d.roa
File:                     7eeaba41-3ed8-3af3-b9e7-1e4263732d4d.roa (raw, json)
Hash identifier:          j+Yyi707blLtw3oyecdcM5RUOf90TzuCfGsHGCi5Quo=
Subject key identifier:   D0:A7:46:12:0C:B0:64:0F:AD:95:C9:4C:B8:73:D0:80:5B:80:E8:48
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849ABB4AD5836C2CB6D3EFABCC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7eeaba41-3ed8-3af3-b9e7-1e4263732d4d.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     6079
IP address blocks:        198.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:ad:58:36:c2:cb:6d:3e:fa:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=00cf0c33-79e8-4287-910e-02495dab7c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d3:62:38:2a:4b:aa:3d:33:f8:ef:3b:e9:22:
                    36:50:c4:c3:57:a2:52:82:3a:5e:36:ed:df:97:ea:
                    f0:5a:30:2a:9d:f6:c9:0a:84:99:02:9a:e4:07:04:
                    8f:53:86:e6:4f:23:ea:0c:f2:1d:e6:6a:f6:f3:2d:
                    78:b3:5a:77:64:70:e0:9b:c3:87:33:7d:7e:92:95:
                    b7:74:5c:b4:05:7a:6f:f0:0b:5e:36:1c:eb:1c:1b:
                    c2:9c:b4:d7:ed:f8:0c:f6:6a:e0:8f:ca:b3:8f:14:
                    1c:fe:15:f1:82:cf:31:88:66:3c:34:3b:4b:4b:27:
                    8d:cf:cd:52:bf:11:35:a5:6d:6e:7b:68:81:44:04:
                    38:58:dd:3a:59:24:35:b4:32:f7:db:4f:e4:4d:b7:
                    10:ae:94:f0:7c:54:71:34:e9:ee:6d:5d:bb:e1:94:
                    77:d3:1e:ce:7d:87:df:6d:82:a3:fa:50:d0:b1:66:
                    a9:b4:62:77:41:50:3a:29:f8:ae:51:8c:e7:e1:92:
                    be:bc:fd:7c:93:82:d5:6b:e6:73:d2:6d:cd:e3:0a:
                    15:36:98:e5:5b:64:e5:5d:dd:94:59:e3:43:70:58:
                    b6:ff:1c:70:fc:83:e1:fe:43:e2:36:e9:82:33:61:
                    89:65:62:95:f9:ac:0f:f4:03:67:56:6c:47:5a:b0:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A7:46:12:0C:B0:64:0F:AD:95:C9:4C:B8:73:D0:80:5B:80:E8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7eeaba41-3ed8-3af3-b9e7-1e4263732d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:af:91:65:a1:d3:86:61:eb:91:06:2a:e3:f4:47:de:e3:54:
         6b:68:9f:a9:46:82:26:46:98:07:15:7f:79:93:ce:7c:4a:d8:
         88:01:b5:a7:3f:54:db:2b:ab:6e:31:81:93:9b:80:4e:19:b1:
         bc:26:66:3d:e7:2c:d3:f1:39:f7:2f:8c:16:69:4a:57:14:55:
         e2:93:83:49:e4:a4:43:7b:1a:45:a9:57:8d:0c:8a:c9:54:11:
         d1:9b:ee:83:a3:0d:8f:d1:95:07:b8:60:43:7c:6b:4d:a6:16:
         18:61:12:e7:a4:cb:03:0f:d7:b6:00:6e:58:86:7f:83:98:30:
         70:e9:a8:20:6f:10:4f:d4:22:68:db:c2:32:b1:61:4f:a3:40:
         44:21:7e:72:99:07:b9:a1:64:56:97:65:b5:3c:7a:05:de:c0:
         19:1a:fe:1b:ee:2e:6d:fa:d1:37:4f:f0:c6:44:2a:36:87:2c:
         5a:10:de:5f:6e:78:07:0a:c2:74:b5:fc:87:84:35:d1:7e:6d:
         49:b5:f4:43:ce:d7:08:81:1a:b7:bb:c5:8b:a5:43:b9:59:90:
         9d:00:f2:93:ed:f7:a4:c0:11:af:3f:0b:d8:4d:ed:2b:8e:a3:
         8a:de:60:d4:84:ce:22:2a:41:03:13:4a:17:9f:07:ae:1f:7a:
         64:52:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:14:09 2025 by rpki-client