Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa
File:                     e05980ac-da96-32ce-98dc-c394a2925f26.roa (raw, json)
Hash identifier:          v+Sn48SVjkyLW5I3FkcJhNIS/+d/Qqmy7c0dPTRsXdg=
Subject key identifier:   15:6B:6B:19:C7:35:90:C4:E8:A2:21:69:78:C3:2E:F8:45:59:97:04
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584A1B600378CBC7F7924DCFBDC0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     21949
IP address blocks:        207.66.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:03:78:cb:c7:f7:92:4d:cf:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=56d448b1-7888-48aa-888e-788b6603b692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:44:fa:26:86:f0:09:9c:b3:34:1d:56:91:cd:
                    13:ed:2e:28:c0:55:72:49:b0:97:d3:23:ce:2e:0a:
                    9b:3b:6b:13:96:3b:6d:0d:9a:bc:73:ec:d3:86:e8:
                    32:b9:59:6f:f3:3c:13:2a:e3:c4:59:db:fb:8a:8e:
                    d8:5a:66:36:11:5e:c3:a6:6c:9b:2a:4a:0b:69:a9:
                    5a:71:6f:6b:67:6e:26:e7:af:23:92:15:b2:17:cc:
                    13:36:8f:08:90:ce:e4:37:99:06:cf:f5:93:3b:b4:
                    42:e9:84:5a:da:f9:5b:80:87:4e:c6:8c:7a:55:e5:
                    df:11:3e:91:b0:38:26:f5:f4:54:05:f6:b7:6a:b2:
                    e7:ed:b2:c0:6f:79:01:4a:4d:fb:6c:52:12:cd:11:
                    ac:8e:10:56:5d:26:5d:7f:e3:fe:58:64:8d:a1:ce:
                    79:2e:81:3a:2e:54:3e:b4:ce:31:1c:1d:a8:c3:ff:
                    65:44:07:d1:1b:49:93:6d:77:38:7c:8d:24:80:ba:
                    b8:f4:67:da:55:f3:23:84:d2:83:f8:71:7c:02:a1:
                    3f:6d:a4:d6:3d:8e:2c:d4:bb:53:92:0b:f5:82:c3:
                    2b:97:30:da:6b:e0:66:db:7b:96:bd:24:52:71:95:
                    26:d1:21:73:5b:35:4b:0b:3f:71:af:e3:f6:f5:a4:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6B:6B:19:C7:35:90:C4:E8:A2:21:69:78:C3:2E:F8:45:59:97:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e05980ac-da96-32ce-98dc-c394a2925f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:64:1d:87:b1:1e:bb:ad:60:12:4f:59:eb:f2:20:e3:26:
         33:c9:d1:27:dd:3d:5e:8b:c8:74:b6:55:66:36:51:68:5b:12:
         b6:6b:a3:6c:96:56:44:ae:9c:98:34:01:96:da:82:49:a9:ae:
         24:8b:47:e5:17:af:fb:e7:53:01:09:39:76:85:54:de:10:0e:
         32:dc:13:96:94:fa:85:b3:94:41:7c:54:b8:ea:91:cc:9a:02:
         76:50:42:d0:2f:b0:d6:f2:d0:e1:5a:2e:cd:47:e0:65:e6:ec:
         85:1d:34:3d:3c:49:80:df:32:e6:03:67:e0:9c:1c:e4:78:8d:
         15:a6:17:28:f3:b0:df:fd:8a:53:10:25:ec:cc:bb:27:76:76:
         3c:2c:22:61:f3:40:b5:25:73:a1:34:3b:cd:b3:10:7c:62:11:
         13:fd:9e:6a:07:53:ce:48:1d:96:87:c3:1c:49:9f:c1:e1:df:
         6b:6c:6a:bf:2c:4f:80:c6:f5:65:a8:3f:00:2c:2c:fa:d1:d4:
         e9:7f:d0:08:60:bb:49:3c:23:b7:8c:38:7c:58:86:cd:05:d5:
         29:a1:13:71:62:73:92:81:38:54:dd:98:93:ff:c3:f2:4a:00:
         c9:df:dd:57:b8:46:c3:fe:0b:88:00:61:d0:78:ec:05:b9:e7:
         3f:6e:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:56:23 2025 by rpki-client