Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa
File:                     f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa (raw, json)
Hash identifier:          faEbEpBgN8DNN8PgijbdpiXSpUKh+UW2qyXkzA8qvkY=
Subject key identifier:   BE:93:4D:DE:B6:82:8A:F5:87:AA:47:19:B7:F1:4D:D7:F3:BB:3C:A8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D594EA6D56A4C212BFEB3E00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     4997
IP address blocks:        66.213.144.0/21 maxlen: 21
                          66.213.152.0/21 maxlen: 21
                          66.213.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ea:6d:56:a4:c2:12:bf:eb:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=01a4ff9d-60ec-49d8-821d-a8be5da73c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:4e:eb:b8:f9:6d:f9:d5:38:87:94:09:52:
                    99:cc:3b:c8:af:d8:60:f2:f7:f8:de:46:9b:71:ff:
                    27:e8:5a:2a:04:53:a8:b8:12:f8:44:a6:2f:e1:37:
                    e2:59:4b:c8:33:ae:a9:ae:a5:91:f6:55:cc:a8:1a:
                    6e:a8:12:fd:bf:c9:f2:7c:51:7e:00:37:25:e9:71:
                    be:b0:60:f5:84:1c:21:96:f9:c1:26:7f:c0:a4:a2:
                    3a:11:a3:6c:26:76:36:b1:4d:6e:bf:db:4c:87:72:
                    a0:76:9b:fd:96:53:e8:5a:ec:d5:6a:77:6d:38:d3:
                    a6:e1:08:2e:6f:bc:2d:f4:28:2e:76:85:27:63:8f:
                    6b:e3:a7:d4:51:ce:51:27:1d:c6:9c:ca:71:05:26:
                    5f:bd:87:56:02:ea:79:34:fb:5e:4c:fe:36:be:9c:
                    cd:e7:dc:45:14:eb:0d:19:89:3e:b5:59:37:82:a7:
                    f8:ae:19:e1:e3:84:87:55:e6:a3:12:d0:c3:b1:57:
                    15:81:f9:ca:7f:fe:e2:d5:56:a5:9e:62:e7:24:1d:
                    4b:6a:07:51:3c:d6:a5:27:c7:b5:5e:9b:b8:1b:49:
                    b4:3a:d7:e6:80:ec:c2:d4:8c:e3:27:58:b8:6a:fa:
                    15:7f:69:f4:f9:66:31:82:56:1a:a8:0f:63:30:aa:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:4D:DE:B6:82:8A:F5:87:AA:47:19:B7:F1:4D:D7:F3:BB:3C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f804b9fc-d5fc-3af4-99a2-11b31f98e48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.213.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:90:42:67:c5:2f:02:2f:f9:20:31:28:35:2e:a0:e5:51:4e:
         85:56:20:e4:c2:62:34:15:b8:0a:bc:6e:7f:e0:2a:52:10:94:
         54:97:e4:58:66:02:4b:d8:d0:a8:fa:ae:3a:24:af:ed:21:a9:
         96:b7:21:83:5a:f8:7c:7c:83:fe:20:6a:9d:61:a1:64:10:a2:
         af:70:85:6a:fa:52:41:7a:14:28:63:37:29:6b:43:14:00:4b:
         46:67:61:c1:7e:01:f3:67:9e:ca:71:b3:f7:7a:3f:26:9a:ce:
         0f:1f:c4:1f:7f:16:fa:8f:80:75:55:8e:1a:6c:f5:08:a5:f5:
         35:74:c2:f2:2d:af:f1:68:23:b7:5a:e6:fa:46:33:58:95:34:
         13:5f:45:0d:ff:ca:93:5d:f4:59:17:cb:4f:61:70:09:8c:92:
         9a:a2:13:fd:d3:5c:6c:41:2a:63:f2:6e:5a:4b:87:8b:55:25:
         66:fc:91:d6:13:01:ac:6b:bb:c7:40:27:35:8c:19:16:d6:5c:
         ae:32:5a:26:cc:0b:33:c6:16:b4:74:7f:df:71:10:be:3d:76:
         05:c2:89:c9:a7:0f:d8:66:19:da:f9:dc:d6:e5:10:5f:42:4b:
         d9:12:95:1b:f4:b9:15:21:4f:fd:7b:34:37:24:0e:fb:85:e1:
         2a:df:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:09:17 2025 by rpki-client