Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d855806c-af66-3885-a39c-bbf1c757602d.roa
File:                     d855806c-af66-3885-a39c-bbf1c757602d.roa (raw, json)
Hash identifier:          kiZrH1mwa3u0jXfPyWapUy34ySZsc4nAuIdZA3YYCR0=
Subject key identifier:   6A:86:DF:90:9D:7B:AA:FE:B7:A7:84:E3:D8:4F:BE:6B:CF:66:F9:1B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A582588D5DB760B87C300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d855806c-af66-3885-a39c-bbf1c757602d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        66.75.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:58:25:88:d5:db:76:0b:87:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7f0d4090-7d4b-41f5-90af-d0558fc13204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:5f:d8:24:eb:4a:33:35:7d:7a:48:37:6c:
                    a5:4a:c0:b2:e1:10:0e:e4:bb:1f:dd:a7:00:34:6b:
                    42:30:05:a2:72:a8:53:2f:ad:ad:6c:68:8d:ed:c3:
                    c9:6e:e8:ea:cc:73:f6:6a:cf:55:c8:43:f8:a7:80:
                    cd:57:05:a7:b9:6e:8f:96:9e:c1:8a:3a:6d:da:b0:
                    c0:6b:1c:a9:4d:77:63:03:38:d0:6e:43:8e:3f:b6:
                    9f:7f:cc:59:b5:8e:cb:3e:be:20:d4:66:df:b2:17:
                    d5:a6:aa:0a:bc:71:1e:fc:c4:2d:30:55:c3:af:43:
                    16:17:dd:4a:51:ab:a8:07:37:da:a5:f7:15:e5:70:
                    5e:9c:a4:11:c3:ca:c3:b2:e8:03:a5:c6:fd:cc:ef:
                    c7:88:5b:12:3b:36:38:e1:25:7e:c7:d2:8b:fa:01:
                    50:4d:5a:8d:a8:4a:71:50:7a:a2:2b:a4:3f:37:d1:
                    20:87:36:49:d3:a4:a2:46:5a:cc:f9:da:a4:3c:18:
                    11:c2:37:63:5b:78:0f:4c:0f:60:4a:70:a1:d0:4d:
                    8a:46:d3:1f:3e:6b:f6:1b:07:e5:54:6c:7b:03:af:
                    b2:4c:12:ee:90:53:04:2c:79:a2:f8:c6:62:32:31:
                    33:00:a8:79:b1:1c:87:77:00:3f:9c:64:7a:60:de:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:86:DF:90:9D:7B:AA:FE:B7:A7:84:E3:D8:4F:BE:6B:CF:66:F9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d855806c-af66-3885-a39c-bbf1c757602d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:a7:f1:05:4c:3a:77:28:54:25:2d:aa:1c:05:a5:88:9a:
         81:7b:e9:a8:20:66:b1:87:e6:2c:71:9d:f9:9c:4e:ed:a4:5b:
         ab:87:d9:5f:b6:97:7d:93:18:20:e5:72:71:0f:da:f6:f3:25:
         ac:dd:96:c9:66:97:50:b9:c4:6c:4d:ed:bb:2a:3e:b5:16:89:
         3c:a4:59:c4:f2:22:58:ac:e8:8c:33:95:2b:a0:d3:01:d3:2c:
         32:17:26:0f:0d:e1:30:a6:22:9f:be:e9:e0:f5:d7:36:72:20:
         a3:56:f5:77:db:0b:60:09:17:0d:bd:c1:a2:6b:d3:22:09:ed:
         19:5c:41:3f:06:87:be:d5:41:57:e9:0f:03:08:e4:64:d2:02:
         8e:9b:8b:29:49:c4:4b:ff:d8:eb:8d:ba:81:3b:a4:09:36:e1:
         81:7f:4b:f7:27:e4:0f:b6:e6:f0:8a:14:8a:af:d0:23:6e:3a:
         f7:45:44:52:21:0b:22:7b:e8:a3:34:16:0c:4d:53:3c:0f:b0:
         4c:89:25:70:31:17:36:67:42:e4:79:83:09:72:e9:e1:98:d8:
         40:db:5e:c4:0f:b8:37:e7:59:45:3a:d1:2c:3a:a9:b2:eb:e6:
         65:74:51:d8:45:c6:ce:0f:7a:42:a0:8b:3b:57:f0:69:14:46:
         d1:bc:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:10:33 2025 by rpki-client