Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa
File:                     0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa (raw, json)
Hash identifier:          z8L2SZE7IH1n0OF/uWn6kqczuGhtBOFff+vTLgJfM7Y=
Subject key identifier:   A2:98:67:7A:0D:44:1D:A7:E1:2D:55:DC:C6:6C:96:B6:D2:D6:CA:02
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A345FBD3BA20B2020B42B60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     203
IP address blocks:        66.54.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5f:bd:3b:a2:0b:20:20:b4:2b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=eb072c51-69ac-4f0e-8823-58a34677eda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:5d:a5:dd:5c:85:3e:e7:02:bf:70:86:14:
                    60:97:14:0b:01:d8:41:e7:b9:40:14:0b:c1:86:99:
                    f1:ce:c3:0a:d8:42:5a:50:3d:68:61:9c:9e:3e:2c:
                    e0:f3:fa:5b:3a:a7:e9:5e:16:61:c8:b5:d6:2b:29:
                    21:74:ce:0a:83:3f:74:86:57:42:3a:d9:69:18:0c:
                    bf:a6:8f:bd:c5:17:14:b6:18:0e:62:44:f9:1a:a9:
                    ab:80:00:96:e7:d6:7a:8b:d6:06:a3:84:a5:34:d0:
                    bb:b6:b7:ac:fe:0f:e8:23:f1:67:06:94:f7:5b:e7:
                    65:ae:14:ca:a6:08:42:cb:f5:47:a4:bd:13:9b:af:
                    80:39:16:ef:d1:21:a6:4a:5e:f6:7b:56:21:97:39:
                    76:b4:f3:80:6b:c0:2e:5f:53:05:93:db:5e:ac:9e:
                    67:7f:42:b4:15:8f:ff:69:d6:63:7b:6a:38:e1:aa:
                    54:6b:ef:ad:28:77:86:39:5c:c6:9f:a6:d8:b9:d1:
                    80:7a:bb:f8:14:59:27:36:a2:58:02:d0:82:fa:d1:
                    c8:77:41:6f:f5:96:b7:10:44:35:25:db:6b:68:4b:
                    1b:9e:f5:7d:b7:f7:a9:23:74:5f:ac:99:87:af:44:
                    f4:f9:c1:bd:04:e2:91:07:c5:8f:5f:4d:c3:22:a4:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:98:67:7A:0D:44:1D:A7:E1:2D:55:DC:C6:6C:96:B6:D2:D6:CA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:d1:2c:a7:60:cd:91:47:b0:bc:c0:34:34:d5:aa:f6:05:
         86:d1:12:bd:f3:05:e1:0e:4b:61:45:7e:5d:b1:99:8f:e6:c7:
         39:59:02:e5:ac:78:aa:39:92:b6:be:b8:a5:f6:08:15:9e:53:
         e4:2d:43:f0:f6:2a:87:3a:fc:ab:56:f7:cf:e7:d9:93:a8:c0:
         cc:04:b0:76:79:98:a2:5f:60:46:92:ab:16:10:1c:2e:70:db:
         ef:ff:b2:cd:f6:1b:56:9f:dd:0e:13:2d:f9:4a:6d:f1:2f:c5:
         62:33:9d:c9:e7:c4:7c:7d:0f:a2:d5:1e:d3:a8:bd:d6:e8:d4:
         6d:7a:8d:34:2d:1b:ce:fe:22:74:d1:5a:2a:2b:83:22:c6:12:
         0f:a4:38:2c:a0:4f:e1:db:88:4f:ec:67:7d:ee:85:e7:aa:f4:
         39:3d:d2:06:72:2a:5f:a5:ce:2b:8f:62:6b:5f:e1:5b:fe:ff:
         b1:8a:27:39:6b:64:8b:f9:18:3f:c9:43:bf:be:dd:82:e6:8f:
         15:fa:a2:c6:48:7c:92:bb:b8:c3:d2:be:30:22:e7:f6:37:05:
         f8:cb:54:76:e3:79:7c:fd:b9:f3:73:b2:c4:29:20:e9:26:60:
         83:9d:8c:46:53:40:e0:54:51:c3:8a:bc:34:2f:b4:07:98:28:
         8a:80:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:02:42 2025 by rpki-client