Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42789907-da5f-313f-a7e5-215d3a4c5cf5.roa
File:                     42789907-da5f-313f-a7e5-215d3a4c5cf5.roa (raw, json)
Hash identifier:          R7dM5rXXamyHzelmpkvCApdUS8Cp6IaiMgsVd+ere+E=
Subject key identifier:   BE:E9:2C:1E:4F:7C:6E:2B:F6:C5:6C:93:D5:2D:59:C1:0B:E6:48:86
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A345F51E5AC0BCF1CD50C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42789907-da5f-313f-a7e5-215d3a4c5cf5.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     202
IP address blocks:        66.54.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5f:51:e5:ac:0b:cf:1c:d5:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=a5cbaa1e-effd-4a19-8ff9-a113666b7911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:a4:6f:dc:97:dc:ed:78:c1:9b:fc:73:74:
                    e5:c9:85:c5:b5:1f:7b:87:09:78:47:e8:20:e1:b5:
                    1b:4b:e4:46:03:dd:5b:9a:7f:e8:ac:78:c0:ae:85:
                    f6:6a:16:2a:17:0f:31:e6:8a:7d:b1:4a:85:08:bd:
                    20:12:ba:34:a3:cf:13:ad:90:ba:84:93:13:30:77:
                    27:21:d7:a5:73:27:fe:d9:ec:67:30:49:fe:8d:80:
                    d3:a5:68:92:9d:a8:be:bb:b1:d7:31:3b:d1:5c:87:
                    8a:88:df:aa:3e:c8:40:3b:f8:12:77:47:b1:4e:fd:
                    d6:38:3a:f4:32:05:2c:8e:bb:c6:da:14:b6:c6:95:
                    1e:0d:29:93:34:21:92:3f:f3:81:e2:f7:8e:b2:7b:
                    c1:bc:90:2d:dc:b1:de:40:b4:a1:a3:c8:ff:74:e4:
                    91:fc:62:4a:9c:fe:47:ad:bb:b2:ee:04:2a:4a:7e:
                    3c:0f:9e:32:55:6d:17:da:b0:fc:f6:59:32:aa:e3:
                    36:23:ed:1d:d2:a9:29:f0:a1:4b:b1:52:88:87:54:
                    05:8c:8e:56:42:04:a8:f6:75:5d:53:68:83:ee:45:
                    1b:ee:e5:ca:af:32:15:29:7a:27:54:ac:c5:30:ca:
                    6f:68:9f:00:ad:ad:c6:04:7e:b6:6d:83:c5:1a:0a:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E9:2C:1E:4F:7C:6E:2B:F6:C5:6C:93:D5:2D:59:C1:0B:E6:48:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42789907-da5f-313f-a7e5-215d3a4c5cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:9d:e2:3d:45:e3:e1:a1:b2:68:31:a6:cb:ad:48:cb:56:
         21:5d:98:a6:54:3b:f7:3f:9d:84:88:bb:78:4f:0c:28:1a:f5:
         2a:53:48:0c:b2:0d:d7:75:e8:63:70:71:19:73:36:0b:84:7d:
         31:c8:26:56:8a:84:bc:96:50:33:2c:72:37:7b:a7:90:c9:2b:
         1e:55:9a:63:c2:8e:84:49:d5:e1:64:0c:3b:a6:01:42:a6:3d:
         14:88:59:82:dc:3d:55:19:f5:55:41:bc:d7:52:21:8e:2f:25:
         fe:a1:b5:b7:63:0b:0e:d1:c9:20:04:ba:3c:78:af:21:d3:04:
         1d:8c:42:68:7b:e5:f0:11:ce:f3:fe:d0:d3:50:9e:2e:db:e3:
         11:70:64:3f:61:a7:97:6b:85:cd:b8:c3:84:7b:94:ed:2f:1e:
         d0:60:08:6f:e3:f4:81:4d:8f:bb:10:ce:08:48:3e:43:45:e6:
         01:fb:ba:dc:74:a3:f0:1d:01:84:63:90:44:05:2c:51:79:7c:
         58:97:15:d9:cf:15:87:73:cc:10:02:c2:c6:47:7f:ed:83:2f:
         a8:a8:60:ac:5b:7a:3c:9c:73:32:75:01:62:48:8b:ba:f7:3b:
         cf:7a:c3:22:3a:4d:c2:57:11:98:8d:11:ac:f7:f1:22:b2:85:
         a9:82:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:50:33 2025 by rpki-client