Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/6749977b-b9d1-3113-9ce5-d8bb24005644.roa
File:                     6749977b-b9d1-3113-9ce5-d8bb24005644.roa (raw, json)
Hash identifier:          N06Odl1pSI927hjPXB6BabOrt8TvyMj0zw481b2ARgk=
Subject key identifier:   D3:8E:82:E2:7E:78:DE:32:9E:20:3C:75:71:5E:E1:22:2C:10:E8:24
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F43285849A1EF6F362609B22F85071C80
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/6749977b-b9d1-3113-9ce5-d8bb24005644.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     263783
IP address blocks:        66.119.92.0/22 maxlen: 24
                          66.201.160.0/20 maxlen: 24
                          66.201.176.0/21 maxlen: 24
                          66.249.192.0/22 maxlen: 24
                          66.249.196.0/23 maxlen: 24
                          66.249.198.0/24 maxlen: 24
                          66.249.199.0/24 maxlen: 24
                          66.249.200.0/23 maxlen: 24
                          66.249.202.0/23 maxlen: 24
                          66.249.204.0/22 maxlen: 24
                          216.184.96.0/21 maxlen: 24
                          216.184.106.0/24 maxlen: 24
                          216.184.107.0/24 maxlen: 24
                          216.184.108.0/22 maxlen: 24
                          216.184.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:6f:36:26:09:b2:2f:85:07:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=5851a2ec-7109-4ef3-97ed-63031572083e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:09:24:d1:94:f4:d3:bf:3c:10:ca:70:d2:
                    8c:ee:81:83:81:90:05:3b:9e:78:fe:11:4a:d6:83:
                    23:d0:21:c9:c3:a2:01:44:66:65:d6:22:0c:a2:14:
                    10:50:76:cf:48:5c:a9:cc:d0:ec:1b:43:dd:d4:fd:
                    a0:90:80:c0:2d:6f:6d:6f:42:62:bf:07:19:91:5a:
                    f8:8f:ac:86:67:e1:8d:86:f4:8f:1b:e0:b8:bb:ee:
                    8d:e2:e3:dd:8d:ae:e3:93:0f:27:27:98:18:ce:85:
                    16:c0:fa:6c:fe:ac:e4:fd:fa:b9:ec:ab:02:47:ed:
                    5f:c8:2c:84:57:79:5a:b2:0b:85:7b:07:0f:bc:27:
                    b8:f0:c5:fd:e2:f8:85:f4:2c:e8:dc:93:22:97:fb:
                    b6:0c:24:fb:d5:49:f7:7a:e4:85:f6:ff:41:93:1b:
                    53:a6:5a:ba:89:62:c5:64:77:b3:a2:d6:bf:bb:8b:
                    0e:20:9e:54:88:26:81:09:6e:1e:1d:73:ac:a5:20:
                    d9:be:0e:bb:63:12:9b:b5:d3:21:22:60:e6:47:33:
                    6c:f0:3e:76:66:cf:a4:06:e8:41:7b:35:a1:1a:de:
                    1a:03:02:ee:98:6e:32:66:75:eb:3a:b7:ae:2a:87:
                    46:2a:29:67:da:e7:9b:c7:87:9c:75:fa:3a:12:79:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8E:82:E2:7E:78:DE:32:9E:20:3C:75:71:5E:E1:22:2C:10:E8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/6749977b-b9d1-3113-9ce5-d8bb24005644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.92.0/22
                  66.201.160.0-66.201.183.255
                  66.249.192.0/20
                  216.184.96.0/21
                  216.184.106.0-216.184.111.255
                  216.184.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:d2:4c:0a:43:b0:19:fd:6f:93:db:4f:af:c0:5a:94:ea:
         6f:58:17:77:cc:c5:48:b3:b0:90:61:30:f5:af:19:93:25:69:
         5c:6e:dc:95:d0:82:58:5f:53:e1:c7:4c:dd:f0:cc:7d:60:ed:
         1f:68:9a:cd:9e:9c:56:7c:af:21:33:37:b6:6e:94:4f:89:c9:
         f1:48:8c:d8:d2:05:8a:33:c3:ab:61:a7:c0:2d:1b:3b:f3:17:
         45:73:01:60:e5:19:ad:c5:11:ac:7c:36:8e:23:bf:a5:93:9c:
         a6:98:48:61:fa:1c:5f:6e:4e:55:06:e0:3e:63:ed:d3:79:b7:
         e7:1e:a0:9d:44:1c:d7:1e:e0:82:d9:01:8e:fc:b0:b0:54:ce:
         16:74:e0:a3:93:90:bd:35:f4:f0:24:97:3d:cd:0e:21:c1:24:
         64:ca:9d:fb:52:b2:24:e0:94:64:7e:04:2d:7a:00:57:c2:33:
         82:e3:6e:81:76:33:ed:d3:e1:84:5b:8e:cc:6e:c1:2a:4f:4a:
         3a:6f:93:0f:d3:a8:23:ca:c9:07:0f:cb:65:11:1a:f2:c8:b4:
         b6:03:96:37:d9:05:4d:ec:36:7a:82:df:e7:b4:71:1c:b3:36:
         65:0a:af:12:6c:f4:8c:01:6b:31:e1:d5:29:fe:eb:1d:d2:e4:
         aa:4a:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:26:03 2025 by rpki-client