Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa
File:                     aaaac3ee-1605-31c1-81a4-003c07299c97.roa (raw, json)
Hash identifier:          tHCk2FubYnviGA/V153tezLfXP+QHB28VWayK1FOjCw=
Subject key identifier:   49:86:4C:FF:6F:E7:ED:F7:19:0B:CD:C0:F2:B5:9A:0B:89:F1:E7:F3
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F69D559083D6D8E6B97E0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        68.66.208.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:69:d5:59:08:3d:6d:8e:6b:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=b6b9ae46-e433-4609-a090-18be428116e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f6:11:dd:cb:0a:90:93:fc:0c:7c:a3:0d:d0:
                    7f:ba:bd:eb:59:1d:30:15:d3:24:a8:d0:49:4c:91:
                    cd:2b:00:88:67:7d:81:7e:f8:07:ab:11:34:ce:6c:
                    5c:7a:4c:28:68:74:38:2b:50:83:5d:68:4b:b4:0f:
                    1c:22:2e:1a:dd:2c:7e:a9:c6:7d:d6:5e:b8:9d:83:
                    85:8c:26:c1:d6:ad:46:bc:86:df:90:e2:56:1f:62:
                    93:8d:e0:0a:a2:33:d4:09:3d:97:26:f4:ce:30:58:
                    1b:18:1b:e4:16:b9:b1:ae:61:d5:fd:59:55:5e:78:
                    6e:32:ff:38:82:27:4b:6f:9d:73:9d:bd:b0:15:ab:
                    1f:ab:83:3c:98:dc:81:eb:1c:93:94:21:a2:2c:fb:
                    e5:f0:30:2e:4c:60:54:31:4b:23:9b:98:f6:25:94:
                    bc:f2:6a:a4:d8:29:b4:47:e2:4f:cd:5f:ff:1f:9d:
                    d5:9e:18:d2:0b:8a:4f:b9:0b:7e:69:da:0e:e6:d3:
                    e6:75:04:e3:96:fa:f3:54:20:f0:76:bd:cc:f9:09:
                    94:24:9d:47:bb:5f:b5:8f:b9:83:30:b8:9f:53:ec:
                    15:57:fc:ab:9f:2b:23:59:0e:ee:9a:7d:a0:12:01:
                    8b:9a:e4:fb:18:14:44:42:48:26:1a:f5:4f:c7:c6:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:4C:FF:6F:E7:ED:F7:19:0B:CD:C0:F2:B5:9A:0B:89:F1:E7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aaaac3ee-1605-31c1-81a4-003c07299c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:25:f7:e2:ef:fc:a4:17:06:02:4c:92:f8:17:24:cb:e4:fa:
         65:96:d2:4a:cf:d9:ff:51:d1:f8:64:35:87:ff:de:db:95:25:
         23:bd:7f:64:cc:e6:dc:0f:fd:7a:88:84:45:a2:63:55:fa:5d:
         d2:13:3e:24:c9:5b:5d:27:be:b1:07:c3:55:b6:71:fb:7f:72:
         ae:90:bf:3a:69:5a:3b:f9:21:b0:80:92:64:90:78:48:25:cf:
         d7:f4:eb:ab:4c:22:de:67:e1:7b:56:19:1e:b6:9f:76:11:a7:
         cf:5e:04:ee:7b:dd:88:f0:6c:15:e1:ac:e3:4b:91:0e:08:1e:
         75:60:e9:4e:c9:a6:02:35:2a:ba:35:84:c0:e9:98:d8:68:51:
         37:31:6f:4a:87:63:3e:a3:f8:aa:a2:b0:54:9f:dd:df:c0:b0:
         e4:1a:06:60:cd:52:b0:a2:91:5f:db:ac:c6:9e:88:91:d3:58:
         69:23:e3:48:b9:87:18:d2:96:f3:0e:b6:09:3d:56:f9:a8:9c:
         aa:9c:97:09:7b:5d:88:47:88:1b:53:18:45:84:36:8d:17:83:
         c1:c5:bf:7b:46:c3:78:d7:c6:b6:f9:a7:7f:67:90:ca:b9:d0:
         2d:c0:c6:a9:26:bb:a1:45:29:25:0f:4c:3f:ea:83:78:31:1b:
         3d:8e:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:31:28 2025 by rpki-client