Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ecc4c458-ee69-3b3f-9bfe-5886258f9f65.roa
File:                     ecc4c458-ee69-3b3f-9bfe-5886258f9f65.roa (raw, json)
Hash identifier:          cqWPqirDgCKQt0hH+aNmyKMYeEHNeu/eWCZ7QQU2rHw=
Subject key identifier:   D7:5A:7D:5A:E7:00:B0:6D:29:44:8E:ED:AF:6A:F1:71:D0:09:A1:24
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F69A404E22D9315F8B9E0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ecc4c458-ee69-3b3f-9bfe-5886258f9f65.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        66.198.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:69:a4:04:e2:2d:93:15:f8:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=3c57d7e3-64d1-4d75-b065-ea124f9855a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:b4:e4:3e:cd:da:32:42:3e:17:a5:08:ab:
                    0e:05:f2:be:dd:bd:31:2a:cd:66:a6:7d:ee:5f:62:
                    98:e8:c2:22:aa:8a:f9:22:70:9c:2b:14:24:70:f6:
                    71:e3:0c:df:3e:70:14:7c:8e:86:8e:33:ea:99:96:
                    8e:5f:7b:63:f4:ea:54:5c:05:3b:4e:ec:0a:b0:5c:
                    43:05:1b:a7:e7:0d:db:12:17:b0:d2:ad:33:fe:b4:
                    b9:17:9e:3e:73:41:8b:a0:2e:9f:8f:91:54:ca:39:
                    2e:78:65:40:fb:15:19:3e:4e:dd:cd:3f:60:bb:1a:
                    ea:8e:2d:31:86:35:74:f3:4a:d8:32:aa:b9:81:de:
                    7e:c6:d3:1d:64:91:b6:c3:3c:b4:d5:42:83:4a:6b:
                    e7:71:74:44:ff:60:27:d4:e2:e5:1c:42:f7:c0:c2:
                    05:d6:5f:8a:3c:93:df:4c:9a:e6:5c:83:9e:88:9b:
                    89:75:af:ac:12:39:31:99:f6:cb:9a:97:1c:6a:d5:
                    a9:49:37:ae:35:4e:16:28:c7:24:a0:1b:e5:98:4f:
                    73:c2:45:cf:dc:ba:f8:94:6d:2d:ca:37:c9:ee:74:
                    c4:99:12:d4:4f:af:d3:7c:2d:ea:f2:03:50:b7:96:
                    8e:2f:cd:90:11:d0:a1:cc:d2:54:a6:de:c7:8a:11:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5A:7D:5A:E7:00:B0:6D:29:44:8E:ED:AF:6A:F1:71:D0:09:A1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/ecc4c458-ee69-3b3f-9bfe-5886258f9f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:5c:58:7b:1d:97:4b:2a:00:76:03:9a:7f:15:a0:f4:1d:
         63:38:60:e1:42:77:64:f7:9a:21:26:5c:80:3e:61:b1:c7:b8:
         23:3d:78:54:7d:c6:2e:ea:f2:9f:04:d6:8a:d0:8c:c0:a9:c8:
         0d:bc:d9:aa:b8:70:ca:a3:5b:42:50:57:8b:b0:43:d4:cd:a4:
         94:08:5f:04:20:e0:81:89:f4:92:4c:a0:bb:18:eb:80:bc:75:
         aa:da:e3:6d:3b:51:1d:6f:9b:45:2d:f8:03:e1:a1:08:65:ff:
         da:26:ce:86:d6:31:e7:c8:62:24:34:19:bf:92:5c:6a:e6:58:
         ae:b7:4d:5d:0a:a3:57:17:e4:5b:ee:b7:d2:c9:94:b9:c8:4b:
         c0:c7:90:03:17:c3:10:4f:c4:26:16:17:9a:22:cc:0f:39:04:
         c1:c2:38:2d:2b:8b:19:19:38:b0:e5:43:c9:57:07:d1:20:b4:
         78:ad:70:24:58:c7:08:fe:ff:fc:e4:b9:eb:6f:b3:70:57:7c:
         c5:db:0f:a6:e8:d8:d4:ff:25:18:07:a4:5f:5e:ae:43:22:6c:
         42:4d:ef:40:5b:7d:76:49:e4:39:ea:8c:14:d4:e1:84:2b:04:
         a1:70:ff:2a:ab:14:9c:c2:f1:02:3f:bc:96:c4:4c:82:41:57:
         a3:18:50:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:57:21 2025 by rpki-client