Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
File:                     541af175-265a-3096-8295-96504805d06d.roa (raw, json)
Hash identifier:          kdyoeFw1r57ZSlVvzeE1kimn0lgxo5wY5RjNqPmCPvU=
Subject key identifier:   A6:42:4E:E2:78:F2:38:27:AE:E6:60:8B:33:A0:88:3D:1D:B9:77:E2
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F43285849C4D4C6768739DE98F61C0480
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     62537
IP address blocks:        66.85.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c6:76:87:39:de:98:f6:1c:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=253f7e62-c2e8-4418-af3d-2444db5eb158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:2b:cc:ef:b9:92:d5:62:c7:6a:47:0e:60:
                    5f:fc:88:30:c1:75:a3:3b:5d:eb:46:a2:80:bb:ea:
                    3c:97:46:d7:39:9e:67:68:82:e3:a2:ff:46:88:d7:
                    5c:e1:21:e7:ac:15:b0:a7:d3:3c:73:2b:c3:49:98:
                    d3:e6:99:41:6d:2c:c7:a5:28:25:69:8d:69:fb:73:
                    97:76:94:65:cc:bc:bc:fb:5a:ac:31:f7:02:8d:c4:
                    3b:a9:8c:14:30:70:8d:2f:93:be:c6:d0:8f:26:c5:
                    d3:d6:d7:53:1a:2e:95:08:ae:a5:c0:b7:ba:a8:c0:
                    db:3d:d1:42:31:b2:fc:d1:22:f4:9d:e9:9c:c9:93:
                    28:ab:dd:8a:a2:84:c8:11:c8:8c:a3:6b:6a:cf:7f:
                    55:8b:14:63:42:93:5a:b9:bc:c4:aa:2c:a6:ed:0c:
                    5d:cf:36:8c:c7:4d:79:03:09:8b:47:6a:47:cf:f5:
                    9a:17:bd:af:3b:0e:33:7a:81:6e:c1:d8:61:ae:9a:
                    e8:d7:3e:48:a0:30:f8:31:a9:6e:0a:fd:ef:25:23:
                    32:2b:7c:19:61:40:0d:c0:fd:64:8c:5e:de:76:b4:
                    e1:44:53:78:f2:33:71:e2:bf:83:a0:9a:af:72:2a:
                    5f:ea:b4:89:01:21:2d:17:43:23:d0:44:ed:7e:15:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:42:4E:E2:78:F2:38:27:AE:E6:60:8B:33:A0:88:3D:1D:B9:77:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:76:fa:b9:20:d1:1b:36:cf:d9:f1:c1:71:6f:e0:50:3d:8a:
         b5:ac:62:5e:6d:57:f6:15:eb:21:f9:cd:22:43:89:1d:11:4e:
         1e:ee:f8:b5:10:a3:8e:9f:35:54:c6:83:9f:53:cf:9e:7c:5a:
         c7:46:2a:36:89:37:5b:0e:bb:9a:39:c3:3e:57:e3:dd:27:c9:
         e2:8c:b8:75:06:05:7f:de:52:e3:8e:4d:8f:c8:4b:09:4e:9d:
         34:fa:41:c7:02:ac:f2:2e:26:86:ac:e2:f7:e0:7d:3e:31:3c:
         5a:f5:a5:04:fa:f0:00:b8:c4:92:62:9d:cb:e7:7b:f2:d1:3e:
         00:73:97:32:af:67:06:61:fb:a7:a2:f3:4b:73:78:a7:c9:8a:
         12:60:aa:58:5d:95:54:b9:ae:57:ab:8d:a3:08:76:c6:fc:8b:
         83:2e:73:58:e7:e2:d6:13:81:9a:e6:ea:9c:99:f1:fd:c7:08:
         56:f9:1b:de:a8:2f:73:4b:e0:72:88:00:c6:d4:0c:2f:cc:ec:
         92:80:40:7c:77:2a:46:e2:1c:25:b3:29:a7:6a:b2:ad:64:1c:
         73:a0:b3:c5:1d:67:e4:5d:9b:eb:2d:06:09:c0:9d:6b:6e:f6:
         bb:bd:a1:1a:fa:f0:aa:fb:56:52:24:c4:22:47:85:d0:27:bb:
         25:f1:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:46:21 2025 by rpki-client