Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2cfab714-92fb-35cd-bfc3-05e44d9502a0.roa
File:                     2cfab714-92fb-35cd-bfc3-05e44d9502a0.roa (raw, json)
Hash identifier:          tp3t/utesZmdYzwbxy4zINg+MSuHhRYfzNnG8LbTzv8=
Subject key identifier:   9B:6A:E2:AE:56:9B:8A:E3:C0:95:C4:F7:A4:A4:0A:93:BD:6B:A3:2E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B12B8FBEB4D6955A12080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2cfab714-92fb-35cd-bfc3-05e44d9502a0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        66.188.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:12:b8:fb:eb:4d:69:55:a1:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c01e05ae-b049-4f3b-b45c-38a946927e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:ee:ba:a1:22:64:11:af:2c:47:ea:d7:79:
                    72:ed:3e:a2:c4:03:16:d0:be:20:1c:a3:b8:5b:49:
                    50:87:f5:af:ab:2c:0b:e7:ca:9b:9d:23:44:a0:1d:
                    0f:8c:6f:c7:fb:36:70:f7:8b:b8:b8:92:b8:6c:1a:
                    2f:a2:fe:25:6e:cf:70:06:5c:dd:c1:83:61:e0:9d:
                    cc:38:a8:a2:c8:80:9f:e6:61:ce:3c:25:1e:18:17:
                    eb:62:82:06:45:8c:18:80:68:6c:40:ae:88:9d:b5:
                    d1:c2:e8:b8:ed:e7:79:93:8f:d7:06:05:de:e4:8b:
                    41:fa:bb:1d:73:48:7c:b5:0b:a7:44:21:b2:9e:a3:
                    c0:a3:af:fd:67:f7:c5:3d:05:9c:82:5b:3d:b8:7e:
                    9d:8f:f0:06:0e:5e:10:8d:16:5d:82:ae:52:f5:62:
                    d8:62:4a:86:26:2d:8b:e1:30:31:91:35:10:05:e0:
                    c8:18:ea:3e:36:e8:75:96:a5:5b:8a:8a:df:c8:c1:
                    6b:79:53:e7:18:1e:17:23:b5:a2:5b:1f:69:14:bc:
                    31:d6:52:e0:67:b8:e9:bb:7e:3c:55:b7:35:d0:25:
                    4d:10:53:09:31:b9:ee:ba:51:ac:21:95:d1:48:b6:
                    2a:77:45:c6:ee:7c:d2:b3:fa:c6:28:ee:1c:37:21:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6A:E2:AE:56:9B:8A:E3:C0:95:C4:F7:A4:A4:0A:93:BD:6B:A3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2cfab714-92fb-35cd-bfc3-05e44d9502a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.188.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:1d:32:0f:a0:bf:ce:93:b2:9e:c0:d0:54:57:24:8c:8c:
         f9:d1:c4:ef:2e:f8:b7:92:fc:d6:8e:b4:fd:9c:f5:f7:c0:c8:
         37:bd:5e:49:34:62:65:61:66:b6:72:4e:9e:ad:ab:7a:72:64:
         49:34:03:99:25:fa:8d:9c:09:f8:ca:31:5c:b3:73:3e:63:13:
         45:37:16:dc:1e:f2:b5:5e:81:85:03:aa:82:04:13:c0:1f:30:
         f1:21:d0:d3:65:43:c5:41:f1:db:2c:1c:8b:1d:5f:bb:91:55:
         6f:a3:1d:1f:39:3e:ce:b7:40:aa:b6:a2:b5:a0:1e:31:19:c7:
         e0:f8:3d:db:24:85:03:c8:9c:f5:b8:1c:fd:c5:e2:ba:7f:cd:
         54:a5:e2:01:19:8a:c6:40:58:a9:e3:24:27:12:6c:ec:d9:51:
         95:70:eb:3c:f6:f6:38:d1:8f:51:8c:f5:a8:60:f0:99:22:9d:
         83:2d:b4:80:04:af:52:31:f7:e8:52:92:b8:95:02:1d:6c:8f:
         51:fd:4b:4a:2c:61:58:51:78:af:be:a2:79:e1:ef:57:98:64:
         6e:37:00:02:ae:7a:14:ac:13:eb:ff:1b:b4:ce:1b:56:8a:78:
         a5:af:0c:bc:c7:87:f6:2c:38:d6:6c:a0:57:de:09:6b:be:12:
         b7:d4:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:40:12 2025 by rpki-client