Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/570bce7a-bdec-301c-ae5f-f4386a5db81c.roa
File:                     570bce7a-bdec-301c-ae5f-f4386a5db81c.roa (raw, json)
Hash identifier:          snXgntKzjp7d7Xw/rTIEa3M0ilp3Zddud8w6vYy9DIM=
Subject key identifier:   5F:BA:B9:5B:21:90:DE:60:FB:AF:B2:2B:C0:F8:04:37:9A:32:46:23
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20B0E0FCAA606CE02E9B8C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/570bce7a-bdec-301c-ae5f-f4386a5db81c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        66.189.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0b:0e:0f:ca:a6:06:ce:02:e9:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ca5c8199-07cb-4e45-aae7-bec36e38a5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:7e:76:d5:34:56:17:32:04:06:46:95:96:
                    e4:eb:c9:e9:be:b7:e2:af:7e:0d:61:ad:da:0c:3c:
                    f7:1e:77:3d:b2:c0:82:79:d6:18:0b:1c:3c:13:fd:
                    f0:20:93:a7:eb:54:99:cd:cb:2e:d4:45:4e:4d:75:
                    3b:44:b9:dc:8f:92:dd:91:4b:63:f7:40:10:03:bd:
                    55:87:d7:d6:c0:f1:41:34:a8:bb:b8:42:9c:83:a2:
                    fa:ba:d0:56:3d:b2:30:76:89:95:1f:5d:db:b5:c2:
                    a6:32:cf:28:c8:b7:58:10:21:f5:b5:55:7f:70:2d:
                    b4:4e:d0:d6:73:68:e0:14:9f:e4:7e:d1:3f:71:ac:
                    b2:6e:00:bc:72:ef:e8:dd:6d:42:71:f3:00:d8:16:
                    23:f0:06:c9:74:1c:9d:d4:7a:54:37:31:50:ce:54:
                    23:30:6b:f7:6e:95:15:f9:dc:a9:04:73:6f:4d:2f:
                    4c:7b:7e:6f:a3:ac:f8:f8:54:da:a2:d8:20:e3:52:
                    5e:c3:b4:25:92:f7:06:f3:f9:74:b4:fc:2e:97:eb:
                    b6:c9:5f:07:cb:54:7f:8a:d7:04:f1:f8:d3:d1:d3:
                    56:a8:7d:d3:02:14:7a:3c:53:54:17:91:f3:ea:9d:
                    e3:e5:76:61:95:07:51:dd:af:cc:79:86:fb:6c:3e:
                    4d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BA:B9:5B:21:90:DE:60:FB:AF:B2:2B:C0:F8:04:37:9A:32:46:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/570bce7a-bdec-301c-ae5f-f4386a5db81c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:b1:01:1b:0a:56:d3:e5:13:a6:26:2f:dd:a1:b0:bd:65:
         d8:e9:cd:51:ea:ad:ae:fa:66:6e:0b:24:9a:15:96:e5:86:1b:
         2e:91:6b:4a:f3:d9:d5:de:f0:ec:66:6e:98:cd:1e:2a:7e:e4:
         20:aa:46:ff:0b:a1:79:bd:e8:4e:69:3c:60:7b:56:de:1c:8b:
         67:0d:60:a6:40:ce:1d:14:70:4b:6e:2b:18:4e:1d:d7:02:15:
         2a:06:9e:97:0c:02:af:df:69:c3:10:84:5f:c0:92:15:d5:c1:
         83:f7:14:52:e2:9c:66:14:19:4c:c7:db:53:49:1c:6c:5d:ff:
         43:9e:c3:0d:1a:20:b4:cb:9a:74:f9:80:02:f7:11:97:96:b2:
         db:a5:7f:d3:ea:e6:42:c7:21:fa:e2:02:94:94:77:11:99:ae:
         67:fd:60:86:10:cb:bc:1a:35:77:34:9b:ac:f6:20:f3:a2:de:
         15:6b:e4:ae:9e:2b:0b:9b:7d:83:b2:70:c5:91:f8:f7:8c:87:
         b4:42:3d:e7:47:4b:90:bc:7a:51:6b:3c:b7:7f:c4:be:48:ff:
         b4:f2:b0:d1:79:2f:b4:be:cb:2c:7b:08:ff:12:3e:42:5f:bf:
         e6:2b:92:37:74:bd:36:f2:1b:51:ce:f2:6e:75:e8:04:a5:42:
         06:19:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:00:46 2025 by rpki-client