Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa
File:                     51c8001a-1279-34b7-87ce-25625e69123b.roa (raw, json)
Hash identifier:          L010GLv3Gf0A9eNHcEWCrVUTykQK4TElnCTYHHHVyTM=
Subject key identifier:   CC:CB:C6:ED:72:C1:2D:9B:CF:AF:A7:15:35:85:0A:62:71:DC:E8:F9
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F43285849D594E600DD8BBBAF89AEBE80
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     6360
IP address blocks:        166.122.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e6:00:dd:8b:bb:af:89:ae:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=7bd56930-ce62-4d3d-aa93-1050a6ada6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:49:46:0f:30:fd:c8:80:ec:33:5d:28:93:0e:
                    9f:81:cb:73:37:cf:83:ec:21:28:cf:0d:9c:88:ff:
                    6f:73:88:de:e2:22:5b:27:10:ae:1f:70:73:9c:9f:
                    c7:08:b6:a5:03:f2:c3:6c:d8:e6:d4:79:d9:bd:f8:
                    f0:71:92:af:17:f2:47:32:96:d1:ee:be:ad:e2:f5:
                    4a:44:86:8f:d1:ca:d7:b1:2d:c9:f0:92:44:f6:3e:
                    21:55:cf:68:b8:f0:11:fa:e8:99:88:3d:d4:24:7d:
                    a9:b6:71:73:39:18:8c:96:36:90:61:8a:9c:e7:c8:
                    9e:e5:d4:8f:58:cf:ed:01:5d:7f:02:22:1c:10:cc:
                    90:07:d2:2b:54:7b:6a:34:8c:18:af:97:16:a5:2a:
                    05:2e:fe:c3:93:30:af:5e:e2:02:18:93:61:dc:d8:
                    a6:8c:56:c0:05:c8:f7:c6:9c:c3:f8:40:ed:d4:60:
                    ac:ce:17:3a:df:22:42:ba:85:af:24:67:8c:df:f6:
                    63:ed:37:ae:a6:36:d4:86:e5:98:0c:86:2a:47:c5:
                    89:6b:e8:f6:df:99:85:21:3e:79:39:c7:c7:8c:10:
                    d4:d6:a9:33:c6:8a:90:1a:f4:ce:a1:1b:db:1f:2a:
                    21:60:11:93:7e:06:f7:91:7a:38:ff:04:f2:8d:1a:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CB:C6:ED:72:C1:2D:9B:CF:AF:A7:15:35:85:0A:62:71:DC:E8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.122.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:71:72:bc:6a:1a:17:7d:4f:59:44:e8:ef:04:3a:95:0e:5e:
         d7:9b:15:85:13:cc:00:e3:5b:02:55:c2:aa:a1:a8:2a:7c:55:
         02:a5:5a:ca:90:de:69:7a:b1:2e:f4:94:01:2a:4a:e8:c8:8f:
         df:aa:bb:6f:b5:1d:dd:ad:57:f6:d2:29:8a:74:ca:95:3f:dc:
         82:59:75:eb:a1:f8:47:a5:e3:ff:ce:5b:34:26:75:30:2f:f3:
         25:a3:d3:4f:31:bb:d8:0a:77:90:f4:05:8e:48:31:4c:f2:f8:
         49:75:15:1d:47:ef:b9:de:96:24:f4:09:b0:2e:c5:9c:42:77:
         f2:68:00:a5:46:79:41:51:4d:5d:1b:a6:d3:65:f8:da:35:c7:
         11:d6:71:4a:e5:4e:f5:06:75:2a:86:01:01:b1:7c:c3:a9:57:
         f0:f3:54:fc:a1:bf:8b:bf:0f:08:21:1c:8a:d4:3e:6e:01:49:
         1f:49:a1:2b:08:b3:4e:ed:fa:73:e9:5e:bb:5a:73:13:9b:59:
         1d:d9:ec:b9:43:83:13:13:ac:28:23:8f:85:ce:55:37:0f:42:
         7a:43:89:e9:17:d3:f7:28:6d:5a:56:5c:df:3f:52:ff:65:48:
         07:69:0e:23:a8:ab:13:24:ab:af:c4:f9:cf:15:b5:2f:5d:3e:
         ae:55:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:04:04 2025 by rpki-client