Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa
File:                     f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa (raw, json)
Hash identifier:          5/hJyBgbAMLJXkTyLqTWuuvbFsKu3k4WtPE3Xfbjf08=
Subject key identifier:   9D:3B:BA:96:88:1B:92:7D:5B:A2:A3:25:33:CD:10:BC:97:17:10:86
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB13CBDD3B23B29AB0640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     12097
IP address blocks:        216.66.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b1:3c:bd:d3:b2:3b:29:ab:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7fb752e4-48a5-4613-9363-a062c12566c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:2c:c1:a7:44:2f:50:d8:18:c4:2c:50:66:
                    07:e8:99:e3:8d:a2:cf:14:ea:dd:31:d3:03:d3:e1:
                    24:ad:98:ee:4d:30:54:cb:a0:1a:7a:cb:15:16:9a:
                    4c:71:4f:77:f8:49:0e:ce:6b:79:d1:0f:30:5c:d2:
                    d8:e3:87:4f:d2:6c:cd:73:86:f4:fd:08:fc:df:96:
                    72:b4:f2:ff:7f:1d:f4:05:7f:19:f9:0b:32:12:11:
                    af:37:90:55:a8:51:05:3c:87:16:1f:97:be:38:a1:
                    f4:97:9d:09:8e:4d:ea:e7:85:90:eb:03:80:0d:e0:
                    6c:3d:12:4f:ba:02:ef:3f:2c:43:49:b7:77:8a:71:
                    c3:59:a1:29:8f:4f:0a:a7:9e:17:58:0a:35:26:65:
                    d3:9b:4b:16:06:8e:45:75:2b:cd:d0:73:b1:61:ff:
                    26:7b:4b:b0:93:a1:3b:61:9b:7d:95:98:84:64:a1:
                    50:fc:b7:53:fc:c0:37:ba:f4:76:ec:4b:ae:11:31:
                    ec:58:00:79:ec:e9:d8:76:de:ca:81:9e:f4:cb:6a:
                    41:f6:f1:fa:05:72:1a:e2:2f:49:6b:65:bc:c0:e3:
                    79:ca:4e:70:a1:99:43:14:da:05:6c:32:5f:00:c4:
                    5b:b5:1c:78:c8:d3:20:d1:14:8d:e9:b8:a1:81:f8:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3B:BA:96:88:1B:92:7D:5B:A2:A3:25:33:CD:10:BC:97:17:10:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9cb9e77-4fe7-3aed-9b22-8c0713f77948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:9b:99:a7:07:d1:82:bb:4a:ae:d1:28:bd:b5:76:53:85:
         d3:a1:62:43:8c:52:d0:7d:57:4c:42:47:2d:cd:ba:21:f2:17:
         45:e9:23:77:0f:9e:34:4a:41:f9:19:51:9a:82:b4:6d:b0:1f:
         6f:3c:d0:6a:b2:85:53:7d:85:c6:71:6c:b4:87:64:19:2f:ac:
         39:93:2a:b7:23:c5:b2:c6:d6:4b:89:21:7c:6f:f3:92:4b:6a:
         11:6e:38:35:c2:03:06:fb:46:7d:b6:ff:88:0d:46:e1:0f:e4:
         28:2a:aa:b1:2b:c4:2a:db:08:68:13:8f:ec:48:1e:94:42:b0:
         8a:07:95:8b:1b:c5:0f:47:63:11:5e:74:9e:d8:5e:ef:14:ae:
         f0:c5:28:71:83:8c:4d:ae:95:0a:ca:25:d6:a1:3f:1a:96:e5:
         ea:14:4a:4b:ed:2a:66:ea:9e:07:d5:ec:94:b5:c5:ad:f7:28:
         6f:a8:4c:6f:03:2e:cd:ec:3c:71:6b:f8:1c:e0:3e:12:c7:86:
         1e:53:a8:15:0c:cf:c1:11:85:cb:ac:12:b5:04:3e:ea:ff:1e:
         63:ea:32:14:0f:b4:1c:36:d6:20:c3:2f:f2:c9:07:d9:62:45:
         15:f9:3b:be:2b:d5:2f:b5:65:d7:b4:69:fe:89:05:48:cf:c1:
         ea:2e:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:10:25 2025 by rpki-client