Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/28f82f55-f7fb-3d40-aca7-1bae84ecbb88.roa
File:                     28f82f55-f7fb-3d40-aca7-1bae84ecbb88.roa (raw, json)
Hash identifier:          b0GkcLOQfLkpcdfDwOjzQ2HVok/r4+Hj8JT2Owb3a60=
Subject key identifier:   EB:AF:E7:04:BE:9B:53:A3:B0:0E:28:50:41:DF:CF:EC:4B:AE:15:94
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849FCAA658BDFD0930AEA1CAA20
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/28f82f55-f7fb-3d40-aca7-1bae84ecbb88.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     30103
IP address blocks:        137.66.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:65:8b:df:d0:93:0a:ea:1c:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=43addd25-7c0a-49c7-965e-d69a1ccdfdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:14:40:93:b0:a1:52:59:ad:1d:6b:52:49:
                    7b:45:23:4e:dd:ad:79:61:7d:8c:41:62:1a:bd:4d:
                    d9:d3:23:fc:33:db:df:ec:96:4a:ea:66:68:4a:a7:
                    2d:2c:f0:0b:cc:0d:7f:32:5d:95:5e:0c:5c:0e:fe:
                    3e:6b:44:e0:a7:59:04:d1:61:b0:91:9a:8f:6e:cd:
                    b7:a6:a5:76:4b:cd:0e:dd:a1:b2:37:08:37:88:03:
                    31:53:34:8b:d8:c9:64:37:d4:2e:a0:8a:55:28:90:
                    e0:13:b5:6e:57:74:5e:35:cf:1f:76:eb:b3:8f:fe:
                    c2:97:5d:10:7c:7a:d5:30:e9:47:c3:d4:cd:37:a4:
                    99:d6:bc:5d:ca:12:35:ab:05:a7:a4:bc:d9:fa:74:
                    c6:43:57:13:13:1d:8c:23:ec:11:ad:a4:ab:42:b4:
                    fd:43:68:ca:ef:44:55:40:24:58:6e:97:34:e6:ba:
                    70:07:cc:97:f5:ce:ba:88:4a:f5:e1:90:a1:f2:f0:
                    6f:ad:fc:6d:43:e2:28:9a:e4:ea:a3:7f:9f:69:aa:
                    4f:38:3b:84:29:13:6a:97:98:7b:0f:15:b9:7f:7e:
                    9f:8a:07:15:27:b2:cd:31:57:40:9e:8e:a5:e1:b4:
                    8b:1f:46:6f:b3:68:f4:c3:c0:af:45:37:c1:fc:65:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:E7:04:BE:9B:53:A3:B0:0E:28:50:41:DF:CF:EC:4B:AE:15:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/28f82f55-f7fb-3d40-aca7-1bae84ecbb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.66.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:28:d4:08:d1:41:01:12:3f:74:cb:34:27:a7:cc:5f:36:
         96:aa:cf:6b:3b:0c:52:95:26:1b:ae:fd:6d:60:38:69:78:15:
         a5:7d:7e:17:44:85:5c:7f:46:41:f1:6e:57:5e:5f:a9:aa:00:
         28:ff:28:a3:db:31:cd:bb:c5:34:04:0f:72:ef:cd:53:ef:ac:
         ff:94:6b:dd:17:8f:da:3b:67:52:af:14:89:33:f7:ff:a8:7a:
         5e:6b:0b:8a:4c:16:ad:cb:25:51:c9:6b:2e:75:b6:0e:a6:5c:
         7e:fb:59:f9:fa:80:c0:e0:fc:39:8a:ee:85:fd:06:30:3a:05:
         b4:fb:54:0b:1e:5b:a8:c7:15:b2:4c:d1:5e:0d:0d:3b:43:a6:
         03:f3:ea:4a:b4:39:20:bf:84:a2:57:40:02:fa:d8:b4:58:f7:
         bf:a4:84:c7:fd:88:3e:df:4b:aa:d2:0a:d4:a3:5e:c0:e6:ec:
         f1:4d:4f:38:fe:2a:5e:2d:26:dd:18:3f:b9:bf:a5:28:92:7f:
         2f:fb:ea:b6:e8:76:3b:37:bc:70:1e:1d:3a:02:ca:64:bc:23:
         40:df:00:c1:89:e4:1e:0c:32:13:97:fe:14:85:ad:22:c1:b7:
         76:c2:b0:a9:12:b9:76:e0:b0:43:63:47:c7:30:ba:76:5d:d8:
         67:b3:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:14:35 2025 by rpki-client