Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e0161711-a4c7-3336-a2c7-d2227307cca2.roa
File:                     e0161711-a4c7-3336-a2c7-d2227307cca2.roa (raw, json)
Hash identifier:          s3J0KSIvJZgspCimRIBC74KiRq2qjT+0JN37VbpFIL4=
Subject key identifier:   20:55:99:7E:73:E8:3D:BB:3F:BA:6F:FE:CC:87:AE:67:B1:83:BD:83
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CC16B971374B042CC7A0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e0161711-a4c7-3336-a2c7-d2227307cca2.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     393698
IP address blocks:        66.46.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cc:16:b9:71:37:4b:04:2c:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=cafda584-03d9-4c8a-b6ad-7abfd3fa5f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:00:76:8e:c0:7f:d0:15:28:56:37:c7:9c:
                    a5:3a:bd:b2:39:7d:c0:d7:54:51:d7:1a:e1:6d:12:
                    90:98:7e:6b:25:21:0d:81:55:71:b3:3c:bf:aa:13:
                    be:94:3f:67:d2:cf:72:b8:94:ed:aa:42:31:c0:2c:
                    f5:00:6a:86:01:41:44:af:c2:39:1e:b5:ed:11:c2:
                    24:92:03:ff:d7:dd:c3:63:db:ca:8c:cc:8f:c8:d3:
                    b0:bc:99:41:98:4e:ea:cc:c2:03:d6:19:90:bd:ad:
                    48:24:37:a6:74:14:f9:cc:bc:5a:ab:89:63:ce:c0:
                    8b:d0:04:a6:58:66:a9:e4:6b:24:9a:39:82:7d:3b:
                    f2:fd:40:16:27:8a:b1:52:f9:bf:16:49:f1:de:9f:
                    1c:b8:e8:66:ee:1b:d7:c5:b5:c7:21:f4:0a:c3:de:
                    e8:1e:84:ec:73:37:96:97:d5:0b:19:fb:1a:9e:f3:
                    97:59:d3:23:80:96:2f:b1:b6:dd:88:7a:0a:f4:e7:
                    35:01:c6:75:0e:94:dc:4e:48:64:e0:8a:d7:fd:38:
                    5b:f2:fe:7c:25:98:0a:1f:8f:bd:eb:df:61:bb:36:
                    3e:f1:86:44:2e:c5:06:c3:c3:67:cd:40:c7:81:a6:
                    cd:71:6f:4a:6a:19:28:76:d8:ce:10:4c:09:15:ce:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:55:99:7E:73:E8:3D:BB:3F:BA:6F:FE:CC:87:AE:67:B1:83:BD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e0161711-a4c7-3336-a2c7-d2227307cca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:2b:04:6c:86:95:f1:72:da:86:2e:51:f1:e7:b9:0f:82:
         58:39:41:08:09:5f:b3:b1:ad:fd:d3:f3:d9:ae:d4:7a:a5:0a:
         41:68:0b:da:a3:03:17:5a:63:a2:95:73:3c:ea:77:e0:6c:a0:
         50:cc:ec:dd:bb:7e:7e:88:85:80:53:6b:61:04:0e:f5:53:7c:
         7c:e0:17:8a:51:c9:f0:34:fe:09:ff:a7:5c:8a:55:5b:67:7b:
         1c:af:8c:2d:d2:6f:de:fe:d9:e2:45:49:f6:fd:54:e0:10:e7:
         73:15:f9:50:94:cc:e8:a8:76:2e:8a:f8:3b:43:56:63:d0:fd:
         e0:fd:2a:3b:91:7f:7a:fb:33:4f:28:f5:cb:e0:69:61:a3:7f:
         f0:77:3d:46:7e:9f:85:e2:86:58:b7:1c:92:6b:b9:b9:d8:d1:
         d2:46:e1:2f:21:c0:39:02:29:d6:17:a3:25:09:ef:b0:cc:e1:
         cb:0c:39:ac:50:df:c8:12:3e:fc:58:11:be:ae:d9:72:e8:83:
         c1:34:fb:95:1c:e6:9c:2e:87:8c:bb:c6:64:81:fd:df:f8:f6:
         a7:1c:13:4a:e4:09:73:96:8c:e4:bc:23:16:e1:d2:c6:d6:91:
         dd:72:63:67:66:97:e9:96:b5:b0:57:9f:68:71:f2:5c:7d:ba:
         71:21:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:51 2025 by rpki-client