Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
File:                     1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa (raw, json)
Hash identifier:          ZECYxUnXkYFZOETmQ2FdCxNbSm9iIyc1/boGKXITa9I=
Subject key identifier:   E8:B1:7E:69:12:D9:55:8C:D3:CF:85:38:9C:6A:19:72:65:F8:6D:1F
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F432858495C2431367CDF33617EDDF400
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     198949
IP address blocks:        66.22.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:31:36:7c:df:33:61:7e:dd:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=f2ce25a3-0d5a-479d-b075-6ab5dae75628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:7b:47:95:82:f9:13:f0:86:c1:c4:38:f6:
                    16:d7:46:c1:19:56:16:6f:e6:d6:31:63:7b:d4:16:
                    83:44:0a:43:a3:b8:4a:9a:3a:2b:1f:e3:90:07:1f:
                    d1:8b:dd:58:bf:43:41:a6:bc:19:5e:2b:67:22:b0:
                    f6:05:d5:83:13:b7:10:c9:f6:b3:66:72:13:d6:b7:
                    33:2b:75:cd:c4:ee:90:3d:9e:59:b7:5b:0a:b5:ee:
                    50:db:39:3a:02:6e:9e:4d:2c:91:96:27:d2:d7:ef:
                    e5:87:64:e0:d2:62:d4:c2:6a:db:5a:50:74:af:50:
                    65:8a:43:64:f3:c3:b8:63:49:d6:51:ff:ad:ff:12:
                    ca:6f:e8:87:88:82:fb:5e:20:c4:54:99:72:07:66:
                    06:2f:2d:23:ab:71:df:f2:2b:b2:1f:a2:28:4e:b6:
                    62:a2:2b:39:26:12:e8:fa:eb:c0:79:14:41:f5:c9:
                    b8:b0:2c:c8:63:87:87:6e:23:07:64:a7:89:2f:53:
                    1c:fb:a5:77:6a:0c:55:5f:69:e1:17:58:38:4c:3a:
                    ea:be:6f:85:9d:63:4e:50:f8:f6:5f:b5:24:54:cb:
                    a0:b9:c7:50:aa:d9:cf:33:17:a2:46:34:20:9f:5e:
                    bf:c8:65:55:42:39:53:b9:6d:87:a1:4a:45:d8:1f:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B1:7E:69:12:D9:55:8C:D3:CF:85:38:9C:6A:19:72:65:F8:6D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:d7:74:fc:00:14:6b:a3:7c:1b:5e:d5:aa:6c:b2:37:ca:
         cb:b3:17:bd:a9:cd:ca:76:ed:45:d1:26:82:2e:e8:d0:1d:ed:
         13:61:a2:99:ef:70:aa:d9:29:e2:67:50:6b:1a:29:4d:97:ed:
         c5:ad:f0:a0:35:04:f2:19:0d:27:2e:c1:dc:52:10:19:16:b6:
         87:c8:fe:c6:25:cf:b5:b0:45:96:a8:17:ab:0c:4e:57:00:d4:
         e1:46:9a:3c:9c:01:2e:25:90:cd:3e:26:c7:bd:f1:19:27:14:
         14:37:dc:00:0d:d8:28:9b:ec:0f:82:b0:db:25:23:c5:88:16:
         ba:04:8f:15:a2:6e:ce:50:df:b1:25:a1:5c:23:0c:55:ad:83:
         36:c6:bf:8b:33:b9:cd:4b:93:c4:49:d2:a4:22:44:c0:bf:30:
         48:74:7d:1d:06:92:46:53:b6:eb:4b:09:d0:9e:65:45:08:7b:
         5f:c9:29:27:3b:f4:c5:da:d6:59:46:98:8a:8e:e8:52:35:c4:
         39:e2:4f:f6:cb:56:47:95:a0:c8:4e:8b:a8:d8:7f:99:3c:fe:
         57:5a:fb:23:2f:31:65:90:35:1d:ad:a4:e8:1c:72:c6:ac:8a:
         8b:c4:6b:73:02:7c:c8:67:3e:0d:05:3f:ae:a2:d8:25:d3:d3:
         9f:4b:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:16 2025 by rpki-client