Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/87d1855e-d9ff-3aaf-a4db-d1dbd8500394.roa
File:                     87d1855e-d9ff-3aaf-a4db-d1dbd8500394.roa (raw, json)
Hash identifier:          p//oimgQwX+8TBVwGuDzCy4k1uHI9pSCKrWu+XPbAXI=
Subject key identifier:   20:58:04:02:ED:F4:34:E8:69:4C:78:8C:7C:5D:F9:7B:E0:A8:02:32
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F43285849393E7D1C0789149A6EFA61C0
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/87d1855e-d9ff-3aaf-a4db-d1dbd8500394.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     15212
IP address blocks:        66.175.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7d:1c:07:89:14:9a:6e:fa:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=469a0143-5b14-4d38-8248-fcdcefcffeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:8c:5e:65:73:27:af:ed:57:6e:4e:d3:0a:
                    dd:58:83:10:63:9a:ab:8d:e5:f2:c8:d0:33:2f:69:
                    51:a2:f5:21:42:3f:cd:d8:b7:81:9f:b6:ee:8a:72:
                    5c:2a:db:7a:c1:25:b0:ac:0a:ca:62:26:41:4c:84:
                    b5:b0:48:29:4f:c4:d7:6f:cd:9f:d1:47:25:d0:92:
                    69:55:e0:15:0c:fe:8a:3e:2c:e4:9c:2f:16:40:6c:
                    cf:90:8b:a8:17:a9:25:05:bf:55:62:f9:e3:34:30:
                    92:d6:2d:4a:99:56:01:16:7a:19:a7:9f:c0:fb:ab:
                    9c:25:b7:54:20:e0:c5:a2:ea:b7:3c:9d:df:fb:4c:
                    78:0b:60:66:83:61:1e:66:47:a4:9d:17:24:2f:fb:
                    46:fc:25:98:73:a0:6c:6a:81:e9:41:ff:94:27:16:
                    e9:cc:91:e5:14:ee:df:dd:d9:c3:97:17:4c:f5:3c:
                    61:68:1e:c6:f5:cf:55:81:4a:a2:89:ff:87:13:90:
                    57:f2:07:0e:76:e2:dc:04:8d:9e:53:dd:5b:e2:63:
                    70:6a:d7:4c:f7:f6:6b:05:e5:d6:9d:7a:63:20:f2:
                    b6:ef:03:75:5b:01:05:d0:2c:28:74:24:d5:07:60:
                    11:8c:14:f4:bd:1e:70:25:30:9e:d8:4b:27:3f:73:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:58:04:02:ED:F4:34:E8:69:4C:78:8C:7C:5D:F9:7B:E0:A8:02:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/87d1855e-d9ff-3aaf-a4db-d1dbd8500394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:19:a3:27:6f:ca:fd:6a:74:e1:33:f8:88:06:0f:d8:92:d1:
         96:c0:00:bd:90:d3:70:23:b6:85:00:39:dc:b0:03:06:56:32:
         dd:5f:ec:ee:dc:2f:9d:35:c8:4c:d2:89:64:e1:46:22:fd:d4:
         15:03:ab:ea:15:54:6a:ce:3e:6a:09:f6:f8:95:d5:a7:22:37:
         52:8d:12:3a:90:79:6f:69:76:d3:ca:20:71:b8:5f:53:45:e2:
         fe:43:ce:c4:36:76:ce:ab:7a:f6:14:ed:1a:47:cc:b8:a5:a6:
         e9:59:ed:52:5e:d9:81:b1:bb:05:a4:5e:50:fb:f9:19:53:2e:
         0d:70:e4:2a:02:62:c0:f0:66:7b:46:33:7c:b8:f8:2f:67:f0:
         82:3a:a2:35:12:28:2c:86:13:a5:f9:d3:76:21:51:b0:7a:09:
         e9:87:29:9a:33:0b:77:81:d5:4f:93:bd:29:03:9f:9c:1d:71:
         3f:70:dd:c2:55:19:b9:61:3b:42:e8:a4:d4:fd:b3:46:b1:79:
         9c:c9:0e:50:8d:dc:b5:11:9e:b9:b0:09:3c:70:cb:f2:39:33:
         31:9e:9d:99:a7:d4:54:48:4a:1e:8a:9b:e8:5c:d7:74:da:f0:
         61:a5:a3:c5:81:32:82:e6:54:db:30:5f:53:fe:d8:ff:06:cf:
         86:e6:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:22 2025 by rpki-client