Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/62755c75-62b9-3728-9942-f5890d452bad.roa
File:                     62755c75-62b9-3728-9942-f5890d452bad.roa (raw, json)
Hash identifier:          5sn/ysY1E9fMNpgFNNxH04W+Mfz8aGR32QB9qtwvXdE=
Subject key identifier:   73:B5:0E:80:D0:B6:B6:1D:0C:20:06:24:1B:B6:7B:44:5E:2E:41:B6
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584965E971FBFA310EBD860C9520
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/62755c75-62b9-3728-9942-f5890d452bad.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     5769
IP address blocks:        66.130.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:71:fb:fa:31:0e:bd:86:0c:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=bf29fa50-af35-45d2-b359-0f06d4d1f1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:41:66:69:6b:dc:64:cc:38:f5:e7:b6:bb:
                    10:50:00:84:f6:83:22:3e:17:9d:a6:fe:45:dd:7f:
                    36:da:91:cc:e8:db:ac:fa:96:f8:65:80:8c:dd:92:
                    50:5f:33:01:74:21:7c:13:a6:26:15:9c:ff:6d:8e:
                    b4:13:c0:82:f7:8d:63:6c:36:18:5d:e0:d2:b8:7a:
                    e7:bd:d5:96:9c:90:cc:5c:02:cf:49:1a:04:70:2a:
                    70:f4:4d:68:99:f9:ff:1c:39:74:fb:40:c4:49:38:
                    c1:1e:de:98:c0:48:1b:9f:5f:61:c2:39:b0:72:d7:
                    fa:ca:33:c3:d4:99:bd:df:73:f7:87:71:8b:33:71:
                    f2:6e:f7:65:5a:f7:29:de:4a:55:dd:b7:e6:15:10:
                    aa:ae:74:77:a8:e9:8b:d9:21:ee:dd:d2:e7:4b:8a:
                    f8:34:8e:1e:ff:e2:01:97:fc:77:bc:5d:92:24:f0:
                    71:b6:ec:37:56:e7:1d:17:93:e5:66:bd:12:d2:45:
                    d8:6b:3f:f4:7c:17:86:38:43:0d:23:89:d8:a4:8d:
                    bb:b8:4f:bb:b4:23:7d:33:5e:50:03:f2:e3:9f:be:
                    97:0e:44:1a:bb:f8:dc:a0:d4:30:c4:58:bc:e7:26:
                    77:84:4e:1a:8b:aa:b2:6f:c7:45:2c:54:d3:24:e8:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B5:0E:80:D0:B6:B6:1D:0C:20:06:24:1B:B6:7B:44:5E:2E:41:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/62755c75-62b9-3728-9942-f5890d452bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.130.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:9b:e4:c0:e3:ec:5b:e5:75:69:19:f4:59:5a:d4:52:f4:36:
         3c:6b:46:03:07:31:19:ca:79:4a:f5:e1:64:57:22:34:c5:ba:
         51:10:7f:19:5b:c5:cc:b6:54:bf:1e:5d:35:88:00:92:50:af:
         c6:f5:5b:3a:0a:79:be:93:72:6f:dc:23:0e:6e:4c:68:0b:9d:
         a9:77:6d:31:d2:4b:0c:14:4b:ac:ab:09:1d:b8:f9:d0:c2:cd:
         ae:22:f1:20:69:0d:67:47:b6:7b:3c:c8:b3:9b:c5:6b:4a:f8:
         83:90:7b:9d:eb:15:4d:04:9f:1e:51:c4:25:28:ab:00:b9:5b:
         d5:f4:6e:05:9f:f0:24:de:a9:b3:08:6d:74:b7:47:1a:b9:20:
         73:be:27:36:02:9c:2d:14:19:38:73:9f:8c:83:ab:3f:c0:c9:
         c5:c2:ef:74:39:c1:e8:05:3f:01:03:bd:c3:6c:72:4c:2a:b1:
         fc:57:d4:78:c0:fe:b8:d1:6e:46:45:f6:e8:83:f8:6f:ca:39:
         a6:98:be:e8:2e:7d:19:39:e8:d7:87:3e:08:ed:4b:95:90:68:
         07:a3:14:1a:f1:8e:20:88:67:75:0d:24:d9:cb:01:cc:6b:34:
         86:39:6c:c7:12:19:1e:19:3d:b7:f4:db:82:de:f7:87:26:91:
         5d:cb:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:06:23 2025 by rpki-client