Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa
File:                     1becb7ae-de8d-3a12-ba08-f457b03b3667.roa (raw, json)
Hash identifier:          EpN30CWZxcs8qyC+5mRUd4X9dpuiNsdJDpBEbVPL3hU=
Subject key identifier:   F7:68:49:93:09:BC:FB:68:4C:A4:48:0F:3A:F9:05:16:9B:CF:B3:E4
Certificate issuer:       /CN=656bb562-ba73-4cab-b885-ab843b4308c4
Certificate serial:       010D0C9F432858489340A726E076E2BB69016900
Authority key identifier: 33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        66.51.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a7:26:e0:76:e2:bb:69:01:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656bb562-ba73-4cab-b885-ab843b4308c4
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=6370f176-9575-4c0a-b0fb-5a99191f613f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:41:09:71:e5:64:ae:8c:06:7b:b8:d0:14:
                    12:de:80:e1:72:09:d2:1f:36:14:23:c5:a4:2d:29:
                    f5:d5:0c:9e:81:69:9f:63:98:75:79:2c:7c:61:3d:
                    03:37:0a:5a:d3:1e:0b:28:56:cf:0e:f8:1a:3f:8f:
                    dd:54:9e:10:47:39:1a:7d:a7:fb:e0:2a:b6:97:61:
                    73:2d:d9:42:30:9f:a1:a5:d0:b6:3f:d0:73:e2:c6:
                    6e:96:46:fa:3d:f8:9e:1b:a7:72:7c:32:62:25:a2:
                    e4:8f:b4:37:1c:9f:b8:9a:63:5a:05:c6:56:86:fc:
                    b9:00:c4:60:67:22:0e:c6:2b:30:38:01:ec:e8:57:
                    0d:be:bb:9a:41:db:21:10:37:c8:57:ce:b0:71:b7:
                    39:cf:50:e0:78:8f:03:6a:4d:9b:70:f1:04:9b:c6:
                    d5:2a:7c:e6:9b:8f:f3:3f:a6:ca:ff:de:4c:f6:99:
                    0e:8a:93:bf:ac:8b:a4:31:48:6c:54:7c:47:ed:48:
                    72:32:b2:98:26:c0:d2:c5:ec:ce:f6:db:26:01:88:
                    00:a6:57:89:95:80:c7:01:70:10:38:c7:88:20:a2:
                    84:f6:46:1e:d1:9b:a8:c8:9a:0e:23:73:e7:83:3d:
                    9e:5d:a1:ca:0d:0b:cd:7e:bf:46:8f:a9:63:e6:72:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:49:93:09:BC:FB:68:4C:A4:48:0F:3A:F9:05:16:9B:CF:B3:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl

            X509v3 Authority Key Identifier:
                keyid:33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:1f:5d:f1:ad:89:82:d1:a1:9e:fe:f5:3f:94:f1:b3:aa:
         f1:29:e1:75:a9:0f:87:16:b0:5f:1c:92:c5:a1:c1:d7:56:2f:
         0f:af:db:c1:8a:b5:b4:a7:fd:73:a2:c7:09:93:69:05:bb:a0:
         eb:97:34:61:f8:3c:07:d6:4d:19:c3:e0:21:ba:06:e5:32:08:
         f5:c0:b5:ab:70:6c:21:52:8e:59:ad:a5:8c:f4:a3:7f:d7:9f:
         47:bb:74:54:5f:e6:47:c6:97:d4:30:f8:33:e7:4e:17:61:03:
         3d:ed:25:d1:e7:35:b4:35:96:31:2b:9b:bb:b6:6a:4b:ba:30:
         08:83:ef:f0:d0:9c:28:91:36:de:88:43:7a:8f:90:5d:42:2c:
         fe:1b:7f:44:af:48:c5:2e:4c:e9:0c:08:36:64:09:43:0e:58:
         f8:4e:eb:fe:a6:62:55:81:64:cd:e0:42:79:26:e4:ab:e3:ad:
         35:71:5c:1f:9e:c7:d1:fa:0b:7a:9c:73:91:94:15:5c:65:59:
         81:ad:56:85:b2:16:df:8d:5e:9b:71:ab:6d:ef:af:04:d2:79:
         06:09:2e:24:d0:0e:d7:6f:32:26:a3:9f:56:0e:03:40:62:2f:
         e1:65:ff:aa:82:7b:84:79:56:44:f4:46:11:06:39:dd:2b:db:
         a8:af:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:11 2025 by rpki-client