Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa
File:                     0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa (raw, json)
Hash identifier:          iD5fDTq98bHg5EdTxM3UZeD4Kb4d9IOQU0xbpldFFSo=
Subject key identifier:   AE:FB:1B:5A:D4:89:3F:0A:B6:2D:09:46:C5:E6:3F:FE:7F:10:7D:DE
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285849393E792DE8FA9F77E00FDC00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     54913
IP address blocks:        66.55.66.0/24 maxlen: 24
                          66.55.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:79:2d:e8:fa:9f:77:e0:0f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=4c6461a1-1e04-492c-927f-760fda7c89a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:ae:d1:a2:62:b7:7d:3b:28:74:8e:48:b6:
                    83:92:b5:8a:48:44:3b:ed:7d:9e:c4:b8:21:90:bb:
                    bc:4e:2f:f5:85:34:45:8c:93:23:38:2e:03:25:97:
                    79:0e:ae:59:cf:94:48:45:e2:53:e6:99:35:d0:1b:
                    22:c7:87:1b:70:ea:5e:65:f4:25:15:44:50:ba:8c:
                    22:8e:ee:52:c9:a4:2f:30:6b:4b:d4:4a:cb:28:c5:
                    33:c1:8f:27:ae:67:44:ff:f9:ad:56:a8:1d:00:2d:
                    20:23:8e:1b:4f:8a:00:27:7c:5f:a0:53:4d:16:ba:
                    92:1a:6d:fc:36:71:9e:48:c2:d6:fd:a2:e6:7f:5c:
                    fb:b5:28:5d:9f:90:64:d9:72:a5:0e:22:7d:bf:09:
                    2b:65:5c:34:65:81:f2:78:48:c6:b4:cb:1b:4f:5f:
                    f7:45:32:86:88:77:78:67:93:3d:df:d0:3c:df:e7:
                    30:53:22:d4:16:0b:38:90:bc:77:bc:2c:5f:1a:04:
                    fe:fc:80:cc:57:d9:f5:56:5b:1c:da:55:c6:83:c4:
                    ea:a2:ca:4f:91:b4:93:05:5c:f1:23:87:79:c4:99:
                    83:8d:a3:7a:b0:68:aa:fc:94:09:f6:42:71:19:57:
                    6c:fe:0c:26:6a:23:bf:ba:d1:97:70:f1:b0:45:10:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:1B:5A:D4:89:3F:0A:B6:2D:09:46:C5:E6:3F:FE:7F:10:7D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0d8cf029-d75c-3bdf-9c7a-23f94bf9c051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.66.0/24
                  66.55.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:2c:c8:30:45:53:cf:e4:a4:db:58:da:ae:c0:fb:2e:4d:
         f4:52:26:8b:03:9f:e5:da:9c:3a:c3:22:5c:e4:79:9e:21:64:
         86:be:12:73:0b:7d:27:41:7b:33:4f:92:69:dc:e4:25:a4:de:
         f5:d4:44:16:85:ad:89:c9:5a:e1:ba:d6:92:17:e5:94:98:00:
         7d:fe:c3:43:f6:46:de:5b:05:4c:19:11:8e:b6:54:8b:34:d6:
         5a:1f:69:cc:5c:83:72:40:1d:a1:cc:9c:fe:a6:13:07:2f:b3:
         e1:70:d7:d4:97:4f:05:fd:70:12:bf:f5:5a:19:4b:1a:e7:05:
         c2:ee:75:85:3d:3b:89:e6:6c:4e:d6:28:23:66:62:db:d4:84:
         4e:9b:d5:a3:05:9a:52:82:52:b6:76:f1:f4:b2:78:f3:72:79:
         b6:11:ea:91:47:67:11:52:f3:9f:50:28:c3:6b:11:44:72:d3:
         f2:b2:92:21:9f:f6:4d:5f:2a:bc:bf:5d:0a:09:e6:95:6f:61:
         65:95:52:a0:06:13:f8:03:74:6c:0d:23:ba:1e:91:b9:83:58:
         f8:62:80:9c:04:d9:24:48:3f:9e:01:02:fc:1c:f6:37:4f:a2:
         a9:12:e1:02:9a:b1:d2:0e:7a:65:45:0b:6f:c2:86:2e:a4:57:
         7f:13:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:39 2025 by rpki-client