Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
File:                     3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa (raw, json)
Hash identifier:          HvcPm1yv4pmtA3GC/KQ/A4WFGhPcKu81HZV0fdlUkKk=
Subject key identifier:   37:EE:3B:C2:5C:C2:DC:08:DF:71:1A:D4:0D:31:01:80:61:80:75:CC
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F432858493C0942EDC36239C430EF7280
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     26914
IP address blocks:        166.93.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:42:ed:c3:62:39:c4:30:ef:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=2cb8706a-4a55-41c8-9aa2-69b874192350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:21:a5:80:a4:e1:e9:5f:cd:2e:69:a0:77:
                    bd:a6:70:47:75:82:3a:35:d1:ab:c8:71:e8:df:8f:
                    85:c5:65:43:73:4b:43:da:c0:e0:a1:42:1a:96:66:
                    3b:70:73:55:92:08:a7:f0:5e:45:12:b8:64:5d:ed:
                    bf:c9:8a:5f:36:fb:0e:e4:1e:e7:d5:6c:d5:15:e1:
                    78:69:54:65:28:51:7c:50:db:e8:32:6d:69:cc:1a:
                    e3:b1:1c:2f:e0:d4:00:c1:46:6c:f3:c4:2d:89:e1:
                    0c:92:85:c3:64:87:46:be:62:9e:f5:9a:72:0c:05:
                    b7:54:6d:90:25:0f:0e:7d:e8:06:54:6a:2c:ff:b4:
                    f7:6b:82:aa:7e:c9:1b:cc:af:17:ed:aa:93:8b:b2:
                    5d:30:26:eb:83:30:01:bd:aa:f9:13:61:c1:bc:29:
                    0e:2b:53:45:51:4d:20:9e:f8:6f:8f:f2:d1:bc:4e:
                    6c:f3:85:f6:ac:52:66:59:ec:b9:d4:41:cf:81:76:
                    ce:a9:de:f8:22:74:3b:fc:1d:22:41:4f:99:c0:9b:
                    40:60:73:ba:85:d8:5e:01:38:4d:d2:2f:73:09:cd:
                    61:ec:64:43:6e:c4:08:08:5f:6c:ee:2b:67:7c:5b:
                    d9:82:94:2c:ef:32:a2:66:21:03:08:97:52:d2:22:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EE:3B:C2:5C:C2:DC:08:DF:71:1A:D4:0D:31:01:80:61:80:75:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:32:23:b2:2b:53:c3:3a:ee:38:64:d7:57:f2:34:b2:d5:
         0f:dc:96:69:19:aa:8a:74:ab:93:00:ea:47:8f:20:9b:16:e0:
         63:05:fc:38:03:e1:bf:0f:26:bf:3d:38:59:24:85:53:24:09:
         aa:cf:6c:1c:2a:1f:b4:3b:47:00:65:66:67:9e:29:af:c6:85:
         5a:f2:52:75:14:8d:81:4d:b3:0a:71:45:db:4f:a7:e7:9d:ed:
         25:eb:97:3f:d3:f0:12:99:40:be:c8:d5:26:24:04:66:a7:70:
         5a:f5:c6:cc:d3:e2:92:37:33:3a:b2:20:ba:22:6d:c9:64:b3:
         d4:3f:d1:90:70:35:bf:30:7a:3f:c8:9f:57:af:3a:7c:fd:a5:
         26:13:c7:9b:53:56:8d:64:d1:3e:0d:91:05:32:26:53:f3:7d:
         b5:3e:b0:d2:b7:ad:ea:13:f6:67:75:e5:bb:54:ec:24:e8:70:
         20:70:53:6a:08:b8:d0:3a:06:24:e1:8f:61:66:16:45:ff:f7:
         e1:d1:d5:d1:76:c8:1e:63:2f:d0:41:0a:01:22:52:57:1c:a8:
         7d:6a:5f:be:19:6b:c6:41:6d:bb:c2:33:52:a8:23:9d:19:b7:
         ca:67:51:26:73:4e:af:6f:b9:ed:97:2b:3f:1b:4f:0e:9f:20:
         26:45:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:51 2025 by rpki-client