Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0440a5e2-307b-3fe2-94e3-a4eaeb712183.roa
File:                     0440a5e2-307b-3fe2-94e3-a4eaeb712183.roa (raw, json)
Hash identifier:          bgeXkX64huqIuctazZQ2zIvqp/c/EreQpnWL0LFAiL4=
Subject key identifier:   46:6C:13:5E:2B:63:4D:C7:9C:64:DE:A5:83:AA:67:BA:32:1B:C0:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75A57E35C64D78A10E4C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0440a5e2-307b-3fe2-94e3-a4eaeb712183.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        66.56.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:a5:7e:35:c6:4d:78:a1:0e:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=de0b8cb3-9a7b-4245-b66a-4d5aff2a55b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:c3:4e:0b:a4:3e:a8:be:34:21:45:c0:a7:
                    4a:aa:1f:3c:e1:68:04:8b:c0:20:f0:89:d7:9a:cc:
                    10:ca:cf:f6:f3:39:c1:54:5b:a1:b6:13:9f:11:e8:
                    a8:fe:03:3c:c4:17:21:f7:ca:b9:ba:5e:cf:81:d2:
                    8e:68:28:ba:a7:d7:7b:81:61:3c:97:76:b8:f8:da:
                    c4:14:97:13:61:3a:7b:2e:1b:a5:7a:70:0d:0b:34:
                    4f:a6:e2:35:d8:51:5e:f2:5f:46:c8:56:36:37:23:
                    3d:da:84:4d:53:79:be:55:4f:91:25:e7:33:43:35:
                    9d:53:3b:5b:e0:53:05:2f:17:6e:16:7b:04:01:f7:
                    79:8a:b6:da:75:80:33:97:46:2f:6f:b8:da:28:88:
                    94:64:85:ee:ea:d1:50:b4:ef:f2:1c:1f:82:ba:a8:
                    86:81:64:66:8d:1e:41:78:00:57:4e:98:21:50:69:
                    0b:9f:04:5f:f0:8f:5b:13:41:6d:cf:28:62:12:91:
                    85:2c:5c:69:44:92:d4:8f:8b:2a:e3:7a:af:8c:3e:
                    bb:58:cf:7a:67:cc:32:61:e8:56:5e:c4:a4:bf:2f:
                    ac:05:d2:bc:52:74:d9:7b:b7:b5:99:96:b8:09:68:
                    46:a8:dd:34:ca:65:73:16:b8:b2:61:0d:fb:b8:3f:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6C:13:5E:2B:63:4D:C7:9C:64:DE:A5:83:AA:67:BA:32:1B:C0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0440a5e2-307b-3fe2-94e3-a4eaeb712183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.56.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:76:ee:39:6e:9a:3b:6e:ef:5b:3b:56:c4:28:3c:73:65:
         2e:8c:94:ae:f6:b8:c3:66:89:58:9e:89:a6:01:d4:9a:19:47:
         a4:e2:6b:a7:da:3a:87:ef:3d:47:5d:d6:28:12:85:b0:2d:13:
         08:be:de:57:a4:9b:e5:8e:83:45:b0:22:7b:3f:f4:86:a4:cf:
         fe:8d:bd:24:b0:37:af:dc:38:74:ac:dc:19:ff:84:b6:ef:39:
         48:ef:f6:0e:4b:ac:3f:68:73:00:48:b6:4b:f1:54:d8:44:e6:
         d0:5f:9f:48:62:0c:e7:84:c9:81:a8:2b:9f:f2:44:6e:3e:59:
         08:7d:bc:46:20:59:47:41:b6:45:cc:97:ef:7a:c3:8f:f5:c3:
         7a:28:39:9a:b1:c7:6a:59:d8:96:c8:16:b6:7c:d0:4f:ae:de:
         19:5f:d7:9e:fe:6e:f5:87:b5:9a:a5:de:b6:9a:ff:8b:d3:a0:
         74:d7:86:92:f9:a6:e2:b7:9f:00:7a:5c:0a:02:10:e0:7c:c9:
         bd:f2:74:dd:29:97:5f:fc:64:72:40:51:dd:dc:a1:5a:53:4f:
         78:49:97:51:a8:fd:a5:99:ae:26:45:0d:54:e4:79:d6:c4:2a:
         79:c5:17:44:b0:95:4e:a5:4a:81:67:cc:99:dc:44:eb:d0:ee:
         b6:91:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:48:39 2025 by rpki-client