Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e60fea89-e0ec-3f9e-9974-cbebb325eebd.roa
File:                     e60fea89-e0ec-3f9e-9974-cbebb325eebd.roa (raw, json)
Hash identifier:          GmXxDIJlBiO7UuETbCO4dBYs2yGlY+YuSp3bJAnH1gQ=
Subject key identifier:   BF:4D:69:92:C2:61:A4:06:04:AF:BF:B4:9E:87:35:E6:9D:28:59:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1657A592E0B24552549B000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e60fea89-e0ec-3f9e-9974-cbebb325eebd.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        75.66.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:7a:59:2e:0b:24:55:25:49:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=f66cc231-cf52-4be4-8fff-bff9a127c658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:50:9c:8c:bb:c2:3a:27:26:fb:cf:df:ca:
                    61:9e:af:9c:70:cb:7e:38:9c:f9:92:ef:c7:f7:ca:
                    a4:0a:c8:89:ae:5e:20:b4:68:4e:4a:5c:03:be:1e:
                    1a:b5:e7:28:d6:2c:e4:89:c5:1b:0c:d2:99:7b:d8:
                    1a:de:d3:77:8d:89:26:46:a3:94:dd:3e:78:b2:1e:
                    8f:9a:63:9c:21:8d:f3:4f:3d:d4:b5:e0:ac:c7:b9:
                    41:49:3c:66:7b:4a:3a:65:1a:ca:bf:9e:05:20:a3:
                    32:fa:47:34:72:90:d0:80:a8:57:c2:85:dc:c5:fe:
                    1b:fc:1c:69:4a:b4:3b:0b:f7:92:9c:d1:0a:09:e0:
                    0a:3b:bb:24:b1:e5:89:54:cf:b0:68:3a:fb:b8:4c:
                    76:4e:46:4d:97:56:6a:9c:ca:e6:09:32:11:6a:54:
                    5c:39:d4:8f:87:48:9c:de:c5:1d:bb:83:f8:d0:0b:
                    63:25:e3:65:70:d2:c1:d7:59:2f:0a:7d:1f:de:9a:
                    bb:9c:a5:12:13:f7:68:9a:f6:73:d5:b1:cf:f8:a6:
                    22:b0:7b:11:f6:23:aa:49:3c:b4:9d:6f:9c:7e:05:
                    de:6b:7d:b0:9f:d9:89:d9:eb:5c:77:05:7d:fa:2a:
                    2d:08:5b:9a:91:f8:df:18:8a:1e:e7:8c:43:a4:71:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:69:92:C2:61:A4:06:04:AF:BF:B4:9E:87:35:E6:9D:28:59:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e60fea89-e0ec-3f9e-9974-cbebb325eebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:b7:60:3f:50:4f:c4:ec:d1:c1:6f:91:d0:21:c3:6c:8c:
         1b:b9:bd:cd:97:9a:1b:bf:92:6b:d8:d3:be:3f:37:67:9e:a2:
         2c:b8:67:0c:66:da:61:f0:fd:da:57:25:28:82:1e:a1:54:b4:
         f9:ad:11:ee:27:6c:b9:f8:8c:b5:68:94:32:1f:4f:2e:78:a7:
         d8:96:d2:c3:87:f3:a2:ad:2a:f9:7b:e7:8c:d2:c6:36:a4:a9:
         27:34:44:6d:f6:ec:e9:1b:a5:1e:3b:4c:79:b7:39:8a:21:76:
         b3:ac:8a:c2:15:af:73:c9:9c:0c:26:59:9f:2e:0a:ea:f7:49:
         e1:73:de:7a:0e:0f:71:21:4b:94:86:cb:3d:c1:16:bf:eb:7e:
         75:a2:d4:1a:ce:65:11:71:47:95:fe:ea:a5:65:13:57:2d:36:
         b7:57:d6:8e:c2:93:33:f7:9d:8b:7e:71:c5:c3:ef:c1:25:0b:
         f5:ce:db:8c:04:c3:7e:f8:f6:b4:90:1f:5d:0e:18:ea:7b:82:
         d4:05:05:f7:4b:b7:ff:66:31:22:fc:56:74:84:d1:02:c0:10:
         2f:ec:b5:20:c2:2d:5e:ad:23:3a:5a:a5:9f:5d:4d:34:ca:1c:
         bb:02:bc:9e:84:33:bd:2e:6a:22:c5:6c:51:1e:47:86:bc:29:
         fa:b9:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:47:36 2025 by rpki-client