Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
File:                     df833a82-7a66-3fb2-86c2-e24767894bdc.roa (raw, json)
Hash identifier:          oEhWWruWCSYmG7tlZrtW1kzCnCNb3RvPyjPYwSc+Mmg=
Subject key identifier:   7C:E6:24:63:00:28:02:CF:FE:D1:46:51:70:EE:DC:1A:39:58:40:6E
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285848EF6146963288F385E655A000
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16696
IP address blocks:        66.255.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:46:96:32:88:f3:85:e6:55:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=14bab3f3-783e-43ee-8129-f5883d7bdfa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:6a:50:dd:0f:e5:f9:56:37:8f:08:2d:ef:
                    a0:13:fb:56:aa:48:a1:4d:58:c5:bb:4a:01:99:57:
                    49:6b:0a:03:0f:a9:c9:30:0b:6a:99:bc:2c:ac:8f:
                    ad:4a:09:66:1d:d7:23:ab:c5:6e:35:34:2b:46:cc:
                    9f:ad:8a:09:76:92:ba:ff:05:ab:9d:06:f6:9e:9c:
                    e6:58:ec:d2:a5:ec:93:5f:ea:63:09:31:a6:d5:d7:
                    b3:8d:bd:5b:69:3e:62:03:4a:c2:59:d7:6a:b9:10:
                    70:94:c1:80:df:4e:40:ba:7f:a5:91:87:74:38:3f:
                    f0:72:0e:fa:85:bf:ad:75:9b:63:1e:4c:8d:d9:13:
                    c8:80:ea:67:11:a7:49:61:4e:2c:11:8c:e5:b4:a5:
                    6f:3c:b7:77:32:f3:c6:47:df:99:d1:c8:f3:0f:60:
                    63:74:34:0c:79:0c:7d:6c:c0:9d:ad:d3:81:72:98:
                    80:ff:3b:f1:ab:a2:7d:04:d9:65:51:77:2c:a7:92:
                    25:16:bc:23:3f:6a:85:cb:ff:c7:2b:b4:b0:99:82:
                    33:53:77:01:ab:46:12:be:21:4f:d6:6a:8c:6e:34:
                    83:2c:4a:33:77:ae:7b:a1:cf:8d:12:76:69:b4:c3:
                    6b:23:e9:de:1d:f6:3a:7d:e9:b3:4b:74:b8:3d:37:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:24:63:00:28:02:CF:FE:D1:46:51:70:EE:DC:1A:39:58:40:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df833a82-7a66-3fb2-86c2-e24767894bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.255.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:98:0d:8c:06:4d:d7:b6:65:24:26:6a:73:4a:f7:03:fe:a7:
         25:ce:35:18:a0:01:9c:95:ca:67:e2:58:a0:b5:44:81:df:ec:
         ba:96:2a:63:bc:50:89:17:a4:04:8d:0c:42:fc:a4:26:a6:5d:
         a8:6f:5c:84:5e:4d:93:8b:1e:86:d8:18:60:e8:7a:a7:2a:53:
         91:7d:49:45:a0:c2:e2:59:fb:00:28:e0:d1:76:a0:04:6f:c4:
         72:8d:f0:13:4d:27:8c:3b:d1:7f:59:f2:d5:bc:7d:01:90:a7:
         39:f9:3d:b9:c2:37:83:a9:a2:35:d2:70:5b:3e:2a:c1:98:1e:
         bf:8b:47:0a:fb:71:fc:c7:a9:83:3c:10:51:f6:fa:65:c7:6f:
         eb:b7:35:36:2c:fd:24:a2:73:1d:7c:c2:a7:99:bb:f2:08:7c:
         1a:7a:f4:0f:31:2e:ed:67:55:1a:87:c1:ff:ba:63:a8:f2:dd:
         0f:1a:b5:29:24:be:4e:02:25:0a:05:2a:70:41:7f:f1:80:46:
         24:87:39:f4:30:dc:c5:86:7a:b2:f5:d4:b9:cc:70:c4:c4:6b:
         d3:6e:7e:8a:45:0b:54:5b:0c:53:e8:6f:1b:be:72:0f:fb:a3:
         05:34:2e:84:78:2c:c8:07:13:df:3d:1e:5f:db:b1:bb:9e:b0:
         a5:49:86:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUaWMojzheZVoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
MTRiYWIzZjMtNzgzZS00M2VlLTgxMjktZjU4ODNkN2JkZmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh9qUN0P5flWN48ILe+gE/tWqkihTVjFu0oB
mVdJawoDD6nJMAtqmbwsrI+tSglmHdcjq8VuNTQrRsyfrYoJdpK6/wWrnQb2npzm
WOzSpeyTX+pjCTGm1dezjb1baT5iA0rCWddquRBwlMGA305Aun+lkYd0OD/wcg76
hb+tdZtjHkyN2RPIgOpnEadJYU4sEYzltKVvPLd3MvPGR9+Z0cjzD2BjdDQMeQx9
bMCdrdOBcpiA/zvxq6J9BNllUXcsp5IlFrwjP2qFy//HK7SwmYIzU3cBq0YSviFP
1mqMbjSDLEozd657oc+NEnZptMNrI+neHfY6femzS3S4PTd9UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHzmJGMAKALP/tFGUXDu3Bo5WEBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MzNhODItN2E2Ni0z
ZmIyLTg2YzItZTI0NzY3ODk0YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv/MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASYDYwGTde2ZSQmanNK9wP+pyXONRigAZyVymfiWKC1RIHf7LqWKmO8
UIkXpASNDEL8pCamXahvXIReTZOLHobYGGDoeqcqU5F9SUWgwuJZ+wAo4NF2oARv
xHKN8BNNJ4w70X9Z8tW8fQGQpzn5PbnCN4OpojXScFs+KsGYHr+LRwr7cfzHqYM8
EFH2+mXHb+u3NTYs/SSicx18wqeZu/IIfBp69A8xLu1nVRqHwf+6Y6jy3Q8atSkk
vk4CJQoFKnBBf/GARiSHOfQw3MWGerL11LnMcMTEa9NufopFC1RbDFPobxu+cg/7
owU0LoR4LMgHE989Hl/bsbuesKVJhqY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:51:25 2025 by rpki-client