Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa
File:                     5e67808e-f879-39fb-96e6-9d7194cb0487.roa (raw, json)
Hash identifier:          TdO4HTB+G2d6xqpP4TljJwtGAOVI25eW0IiDFsveuQc=
Subject key identifier:   7D:71:9D:F6:15:96:14:C9:62:DA:D7:71:B0:9C:A8:3E:16:F0:6A:93
Certificate issuer:       /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
Certificate serial:       010D0C9F43285848F926AD306216B87D74691200
Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        66.207.176.0/24 maxlen: 24
                          66.207.177.0/24 maxlen: 24
                          66.207.178.0/24 maxlen: 24
                          66.207.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ad:30:62:16:b8:7d:74:69:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=cc65a9ac-766a-4055-a4a8-83501f210005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:e4:61:1d:3b:85:49:e8:64:da:38:99:eb:
                    14:67:40:5e:53:23:fb:83:3a:36:b5:c4:cd:d2:94:
                    0d:08:6d:37:85:a6:5d:0d:29:05:9d:6f:60:0b:22:
                    ee:be:55:c5:cb:b3:f0:c2:4a:b4:25:20:d5:96:fe:
                    3b:39:08:ce:d2:03:bb:58:ff:31:1a:33:9b:42:e0:
                    fe:07:25:0c:52:a0:b3:6f:1d:90:23:5c:13:0d:f6:
                    4c:47:ba:da:a9:a6:26:25:65:37:d6:ea:11:a0:04:
                    61:bd:a8:a7:04:e4:98:10:3b:fb:7b:87:90:4b:13:
                    37:65:3f:b9:27:84:3c:58:4e:1c:91:57:e4:4a:ad:
                    95:17:b9:3f:c1:2f:2f:6d:c4:a9:81:e3:b1:12:eb:
                    a6:ec:e2:42:07:9a:6f:82:54:37:a7:8d:1e:b4:84:
                    8e:6c:5c:d0:40:42:43:33:18:8f:91:98:1a:86:5a:
                    7f:c2:b3:38:1b:22:f5:f1:53:23:88:db:1c:1e:c8:
                    0c:6f:90:0e:dc:3c:36:b0:02:53:3a:21:28:db:e3:
                    99:52:14:19:f9:5c:ab:3f:1b:dd:a5:ca:2b:8b:57:
                    d3:05:16:1e:2e:c8:7f:7a:9f:6e:85:6a:a2:12:d3:
                    10:a1:6c:31:55:56:af:40:c6:7b:7a:3c:db:20:6a:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:9D:F6:15:96:14:C9:62:DA:D7:71:B0:9C:A8:3E:16:F0:6A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5e67808e-f879-39fb-96e6-9d7194cb0487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl

            X509v3 Authority Key Identifier:
                keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:db:b0:03:9c:d6:3a:0e:cc:c2:11:bb:50:d2:d4:b8:a9:4d:
         93:82:c0:66:46:51:09:2b:3c:a1:82:11:3d:df:ca:5f:d2:fb:
         d9:a3:9f:79:4e:0e:84:45:69:f1:00:ab:f3:ab:7f:d7:ce:b9:
         e0:0e:9e:29:3f:63:ad:9f:cf:f5:08:a6:81:be:76:83:74:4e:
         c3:df:3e:30:00:d6:a3:7e:9a:c8:c3:23:a0:d6:66:4f:b5:9c:
         14:c0:f7:a6:33:80:c3:00:75:89:58:f7:ea:3e:46:a7:4a:8b:
         24:69:69:57:ac:39:c1:47:fc:15:f5:a9:f7:1e:f1:88:a7:ba:
         ed:4c:a1:b7:1c:1e:17:e1:a7:ef:d0:67:4b:4d:96:96:63:8e:
         74:cb:bb:7c:71:96:24:78:03:62:12:2f:76:06:3c:b2:bd:a5:
         e3:b8:9b:db:e7:f7:a5:36:59:07:77:f9:9c:be:cb:53:82:52:
         e6:1c:48:84:38:35:3f:90:07:12:6f:3e:e3:a9:68:1d:95:79:
         db:f1:9a:68:99:e0:c4:f5:59:32:21:f2:b1:d8:b4:10:ea:68:
         08:8c:fb:0d:52:72:30:59:39:b3:9d:f2:a0:c0:c5:99:c9:40:
         58:0a:33:e8:5d:8d:d8:3b:8d:7c:f4:26:d9:f1:a6:4d:47:a0:
         b6:bd:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:24 2025 by rpki-client