Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa
File:                     f2d4c297-8283-3225-9709-7307bf5ce1fb.roa (raw, json)
Hash identifier:          p1LNjhqTOOTfQlRXjjRnObuOlMmRU1qWLK5L9ZhjFFs=
Subject key identifier:   41:B4:D2:B3:8A:00:BB:02:4E:CA:8C:BA:D1:5F:ED:2B:CB:BC:84:FE
Certificate issuer:       /CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
Certificate serial:       010D0C9F43285848222FE8E5679696365EFA1500
Authority key identifier: C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     16436
IP address blocks:        66.187.12.0/23 maxlen: 23
                          207.174.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e8:e5:67:96:96:36:5e:fa:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=c8e8e180-1be3-4157-aa3f-b221cc0d40ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:12:a9:c0:b0:f4:0b:d5:bc:87:3c:82:bc:
                    2b:26:61:f5:e2:80:9c:ed:e0:24:b2:1f:1e:d4:73:
                    6b:08:c0:57:25:8e:ad:94:37:e7:4e:13:2f:58:57:
                    22:39:cf:7e:0c:d2:97:da:b8:16:24:2a:e8:c2:88:
                    e6:93:09:db:52:83:d7:22:4a:80:e6:11:24:57:0a:
                    12:dc:2f:8b:05:b3:cf:6d:e7:94:51:a0:fe:d0:6b:
                    ae:e6:df:76:2e:43:84:e4:4a:da:b5:c9:81:25:48:
                    8a:d6:9f:54:5d:c1:fa:7c:9d:45:d0:e3:66:6b:27:
                    ff:e7:b5:44:66:17:fb:0b:6b:d8:8e:54:cb:54:e4:
                    09:65:f6:20:7c:3a:7f:f6:8b:21:d0:c1:75:22:3f:
                    e6:e6:05:29:55:e4:94:4a:ff:3e:c3:96:0e:e5:e9:
                    e1:2c:aa:90:22:b0:43:30:f0:af:0e:88:57:80:63:
                    fc:a7:57:43:00:cc:cc:04:5d:52:a5:6e:4f:b3:bc:
                    b4:fc:dd:c7:7f:62:90:df:f3:f1:e4:1e:ad:ef:6f:
                    76:5f:a0:40:52:51:96:31:c4:f4:7a:92:c0:ab:46:
                    a2:34:e2:d2:fd:a9:9f:c0:9f:ab:c7:51:2e:37:4c:
                    cb:b4:ae:13:11:76:4b:cb:73:9d:e9:a8:43:55:c5:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:D2:B3:8A:00:BB:02:4E:CA:8C:BA:D1:5F:ED:2B:CB:BC:84:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.12.0/23
                  207.174.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ad:67:d4:6f:b5:22:eb:1d:07:66:ff:5a:9c:48:17:d5:8e:
         ff:9c:c2:6e:1e:82:8c:ef:09:09:c1:0e:63:cd:37:f7:e6:de:
         08:f5:5c:82:fc:40:66:41:30:33:52:8b:90:17:89:67:77:0d:
         37:e9:07:f4:65:b0:27:18:31:f6:62:4b:10:1a:a0:27:00:c2:
         cf:cc:82:17:43:2b:95:a2:a1:65:2d:98:7c:0e:e5:56:8a:6e:
         de:a2:ab:8d:51:5f:83:89:6b:07:78:cd:1d:78:60:7f:51:70:
         dd:64:05:de:4b:9e:93:d7:6b:03:b8:94:fd:05:15:c0:95:e2:
         d2:0f:e8:3f:94:8c:71:2e:ff:fb:f4:62:8e:33:ac:38:3d:97:
         e5:ad:d2:91:9b:63:f6:11:cd:44:0e:47:10:0e:55:b0:42:dd:
         77:5d:b1:71:4b:76:5b:6c:d2:3d:28:d7:ed:44:49:17:db:13:
         c2:4f:e8:bf:53:8e:08:3a:41:37:68:69:d3:3a:f1:b8:23:de:
         e0:42:4c:13:cb:41:8a:0a:49:cb:dc:c1:53:ae:8e:21:27:d1:
         9b:ca:4f:f0:92:22:91:ed:85:92:cc:cf:70:b0:77:8c:4d:39:
         9e:ad:d4:8c:fd:31:48:e6:4b:1e:0b:0c:dc:79:70:5c:28:ec:
         30:5b:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:53 2025 by rpki-client