Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/415667aa-fecc-38bc-97d1-49fe9ab77510.roa
File:                     415667aa-fecc-38bc-97d1-49fe9ab77510.roa (raw, json)
Hash identifier:          tI4OA0YSekOzNOQ6paquRXkw4NW5l357tekmBtdtjTQ=
Subject key identifier:   BE:C9:44:43:E4:4A:FE:AD:E1:A2:8A:5F:53:D4:3E:7C:0E:50:71:76
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858496A19AA7CECE393E750E12070
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/415667aa-fecc-38bc-97d1-49fe9ab77510.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     109
IP address blocks:        66.187.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:aa:7c:ec:e3:93:e7:50:e1:20:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=13698016-4cab-477e-9e34-e68c1d8ea11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8a:73:ed:0c:f1:d3:26:de:87:bd:02:ae:80:
                    1e:b0:e8:9a:86:6e:ea:b1:f6:ee:af:90:e9:a5:90:
                    ec:8b:3e:f0:09:f0:87:d0:5a:2c:18:1e:ea:fd:b7:
                    ad:ba:3e:48:b3:01:d9:4e:79:cf:32:12:fc:5c:fb:
                    56:14:b9:a6:6a:67:61:29:18:c2:5f:3e:f2:7d:94:
                    f3:b4:87:c3:6f:e0:ca:e6:6d:4d:13:70:24:52:4b:
                    2a:86:95:88:df:37:35:e8:5e:9a:d1:db:51:7d:64:
                    7a:29:d7:6b:52:16:3c:e0:39:e4:64:ac:e1:60:95:
                    13:d6:77:ba:8a:e7:9d:25:be:1d:77:dd:5f:4b:ab:
                    b6:76:30:fc:3b:99:6c:39:63:61:e5:a0:02:b4:a8:
                    03:8f:36:31:75:18:bf:f9:11:db:11:0f:82:e9:ed:
                    8f:01:32:50:b3:7f:f4:53:da:79:90:9b:2d:13:da:
                    35:8c:97:fe:1e:ca:3d:64:c2:bc:66:b4:b9:31:00:
                    d4:a2:4d:6e:e8:f4:ec:a9:80:5e:99:53:1c:41:f6:
                    2d:8d:9a:b0:07:d0:07:f0:20:72:6b:4a:58:d7:be:
                    98:31:72:79:e9:3a:75:4f:29:bd:07:cd:ca:bb:6a:
                    29:66:10:57:86:84:63:c6:85:d1:ff:43:5e:e1:35:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C9:44:43:E4:4A:FE:AD:E1:A2:8A:5F:53:D4:3E:7C:0E:50:71:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/415667aa-fecc-38bc-97d1-49fe9ab77510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6b:c1:a2:85:06:b7:e7:f5:fc:34:1c:d8:7c:ee:c6:a9:14:
         24:ac:2f:04:fd:f9:a6:f4:93:0a:1b:de:5a:f8:73:30:f1:28:
         b6:d8:4d:ae:2e:8d:b4:ac:fa:e7:f7:6f:da:39:ba:7d:62:c4:
         7c:ec:98:6d:6d:a0:33:b2:7b:92:93:78:11:81:6a:fc:cf:78:
         7f:8e:73:9d:05:c8:c5:e2:07:91:33:a7:6b:bb:d7:58:7b:6c:
         ad:b0:38:c9:aa:00:97:a4:ca:6c:c2:8e:ac:4a:26:d3:bf:0f:
         93:5e:61:20:5d:36:60:50:85:cb:b3:92:10:8a:29:98:95:f2:
         95:24:b3:fb:78:78:08:0a:69:f1:f0:e5:77:44:d1:8a:b7:fa:
         98:aa:4f:d8:b8:6e:ef:d8:8e:63:6e:82:16:ab:3c:b7:3b:cd:
         94:60:db:21:92:71:4d:f8:a5:d5:65:70:bd:11:04:32:68:06:
         25:73:d1:fd:94:7e:22:4e:44:bc:c0:45:4a:47:45:06:f2:9c:
         66:53:cd:3e:47:b9:05:2a:34:e4:a3:1c:5a:f5:42:33:c9:d2:
         1c:6c:0e:bc:30:ad:0c:97:99:8d:49:fc:c7:9f:9b:9e:2c:29:
         9b:c7:85:f6:36:48:62:74:82:85:bf:9e:1d:1d:20:fa:e7:fe:
         56:bf:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:47 2025 by rpki-client