Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0435653a-9b4a-3b28-b52f-16a33a5f6f3f.roa
File:                     0435653a-9b4a-3b28-b52f-16a33a5f6f3f.roa (raw, json)
Hash identifier:          qOg0bvhUv+njAEp82vCo+jXk3qUrK2tqEK4vDXKQSU4=
Subject key identifier:   D7:C4:50:24:BB:82:F5:06:2E:33:34:F3:AB:E7:7D:17:E3:53:78:7D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CB9755A3BDA66ED98300
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0435653a-9b4a-3b28-b52f-16a33a5f6f3f.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        66.46.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cb:97:55:a3:bd:a6:6e:d9:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=7fc996c2-fa1e-4f4d-937b-06ee2d94fdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:31:c7:27:64:c2:eb:79:be:bd:36:6e:5d:
                    a8:cd:4c:df:9f:f8:4b:5d:ad:25:15:3e:9e:32:37:
                    1e:c4:59:08:54:8f:41:63:2f:87:85:0e:fb:0b:68:
                    76:6e:05:c5:60:fb:7c:54:17:79:61:3e:95:04:6e:
                    18:22:cb:f6:9c:96:bb:4a:1c:d1:88:da:7c:66:d7:
                    b0:ae:0f:b9:15:16:81:22:56:65:61:3f:87:4e:a6:
                    9e:28:b9:61:70:31:9a:ae:d8:9d:55:b5:99:59:08:
                    97:44:f4:c4:ff:4a:94:f1:6b:fc:ea:6f:28:b9:3e:
                    cc:b0:71:9f:c3:4f:51:ca:3e:85:b2:ef:27:26:b8:
                    b5:70:e1:be:59:a1:59:a7:a7:32:ba:8d:c1:3e:f6:
                    71:0e:bb:31:7f:d8:35:ff:86:57:ed:ea:7c:2e:bf:
                    63:1b:f2:fc:a3:b7:c0:20:16:1c:90:2d:e9:24:19:
                    74:2e:8b:5e:dc:35:76:41:0b:8a:73:23:f8:16:29:
                    8e:2c:dc:30:7c:d5:28:13:b9:6f:ae:3e:5f:cf:13:
                    73:61:b1:0d:4d:3a:83:27:f6:35:db:79:1c:29:4a:
                    8d:f4:70:86:35:e0:26:0d:c6:cd:d8:67:b7:0e:46:
                    1d:f7:c6:d7:f6:55:ed:85:65:1d:bd:bd:5c:f9:5c:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:50:24:BB:82:F5:06:2E:33:34:F3:AB:E7:7D:17:E3:53:78:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0435653a-9b4a-3b28-b52f-16a33a5f6f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a6:57:e0:c0:bf:38:9b:ba:ad:fb:53:a8:04:3e:3c:28:0e:
         f9:68:49:fe:7c:12:56:48:4d:39:5d:41:7b:bd:53:8d:58:91:
         8c:44:3b:45:ec:b7:05:29:be:93:28:4f:01:aa:87:1b:4d:47:
         a0:f7:86:a1:5e:ec:f0:e9:b6:50:b2:f1:87:cd:4f:7c:54:9a:
         84:d2:50:1c:a7:cd:af:02:ef:30:36:69:bd:b9:05:bb:e4:e6:
         99:5f:e9:c1:48:6f:d6:0a:38:90:e6:8d:e7:a0:81:f8:7f:69:
         93:c2:83:46:9a:75:4b:b2:25:72:f4:93:b9:95:b3:0d:39:b2:
         b9:bf:82:d3:32:45:b3:bd:7a:35:ff:d6:e9:3d:72:4d:7b:ba:
         35:c4:66:42:ff:34:5c:a6:68:f6:c9:00:42:bb:54:25:8a:93:
         79:df:4b:b5:4b:00:38:e6:c5:d3:9d:9b:d4:59:39:ff:08:5a:
         56:a9:f3:22:64:e9:30:48:cc:96:ac:f8:2e:91:ae:10:ba:08:
         dd:a3:d7:e6:a4:bb:d1:b4:be:25:7f:63:23:d1:e0:64:17:0b:
         5b:fe:6e:8d:49:a7:ad:29:8e:af:cc:0b:71:09:82:d2:92:42:
         8b:98:24:af:8d:11:ed:7b:a9:6b:61:aa:da:4c:60:3a:59:f4:
         40:c2:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:28 2025 by rpki-client