Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa
File:                     cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa (raw, json)
Hash identifier:          YBUJojpP1PL7turUmlvwQ+jKTOSJ4VAgIK6+ya9Ie8s=
Subject key identifier:   6D:1C:51:C7:25:43:89:35:4F:C3:C3:E2:BA:B6:D6:FF:F2:E4:28:6D
Certificate issuer:       /CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
Certificate serial:       010D0C9F43285848D4DB91FAE0A4F6615D414DC8
Authority key identifier: 62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     1100
IP address blocks:        66.179.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:91:fa:e0:a4:f6:61:5d:41:4d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=45751b81-ed58-4ff2-b169-44de2d8e6009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:19:98:a5:9f:3d:e8:f1:ea:76:0d:fd:b9:65:
                    cf:bb:8e:1e:79:d0:d4:07:bb:f2:9f:0f:4e:e0:c5:
                    b4:dd:eb:a6:df:d6:01:17:8a:bc:d9:e5:91:11:71:
                    02:dc:d4:04:70:52:58:04:02:20:93:be:c6:a2:91:
                    32:77:76:c2:6b:73:f9:60:32:ae:d0:fa:01:42:72:
                    d1:23:15:ab:51:f9:d5:64:36:a4:2e:b7:5c:8b:68:
                    04:10:f2:9a:b9:53:93:6a:b4:4d:3e:61:0a:59:87:
                    ad:b7:00:51:4e:60:de:6a:0e:65:ed:e6:51:50:fd:
                    6a:d5:d3:3f:0f:78:29:35:62:bb:53:ed:dc:34:fb:
                    92:41:52:2d:03:5b:b9:2b:a1:99:fe:d7:1d:38:34:
                    ab:22:29:09:8c:fc:38:91:b2:97:00:ae:40:d1:89:
                    3a:74:cd:86:86:2c:e4:17:a4:5c:2a:d7:da:b0:e2:
                    4a:d3:f4:38:5d:2d:73:5a:0b:90:b5:7b:f8:43:c6:
                    f5:5b:aa:17:d4:bc:5c:e0:cc:1c:58:be:34:6b:32:
                    b1:c7:e7:cf:eb:24:2c:c3:bd:2f:10:c0:52:e2:aa:
                    0d:f2:da:2e:92:c8:33:29:22:f1:84:82:09:44:29:
                    c8:67:f6:aa:88:56:3a:35:1b:c0:49:e6:3c:d8:bd:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1C:51:C7:25:43:89:35:4F:C3:C3:E2:BA:B6:D6:FF:F2:E4:28:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/cc14ddfb-a5db-36e5-9efb-ef0dacf097d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl

            X509v3 Authority Key Identifier:
                keyid:62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:6c:ba:2f:30:1c:85:ba:53:b2:fe:71:81:c5:66:f9:d9:
         bb:2a:8a:1e:67:67:63:10:d8:8d:0e:b9:15:0f:dd:49:19:9d:
         98:35:b7:7a:19:a3:84:82:76:5c:9a:a6:c8:26:37:a7:e9:c2:
         1c:f0:45:15:41:a5:04:07:13:36:4d:e7:15:da:8e:fe:94:38:
         b0:95:6a:87:22:e8:34:f3:6e:e6:ba:e0:64:09:4f:31:d9:c7:
         34:4d:c3:f9:7a:39:fe:08:4e:b7:70:69:28:ad:cd:ae:78:05:
         19:49:3c:14:fe:4d:4c:f3:30:70:8d:82:3f:f1:93:7c:cb:2c:
         b9:27:ca:f6:db:30:cb:cf:53:e6:fa:a7:8d:e1:41:06:fc:2f:
         87:52:ee:2d:64:83:7e:6a:79:f3:4b:55:92:d9:54:b1:89:a1:
         61:c1:50:e6:67:9d:5d:04:f7:3b:75:2c:1c:0c:b8:50:cc:e7:
         ab:52:08:0f:36:a0:ab:93:c9:73:a2:ac:0d:62:90:ad:b3:f8:
         77:12:d1:69:06:89:3e:ab:5b:a7:17:b6:d7:1a:ef:b0:a9:7f:
         e5:1c:8f:0f:5a:c7:36:fe:d2:e3:cc:b2:72:56:75:a6:fd:2e:
         dc:f7:db:73:af:4c:4f:0e:bd:e3:f4:d6:a7:e3:1f:47:b6:ba:
         6f:3b:66:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:22:13 2025 by rpki-client