Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa
File:                     74c66e80-7073-3988-a63b-86cdc1e03230.roa (raw, json)
Hash identifier:          GKqk4jX6f6B9mnalaZnMnwI+WtMpcxK/ZSWU7NsLABc=
Subject key identifier:   CD:7E:A7:71:A6:D0:64:5F:44:08:18:DD:63:17:ED:AE:E6:03:7F:F1
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F432858495529515959933551F10FD919
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     4540
IP address blocks:        66.187.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:51:59:59:93:35:51:f1:0f:d9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=16069436-ec78-4ebd-be88-4b502bfe8d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:b4:d9:9c:15:c6:24:39:c5:bb:48:55:f8:
                    54:6a:29:5a:b4:d4:a1:b0:db:36:bb:03:7b:1b:5c:
                    81:c4:10:25:81:f8:fb:1a:b8:43:20:28:88:b7:43:
                    be:80:f1:5c:5e:e4:2a:04:7d:15:09:5f:30:2c:c7:
                    75:8e:83:1e:87:72:c0:a3:06:06:1d:2b:38:e4:25:
                    6a:2f:3a:c0:7f:ef:e2:79:00:d3:cf:e7:6e:5b:06:
                    97:ea:61:a1:28:6a:35:0f:a7:56:bf:0f:a9:59:22:
                    0f:79:cf:0a:69:dd:08:37:41:65:9e:35:79:6b:dd:
                    87:25:fc:92:81:8d:1b:8e:1e:c9:0f:b6:ea:b8:d7:
                    b2:44:46:68:97:58:71:5f:ab:3a:0a:07:fc:07:0e:
                    d8:9e:63:08:fb:e6:44:e5:49:11:11:b3:1e:0a:7c:
                    5d:6a:16:be:62:24:21:09:d6:7f:81:d4:5c:2d:8f:
                    e7:88:87:cd:8e:bf:44:3f:70:9b:35:15:d4:74:97:
                    d1:d9:b5:47:6f:08:b6:d1:32:f7:c8:16:5d:00:86:
                    d2:12:6d:91:e0:9e:fb:45:85:a8:bf:45:cb:f4:e8:
                    85:96:0a:f3:b4:f3:a1:be:4f:35:64:00:07:c8:74:
                    a5:04:76:6b:9b:39:c3:8f:84:8c:e4:45:7b:85:47:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7E:A7:71:A6:D0:64:5F:44:08:18:DD:63:17:ED:AE:E6:03:7F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/74c66e80-7073-3988-a63b-86cdc1e03230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:64:37:18:43:4f:43:7e:88:00:f7:00:ae:f2:07:1e:14:19:
         98:69:6c:ac:3d:5e:21:15:17:5d:f1:d0:3c:4f:0b:af:c9:a5:
         43:5f:b3:d0:f3:70:69:24:c3:33:c7:ab:46:78:0c:6e:7d:6b:
         06:c0:8c:0d:ca:57:65:51:84:81:d3:20:55:e4:a1:b8:bf:1f:
         ff:fe:8d:2b:3f:70:5e:f0:69:a5:0b:c2:e6:27:68:e6:32:7c:
         62:73:2e:9a:8c:b3:1e:f7:e9:51:17:7a:13:28:07:da:c9:2f:
         e5:0d:11:6a:f6:6c:d5:f0:c4:54:ab:f2:ad:a6:b8:96:b8:bf:
         a3:be:1b:dd:68:a0:93:c8:e9:3c:24:a4:b6:ce:b4:dd:00:45:
         17:24:54:65:45:40:bf:07:be:b7:bb:41:c4:5e:7b:59:01:fb:
         70:33:cd:7f:56:41:43:78:5f:fb:95:9d:8c:70:8d:48:65:ee:
         83:3d:ff:ee:ed:24:99:26:c7:a5:69:ce:3b:b9:5a:7b:1c:34:
         81:21:85:2a:a9:b5:69:72:a0:76:1e:6a:b0:08:de:26:90:72:
         03:db:36:7f:9d:cf:78:d8:b4:5b:0a:28:cc:6c:56:fe:67:ce:
         1f:a6:8c:b3:03:cb:3c:20:7e:b6:94:29:d7:74:da:37:d2:b6:
         17:63:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:15 2025 by rpki-client