Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/6a600dfd-db12-354f-9892-c41a0382b792.roa
File:                     6a600dfd-db12-354f-9892-c41a0382b792.roa (raw, json)
Hash identifier:          doIAV4cWyXgpZ4DY2EO4D4TqQYL5fK3fOPMfH9GUJUs=
Subject key identifier:   32:9E:F5:A4:42:C2:F3:38:41:70:D6:E0:59:C6:A4:93:89:7C:96:D4
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F43285848D4DB967D9872902B8D956F80
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/6a600dfd-db12-354f-9892-c41a0382b792.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     11620
IP address blocks:        66.255.224.0/21 maxlen: 24
                          66.255.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:96:7d:98:72:90:2b:8d:95:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=4062a5a4-a635-4b03-a630-281420925d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:44:bf:f0:f1:24:ce:86:cd:a9:4f:36:cd:
                    21:80:8e:b3:f1:2a:33:a7:7c:db:ac:7f:b5:2f:6b:
                    82:cd:69:ba:32:9e:b2:ec:0e:fd:ba:84:68:12:83:
                    0c:0d:fb:97:d9:03:e1:74:56:0d:7c:7e:25:b1:9c:
                    d3:b3:75:f6:0a:e4:9c:77:5c:cf:26:8c:ec:a3:81:
                    69:6e:e5:ba:89:eb:36:a5:47:c6:50:af:09:42:6a:
                    48:b0:94:6f:06:48:49:96:e3:e8:f7:5e:eb:d2:dd:
                    2f:9c:8f:ca:24:83:9e:d8:cf:11:e3:c9:89:7d:9c:
                    0e:04:49:d5:3d:b8:4d:27:e6:3c:99:05:cb:77:48:
                    7f:5e:4d:32:c5:c7:62:f8:4b:e1:a7:8c:ca:44:87:
                    a8:40:dc:50:ed:01:82:82:41:81:f9:ed:0e:9c:c4:
                    6c:85:5b:20:61:8d:6c:fc:28:06:a3:db:b9:4c:93:
                    16:a0:fe:68:98:5b:f0:87:2d:eb:33:60:5b:c6:39:
                    d5:26:e4:e8:f1:71:d7:2c:93:90:d3:50:93:72:a8:
                    e8:ce:68:a0:ab:2d:cf:56:81:87:05:6f:f8:5e:ec:
                    c0:4e:db:3d:43:53:c4:0a:20:7e:1b:8a:b5:a9:0d:
                    b4:04:99:65:d0:e9:57:42:ce:80:0f:bb:bc:c9:a9:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9E:F5:A4:42:C2:F3:38:41:70:D6:E0:59:C6:A4:93:89:7C:96:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/6a600dfd-db12-354f-9892-c41a0382b792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.255.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:aa:94:0d:3f:8f:e4:34:35:2a:a9:2f:d1:a4:96:c8:e5:36:
         96:62:1e:d7:a6:5d:fe:de:b8:10:34:61:fc:92:02:61:f8:12:
         cc:49:1c:bc:e4:e1:8f:7d:49:3b:68:91:a2:54:53:f7:d1:20:
         d2:e1:a1:52:bd:38:f4:ba:ab:ea:52:15:7f:cb:a6:31:81:2e:
         67:3f:96:fc:04:12:df:12:a7:4d:f1:0d:28:2e:17:eb:0b:8d:
         ae:a5:08:1d:b3:75:34:1b:54:9e:3c:6a:66:ee:d3:3b:d3:fb:
         1e:19:d3:32:c6:2f:97:58:08:65:43:8f:a1:f1:b9:31:35:f7:
         70:17:4d:8a:b3:29:b6:b8:0f:e0:31:23:ef:39:dc:a4:8a:9e:
         f1:e9:c1:a8:3d:fe:de:c9:54:28:0e:ac:06:d3:f5:e1:84:02:
         78:86:02:b2:60:65:a9:5b:35:f7:41:f4:08:e3:2b:30:b9:69:
         f5:d6:b5:9f:47:61:19:d9:39:bb:94:da:e3:53:f8:25:b1:89:
         5b:f1:b3:63:ca:7c:87:de:aa:36:50:80:7e:b5:d6:6b:37:60:
         19:41:ef:d6:38:f3:a3:69:06:14:f5:36:19:93:45:7d:02:7a:
         92:0b:cc:11:d5:c7:78:03:ce:fc:ef:5b:27:a3:0a:d3:d4:b3:
         28:18:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:19 2025 by rpki-client