Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
File:                     4e206120-21a0-3b6c-80db-62308ac9e02c.roa (raw, json)
Hash identifier:          vZixuXoaaqc229Und67H9MgIfBB+NwbshQxhAICnVsw=
Subject key identifier:   A3:D0:89:5E:C6:F5:F1:92:0B:5E:0E:66:71:E2:1A:F8:C5:42:24:1C
Certificate issuer:       /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Certificate serial:       010D0C9F4328584973DEE917EDC324905B8EAD80
Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     394456
IP address blocks:        66.223.49.0/24 maxlen: 24
                          209.196.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e9:17:ed:c3:24:90:5b:8e:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=a40a77dc-8837-4c48-844b-e7df98a34190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:6e:8f:2b:14:05:76:73:7e:ae:1a:dc:d0:
                    60:5f:d3:0a:d8:c3:6e:fe:19:ca:79:32:b3:50:59:
                    ba:33:ae:1c:4c:82:82:68:3f:c3:a0:37:40:1a:99:
                    35:0e:52:16:1c:9c:3f:7e:97:7e:ff:58:23:1f:8a:
                    f7:2c:00:49:65:c9:e2:cf:bb:e1:92:5a:f4:64:9d:
                    11:6f:65:05:f5:23:cf:a5:8a:66:d1:16:09:9d:d9:
                    85:db:99:e2:c0:c0:41:06:7e:ab:ca:8a:f9:e8:c0:
                    74:fb:be:ce:23:d6:a3:9c:45:4b:4b:9a:dd:14:f4:
                    af:37:dc:62:6e:01:fa:fe:a1:94:8d:9d:e8:ce:76:
                    a7:1c:a1:1e:2a:34:4c:d4:50:0c:da:b5:97:78:e7:
                    f8:4a:e6:13:06:2a:ec:50:8f:1d:b9:02:43:ca:f1:
                    cf:79:71:14:df:29:83:80:27:73:12:01:1a:49:69:
                    fb:8d:27:7f:c7:f7:1e:a6:ba:b7:29:84:0e:2e:a5:
                    8d:7d:85:9b:1e:41:da:e7:ed:11:7b:fe:fe:3c:57:
                    2f:44:97:9a:f1:fa:eb:f4:44:df:58:fe:e6:8a:42:
                    0b:be:89:fa:49:8c:b0:75:0d:17:3c:93:ce:75:85:
                    6a:bb:35:52:6f:8e:01:62:8c:c6:d6:d9:b3:4d:d4:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:89:5E:C6:F5:F1:92:0B:5E:0E:66:71:E2:1A:F8:C5:42:24:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.49.0/24
                  209.196.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:02:5c:41:96:ad:84:4d:85:3f:36:0b:5b:b7:d9:c4:81:
         18:6d:48:67:4b:48:45:77:20:47:c8:04:7c:d5:63:19:e0:05:
         ba:19:65:24:bc:af:f7:c1:04:b9:55:7c:6e:17:f6:25:72:c9:
         75:7e:d6:12:6a:8a:b6:03:10:d1:05:14:59:e6:7b:46:53:13:
         7d:bd:80:a2:00:24:88:96:13:dc:7a:4c:b9:bb:28:44:60:c3:
         c1:84:2a:54:d6:ce:3c:9e:12:9a:c1:2e:69:94:a2:a1:c4:ba:
         43:2a:bc:c3:c0:96:04:e2:e7:8d:8d:af:42:a7:06:31:68:4c:
         ce:e3:74:1c:7b:f1:c5:f9:01:6a:8e:31:ee:cc:f7:c7:02:f3:
         43:ec:13:c8:c9:48:df:7d:ba:6d:fc:6d:53:15:4b:d0:1d:f5:
         9a:c3:7e:2d:a3:69:80:7c:d7:56:f0:b9:ef:c8:4d:87:2a:38:
         ca:3a:82:f1:e7:5a:6e:d5:9c:c8:e1:32:59:cf:5c:fd:17:2e:
         a2:45:a9:2d:b3:fd:89:f3:35:58:ce:99:88:a5:6b:6a:4b:3f:
         74:cf:db:d0:da:8b:57:5a:93:d3:5f:0f:94:cf:2f:6b:0c:f9:
         93:da:09:b9:d9:4e:fe:14:7f:70:4a:86:0f:6b:47:12:25:86:
         e8:7f:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:33 2025 by rpki-client