Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/926b9965-779f-384c-b18a-48bb42cc8632.roa
File:                     926b9965-779f-384c-b18a-48bb42cc8632.roa (raw, json)
Hash identifier:          EhaNodGzzWgqTWUZ09zJHr8i+ZXxKil/VyfE1yBmhwM=
Subject key identifier:   E5:95:12:5A:8C:20:C1:EE:ED:15:39:C9:02:7A:06:45:41:67:47:DB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BBBB7B61ABF51B9167113630
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/926b9965-779f-384c-b18a-48bb42cc8632.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        66.203.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:7b:61:ab:f5:1b:91:67:11:36:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=09525c8a-ee33-4551-ac56-c6513b3a56d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:18:9e:78:73:14:0c:79:80:f0:40:24:28:7c:
                    9a:4b:03:5f:50:a2:76:41:1b:95:2d:4c:37:0c:59:
                    32:05:cd:c4:e5:ec:38:28:ad:b9:06:35:1a:e1:fe:
                    10:3a:c0:af:48:4b:79:67:a7:8f:f7:0f:a7:3f:07:
                    ff:16:81:42:6b:ee:23:18:8b:41:a0:b2:9f:bd:87:
                    f9:54:bf:c3:4a:9d:16:9c:b0:38:cb:7c:16:cd:f9:
                    1c:38:da:76:7a:b2:88:be:bc:c5:a3:d7:15:e6:63:
                    64:99:14:86:bb:e2:5f:45:3e:5c:b8:ef:e1:b3:ec:
                    ac:6f:ef:70:95:20:44:7f:0b:95:9b:9c:19:70:e8:
                    e5:f4:63:0e:4b:16:a8:78:6b:60:e0:e5:54:3a:4d:
                    7e:3e:6c:9b:46:e9:02:18:9f:30:b3:4d:28:00:73:
                    d9:2e:ed:8e:48:08:79:c0:00:d7:84:51:99:d3:bc:
                    28:c7:8b:02:6a:56:87:eb:5d:92:0e:fc:31:c5:d7:
                    af:82:c1:fd:be:89:d9:c3:e8:90:e5:24:cf:5c:f7:
                    b7:44:ae:16:b7:93:48:46:1d:69:85:0e:33:4b:0b:
                    0f:a0:5d:e1:67:6b:46:20:39:a8:3a:86:d4:07:6d:
                    ea:3a:93:72:78:02:1f:3a:26:45:cc:27:1e:21:79:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:12:5A:8C:20:C1:EE:ED:15:39:C9:02:7A:06:45:41:67:47:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/926b9965-779f-384c-b18a-48bb42cc8632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0b:d5:2f:39:d1:ce:5b:71:2e:d6:f3:2a:f8:17:10:77:e1:
         40:e1:70:f1:b4:e8:af:f7:9c:d7:a2:de:40:d6:48:4f:26:1f:
         b9:73:68:b0:94:55:1d:b3:74:b0:38:05:6f:d0:39:1d:cf:19:
         6d:07:5a:66:a8:60:dc:0a:a6:68:0b:09:84:58:fb:9d:85:44:
         0f:19:c0:d5:e8:18:86:1c:c5:a7:d0:66:c6:33:d6:fb:3a:68:
         56:d7:13:f5:84:d1:9f:2b:4c:8f:fb:e8:6e:e9:9f:f2:9b:db:
         78:ac:41:69:36:82:b7:01:3d:93:20:f4:01:05:97:0d:bc:c3:
         ef:ee:fa:01:25:04:26:d1:67:98:2c:d0:8f:e4:2f:2f:60:81:
         ab:df:83:9c:7c:fe:0b:f4:04:f6:87:44:25:51:c6:32:fb:05:
         91:24:87:f2:12:27:3c:ec:88:b2:d3:3d:62:a7:e9:25:5d:13:
         56:98:93:de:46:f2:d0:5e:53:5e:d4:4b:e0:7d:56:4b:86:13:
         8e:f1:d4:ef:61:c4:78:da:97:7e:82:11:63:80:35:08:b6:0d:
         c6:6c:95:3c:32:1b:90:63:53:58:87:70:4b:dd:49:46:03:f4:
         04:c4:a3:a4:e8:00:d5:5d:69:b7:a7:67:be:02:dc:34:20:23:
         36:2a:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:15 2025 by rpki-client