Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
File:                     d0ff0748-49a0-3920-ad1b-a4de5796190f.roa (raw, json)
Hash identifier:          eH++uk2HOSBZwLXml5bW0U3V+jA1QKk0M4aKLl5+XFQ=
Subject key identifier:   6D:7E:38:6B:AD:8A:8C:4A:EC:AE:35:44:3F:3F:36:DB:7B:4C:80:66
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BBBB7524A7F7D3F62312BA40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        66.110.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:75:24:a7:f7:d3:f6:23:12:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=841b7a58-55d9-4d08-b3a5-86ed1081849b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:34:62:b2:49:cd:77:24:ef:75:fd:42:ea:
                    22:1e:ce:b8:90:61:7c:4b:9e:1b:19:0e:99:a5:8d:
                    e6:3b:d9:68:e7:ba:0d:fe:4f:49:6f:37:90:64:62:
                    47:ad:1a:37:08:c7:25:8a:7e:35:7c:de:ef:64:ca:
                    1f:e8:88:45:0d:19:78:15:25:db:ff:59:44:5d:7c:
                    3b:92:6c:17:99:79:07:59:2e:2c:b9:1b:0d:c2:c9:
                    93:61:be:d6:ce:0c:29:e6:a9:fb:12:bf:ac:56:66:
                    3c:e6:be:90:06:54:b9:aa:8d:96:8d:08:3b:3d:4f:
                    d2:30:d6:97:38:02:ff:40:05:60:ff:dc:5f:4a:d6:
                    55:6a:20:fe:ea:7b:71:49:00:ab:46:59:a8:c3:39:
                    82:75:3b:89:b4:77:37:b4:4a:4e:59:f8:5c:e5:e6:
                    0c:35:18:e2:9a:91:e7:fd:3e:70:d2:92:5d:5f:d1:
                    6a:50:ff:ca:5e:21:73:2b:91:2c:b6:14:f5:13:56:
                    83:90:1e:6e:e2:7f:5c:ca:1d:f1:e4:17:22:cf:ff:
                    77:92:21:4c:c6:f0:f4:a1:39:4a:4c:af:81:4f:62:
                    cd:83:1b:cd:9f:cd:12:3c:17:75:8d:74:41:00:1e:
                    92:4a:15:b7:ee:25:1c:76:5a:71:b5:d1:68:c4:e7:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7E:38:6B:AD:8A:8C:4A:EC:AE:35:44:3F:3F:36:DB:7B:4C:80:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:9f:0a:88:22:9f:48:e2:5b:8e:95:28:56:ca:3a:fc:99:8f:
         42:7a:ce:2f:03:7f:f8:fd:08:c8:29:e6:80:a6:01:0a:6f:aa:
         4b:d6:b0:95:6a:fb:6e:3a:8a:06:57:f3:59:e3:66:25:1c:76:
         08:ce:06:1a:59:c8:9e:c6:03:81:1a:6c:d7:af:23:c2:57:1f:
         b3:6f:e6:e2:00:3d:17:2f:83:4d:a9:0a:c7:13:63:3e:98:91:
         11:13:10:81:4d:e0:99:18:35:95:82:fa:99:ed:ab:90:1b:2d:
         42:fd:98:df:51:60:ec:e4:3b:81:ca:9a:d1:cb:6e:ff:7f:8e:
         e3:52:c5:1c:b8:d7:9e:16:e9:4c:be:26:4e:22:a3:6e:86:16:
         ab:3a:45:fd:3a:d5:0a:ce:6e:c7:40:5c:5a:b5:ef:8c:4a:31:
         ee:03:8b:bb:7a:a9:31:79:80:df:4f:9a:01:a0:4a:99:3b:d2:
         9c:02:0d:15:8a:60:48:7e:5e:e8:7b:61:9e:3d:c0:2f:34:b4:
         22:a6:54:16:e1:fd:d0:09:fb:03:b6:5d:2a:e9:cc:05:af:39:
         ac:91:72:1b:e6:f9:6d:44:73:19:61:62:16:cf:10:e5:49:20:
         26:37:64:bb:43:2a:d5:17:96:4d:2b:f7:db:04:15:4b:3e:a8:
         23:7a:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:33 2025 by rpki-client