Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa
File:                     d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa (raw, json)
Hash identifier:          r3jzWbXTarNtj+xMUq5hdwOe+nMtVMQ8BxMICtL3/ts=
Subject key identifier:   03:09:6F:3B:51:88:87:42:B2:35:2F:E9:49:9A:D9:89:11:18:92:11
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F432858487A207D84220409AEBEA93AA0
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     26677
IP address blocks:        66.97.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:7d:84:22:04:09:ae:be:a9:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=1fbd3e58-037b-4bbc-9cdb-20f80667b471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:1e:24:c5:e5:cf:94:bd:ad:62:db:4e:5d:
                    11:81:e7:b2:12:45:04:c7:2a:ca:67:f7:8c:09:df:
                    a3:2a:53:23:49:75:9c:61:0d:93:d8:51:53:08:bc:
                    8f:0e:cd:d8:1e:98:10:f1:c2:1c:25:80:e3:05:b8:
                    5d:39:6d:62:41:77:90:fd:08:12:1d:25:46:fd:ed:
                    d3:f6:0c:bc:93:74:00:5d:dc:f0:d4:5b:52:0e:e1:
                    12:a1:2c:d4:ee:49:1b:29:cc:4c:b3:85:76:69:af:
                    dc:be:d4:70:e6:16:2e:8f:46:b5:a1:1e:da:52:e4:
                    b3:96:c7:b7:d2:a1:c5:f8:c0:d6:75:6b:9b:59:fd:
                    9e:44:36:bd:9e:f2:9d:9c:72:3e:86:80:fe:7e:c7:
                    32:91:05:5d:a7:c5:34:0e:67:99:25:03:b8:38:23:
                    24:cf:3e:b1:48:f8:09:82:b3:26:30:f2:c4:ea:b6:
                    99:6e:b3:9b:94:b2:e9:c8:92:66:0f:46:a1:ba:68:
                    eb:29:82:3b:2b:e3:42:45:a1:a5:f5:0b:79:73:8d:
                    1c:36:b2:70:fb:78:2e:01:16:14:74:22:34:4f:f3:
                    cf:dc:38:fb:bf:1a:11:b2:f4:76:2a:c1:8d:64:ab:
                    70:e3:5f:9b:0c:a2:98:7d:bd:67:b9:96:1c:3a:cf:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:6F:3B:51:88:87:42:B2:35:2F:E9:49:9A:D9:89:11:18:92:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/d54ddcb1-6f05-32ca-8e4d-51fe41627c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:37:0f:6e:b6:ff:96:1d:36:67:01:8f:8d:83:99:85:45:ed:
         f3:ab:87:02:71:6a:64:0f:02:2a:2a:67:41:29:45:00:20:59:
         09:a7:68:a1:22:41:da:ad:ed:21:c3:8c:ea:26:3e:69:ea:23:
         a1:c0:23:cc:0d:38:19:c0:2b:33:35:1a:4f:9e:27:bb:38:cc:
         88:45:82:b8:02:78:b8:64:52:f4:e0:8b:bc:ab:ee:ef:cd:ed:
         a5:86:a6:6a:3e:14:38:96:89:6c:e7:c6:64:9d:29:bb:5c:b7:
         a2:46:0f:4d:54:d7:1e:91:e7:c8:e7:60:15:e0:c3:a7:44:f1:
         46:f3:88:6f:33:e8:13:10:af:40:7d:ae:b1:2b:51:d8:5a:12:
         bf:1f:18:ec:cb:01:b1:ad:b1:64:0e:27:c9:b0:28:36:3d:38:
         d3:59:ae:e2:ed:59:35:d0:36:26:68:1d:48:37:8b:2d:97:8f:
         73:19:84:59:b3:5a:da:36:09:e7:b6:03:8a:14:fa:38:0e:4c:
         98:94:c4:72:5f:49:a8:3b:7f:50:36:0e:07:5d:78:6c:4e:bf:
         11:17:88:80:de:06:45:f9:52:60:78:61:44:aa:55:93:67:20:
         82:f1:8d:44:16:18:30:73:1b:7f:63:41:0e:c9:2e:37:97:29:
         93:fa:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:18:00 2025 by rpki-client