Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa
File:                     e38b3713-7424-3f1d-a9e9-72d69242e5df.roa (raw, json)
Hash identifier:          snYbpzM1bZomAWcZFkG5pFPr7s0+D5C/vmsVNnfGYEQ=
Subject key identifier:   84:72:6C:D3:F2:CF:02:1D:05:19:28:2A:76:FB:37:60:04:BE:8E:55
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848F4F69D83A1AB06E7A57161A0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     8560
IP address blocks:        66.179.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9d:83:a1:ab:06:e7:a5:71:61:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=97e12894-4eef-48d9-a765-e46aa613f84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:b3:36:ce:75:76:e5:73:90:9e:10:a7:14:
                    74:2b:b4:94:f9:fc:59:74:6a:dc:c3:33:80:84:60:
                    5e:66:8d:ce:ae:03:e2:5a:60:db:4a:04:35:96:f7:
                    62:2c:49:36:75:08:81:8d:77:7a:0f:5a:8e:c8:f4:
                    d4:ac:04:9f:86:3b:87:75:38:5a:9c:4f:34:2b:c4:
                    59:fd:07:fa:e4:3c:6b:1a:d2:3d:0e:ea:3a:a1:3e:
                    1c:f4:7c:0e:bb:d2:88:29:c0:d5:98:b7:62:23:1d:
                    af:b0:e5:68:a8:fc:da:0a:66:68:22:6b:c4:9e:0e:
                    40:aa:a5:87:72:54:f5:c9:e2:c3:09:a6:ca:3a:7c:
                    39:99:07:14:d3:d9:7f:3b:dc:b0:86:e4:8f:0a:ad:
                    75:b0:c1:5c:bd:81:0a:8f:09:19:c2:92:23:de:fd:
                    38:1e:69:54:50:61:64:fb:58:2b:62:34:7b:a1:ff:
                    3c:80:b9:e5:a0:40:ba:2a:c0:87:df:9d:4c:d9:d5:
                    04:34:47:67:fa:ef:fd:3f:f7:66:bd:36:1c:ce:3e:
                    2c:58:09:e7:82:7a:67:99:78:b6:b4:50:b7:6a:0f:
                    33:3e:70:c2:cb:b9:1d:8c:13:6b:1f:85:25:2d:fa:
                    2e:3d:e8:4d:a0:47:fa:a9:e3:f0:43:6f:c8:76:fb:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:6C:D3:F2:CF:02:1D:05:19:28:2A:76:FB:37:60:04:BE:8E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e38b3713-7424-3f1d-a9e9-72d69242e5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d8:6d:b6:f5:e3:bc:8a:3e:1c:98:31:7b:67:94:38:60:95:
         f0:f9:bc:3a:c7:bc:04:5f:14:8a:4d:f4:bc:52:fd:ef:10:70:
         1c:fe:59:94:bc:77:2f:4a:d5:14:68:1f:d7:91:e6:b0:f4:d1:
         cb:79:95:d5:52:03:70:09:5b:0d:76:e8:14:8d:db:57:ff:fb:
         73:4e:c8:5d:8d:d5:33:d3:46:79:03:34:db:ab:53:22:09:81:
         fe:8f:5c:62:d6:52:f0:74:fa:c9:98:2e:26:81:2a:ff:7f:14:
         11:7c:26:d6:ec:7a:0b:e9:bd:93:4b:32:9e:27:fb:d3:c8:cc:
         8d:c2:f5:c6:33:6a:12:a7:09:ea:76:ea:4d:d1:46:1f:77:86:
         56:fb:13:f2:10:2b:03:8b:71:ff:1c:ee:ca:80:4a:1c:4d:b8:
         f2:df:9b:44:76:08:41:a4:f6:51:55:60:5c:13:be:04:39:44:
         52:72:32:09:86:30:44:c2:bd:1b:4d:00:bc:65:51:3f:f9:77:
         14:7d:68:9e:0d:96:d3:38:2a:da:79:fb:84:4d:c0:f8:37:c7:
         6b:88:d7:eb:09:39:4b:2e:fe:82:78:64:40:6f:0f:cb:9b:39:
         79:1c:1c:76:e9:ea:f8:b1:67:c8:87:a7:7e:65:fb:27:ee:f0:
         c5:ab:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:08 2025 by rpki-client