Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa
File:                     0cce90f8-17de-3f75-a158-a043c6cd85e1.roa (raw, json)
Hash identifier:          o4Cb1I4KR1xLr6pStAiylo8Bk/undxLinEgIEKl2zFo=
Subject key identifier:   E5:61:06:DB:BD:F6:E7:A7:CD:7E:E8:64:CC:6E:CD:3A:20:FF:54:4B
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285849E654EDF4BE95CE04EBAB9DC8
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        66.178.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:ed:f4:be:95:ce:04:eb:ab:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=7b3935b4-fc73-4c9c-9773-e1d14eb3dfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a0:b6:65:1c:78:d5:dc:d9:bd:97:dc:82:8f:
                    dc:f8:11:e3:b0:81:4e:29:6e:0a:7c:68:88:0f:fd:
                    0b:de:a0:54:38:cd:fe:cd:11:0c:47:90:75:7e:8a:
                    05:08:a9:89:8a:16:54:d2:0b:89:8b:ed:db:9f:09:
                    5c:0e:b2:a7:4f:e9:e1:72:62:69:fb:d5:c5:c9:66:
                    cc:53:5f:17:2a:22:b1:f4:5b:af:11:5e:1f:e3:10:
                    c3:07:3b:97:cc:8c:fd:b0:83:39:c7:bf:b5:0e:a8:
                    b4:4c:cd:95:18:b9:dc:61:8c:71:77:18:96:ac:60:
                    f4:1a:5e:2a:e9:61:e5:66:df:24:bd:33:6e:c9:f5:
                    b5:af:09:92:b0:59:e3:ef:a8:4c:21:70:04:7a:09:
                    62:5d:bb:b6:df:3f:64:d8:eb:32:5e:a9:16:6b:d9:
                    be:40:18:d1:41:81:87:35:b8:99:01:f0:c5:87:f0:
                    c7:71:5e:e6:34:29:60:96:2b:93:29:85:63:f8:ee:
                    ad:c9:ae:47:57:3d:05:b2:57:6b:df:c2:f4:e3:a6:
                    e0:42:9b:ae:e8:6e:95:03:83:de:6d:d2:d6:3e:ef:
                    3e:95:d7:06:28:d5:ee:56:74:29:cb:44:e7:9c:34:
                    50:06:4b:be:26:e9:f8:bf:aa:ce:ac:e3:ad:83:cd:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:61:06:DB:BD:F6:E7:A7:CD:7E:E8:64:CC:6E:CD:3A:20:FF:54:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:20:96:dd:02:a5:8d:db:fe:58:b7:6f:04:7f:82:76:df:
         34:cb:29:17:fe:b0:04:a0:d6:d4:1d:89:4f:d4:d0:c7:4d:94:
         3f:1b:3b:bd:04:35:c8:b4:48:02:e2:39:f2:08:46:23:7c:19:
         54:c2:b3:6f:9f:57:e5:1d:f4:40:44:6d:6d:9f:4b:58:f7:55:
         3e:89:b7:3c:e8:06:b2:98:91:98:86:04:1d:0c:4f:eb:3b:36:
         ae:03:89:cd:bc:d3:69:ec:b1:64:7b:1e:d7:d8:ee:80:05:23:
         2f:f0:3f:5f:e7:3e:62:81:1e:ee:96:8d:ef:3a:9b:eb:a9:b5:
         7d:c9:68:23:40:8f:19:9d:1c:de:5d:3b:59:b5:e3:f6:a8:c1:
         f6:ac:6e:c5:e2:b5:94:bf:8b:f3:32:01:65:63:df:7a:29:aa:
         61:be:a1:9e:46:73:6b:e3:a8:20:c5:4c:c8:06:55:b0:45:6f:
         79:b2:b5:6a:32:dd:cd:dd:df:16:08:40:6c:0a:4a:d2:b9:bf:
         bd:37:d7:ca:b2:ff:1d:0f:23:c2:32:3d:38:42:a5:93:57:0f:
         90:d9:e1:7d:85:f3:12:4f:b8:56:84:a3:f2:78:20:58:80:70:
         e0:41:75:1f:b8:5e:eb:57:15:e6:d4:59:84:83:e2:58:43:87:
         9d:58:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:19:58 2025 by rpki-client