Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa
File:                     4f857680-6d43-32b8-9d58-a4dfa622acf3.roa (raw, json)
Hash identifier:          9bvPr9uZfwnEeTxw/IxZ7BVnX6PpZArhSHxTAFGcP2U=
Subject key identifier:   D1:47:53:AC:4B:F8:AE:14:C5:B3:87:1D:3C:73:04:D1:1D:00:0D:04
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285849E2251A3129B4468A1C88CFD0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        66.178.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1a:31:29:b4:46:8a:1c:88:cf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=714b2101-e25a-48ea-8331-7a964548ff68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:1b:64:1c:a5:6c:04:77:c1:db:79:49:e4:
                    bc:e7:af:b4:77:b8:87:62:55:aa:59:4f:87:39:c8:
                    77:5a:45:16:85:5c:17:79:9e:52:9b:02:30:ca:87:
                    b3:bc:7e:93:26:a4:cc:0f:3f:c1:04:2c:81:2a:69:
                    f0:26:03:5a:72:22:c8:16:68:4d:82:ff:cf:1b:f2:
                    8d:29:02:6d:fe:73:1a:6d:3a:ec:a9:86:8b:8d:dc:
                    f6:93:ec:13:2f:17:8a:75:26:76:d3:9e:c2:98:10:
                    bd:29:8f:c1:33:e4:68:cd:d8:df:77:79:94:20:78:
                    fe:b6:af:71:b1:2f:e2:70:db:81:e5:a0:66:39:9d:
                    b2:0c:d1:65:d2:96:dc:4b:8f:4b:d7:91:cf:bb:69:
                    d8:3a:2c:4b:c6:5a:50:72:d0:81:de:e5:f5:d9:94:
                    3f:9d:6f:7c:93:7f:5b:ef:7b:e2:a4:73:af:2d:3b:
                    9e:76:b4:85:eb:28:0b:5f:2b:b4:f8:d2:39:a8:6b:
                    e2:d5:44:33:8f:b9:c6:8c:e8:f7:54:35:25:d0:2e:
                    31:d2:9d:75:91:72:e8:2a:79:78:5c:38:c5:03:be:
                    30:2e:1e:f6:77:e0:5c:16:d9:25:c0:10:f8:a5:b5:
                    73:79:a2:2e:28:4b:b4:43:d7:1e:45:7c:17:5e:cb:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:53:AC:4B:F8:AE:14:C5:B3:87:1D:3C:73:04:D1:1D:00:0D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:65:b7:96:16:c8:b1:31:e5:21:bf:55:f5:df:48:50:7d:de:
         9a:2f:1c:1b:23:93:c1:56:15:69:d5:92:7f:9f:be:fa:1b:02:
         d8:e5:ef:0e:c1:f1:64:d1:85:b0:f9:ff:cd:08:33:a8:49:f9:
         a3:d9:8d:2c:25:05:e5:09:91:f6:60:30:60:d1:1b:bc:cc:fb:
         0c:20:d7:a8:6b:5d:5d:03:ec:07:3f:eb:04:f2:4f:85:7e:69:
         82:a4:bb:14:8c:16:d2:b5:c7:68:5f:bc:a9:d1:f7:3b:3d:76:
         5a:61:9c:af:1c:42:6d:e5:87:fd:ea:0a:40:35:d1:92:43:5d:
         7b:6e:fc:ba:19:29:32:0c:20:56:ac:10:ec:98:00:96:bd:0d:
         e4:4b:2a:1c:e6:5e:e3:92:e5:2e:fb:8f:8d:4a:74:4f:29:f0:
         de:70:ac:a8:ab:17:e8:d2:bd:2f:2e:32:22:29:a5:6d:d2:9e:
         94:00:6a:94:35:1c:84:9d:e9:51:17:31:fd:55:3d:ce:5d:d8:
         e9:4f:0c:49:92:e4:63:ab:0a:88:13:ba:ae:5c:a7:28:7f:99:
         b9:77:66:e7:5d:4d:12:a3:92:d9:de:2d:a2:e3:c6:65:7c:45:
         b2:59:81:2d:51:5c:8a:ea:87:9e:68:67:0c:d4:33:48:a0:1f:
         11:67:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:20:04 2025 by rpki-client