Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec398304-bf8e-378d-b108-596373a3f42d.roa
File:                     ec398304-bf8e-378d-b108-596373a3f42d.roa (raw, json)
Hash identifier:          /COwzJDT1onhziVKcHO5ISKgAb7HZGOFgVhblTYRr/A=
Subject key identifier:   93:3A:33:D7:FD:9A:28:D5:76:F5:FD:E7:AC:7A:76:19:61:8A:DA:14
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849D42FB530C8B43381FFFD81C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec398304-bf8e-378d-b108-596373a3f42d.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     212238
IP address blocks:        66.78.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b5:30:c8:b4:33:81:ff:fd:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=813bc583-fe5d-4d1b-b83a-d66e40299f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:6c:9d:68:3a:6d:52:6a:5a:b9:05:e1:42:
                    97:1c:f4:84:aa:96:16:86:18:f9:8f:c6:a5:74:51:
                    7c:de:c9:0b:d9:ca:3c:3d:e5:c8:10:a2:29:90:45:
                    30:05:14:51:1f:fe:b3:c3:6b:e4:be:be:cb:2f:44:
                    38:ac:47:bf:0b:75:65:dc:c4:a9:df:cc:62:12:a2:
                    26:43:92:8c:c0:79:b4:84:51:80:48:56:ee:1d:32:
                    1d:f0:c0:67:2e:60:ee:3a:9b:15:4c:d5:15:76:83:
                    38:8f:bc:47:00:82:7c:53:e3:67:f7:7d:dc:14:7c:
                    85:c1:af:02:16:79:66:50:7b:25:a2:c3:df:f9:35:
                    7c:f7:50:29:ff:7f:27:58:66:d6:a7:0f:95:bd:1d:
                    cf:9d:6f:d7:87:00:d4:97:11:9b:95:bc:75:f5:5d:
                    54:69:8c:ad:e1:bf:8f:f4:ad:de:86:6b:26:6c:34:
                    bd:72:d7:2c:e8:51:dc:82:b6:64:5b:88:d2:bb:a5:
                    3d:04:cf:1a:21:22:b2:12:30:88:6f:b1:cf:90:51:
                    cb:ee:dc:01:49:e6:80:b0:06:9e:21:19:9a:8c:0d:
                    87:1a:8f:5d:e3:91:4e:34:4c:97:5a:c8:9e:78:2b:
                    e6:29:81:fe:f1:58:1b:6f:5e:9c:e0:12:43:16:2b:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3A:33:D7:FD:9A:28:D5:76:F5:FD:E7:AC:7A:76:19:61:8A:DA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec398304-bf8e-378d-b108-596373a3f42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:01:25:63:64:ce:bd:d0:08:37:19:82:7b:74:82:ce:6e:53:
         8f:2b:01:05:ae:c3:df:c5:6f:7b:04:91:90:ac:d5:ce:7c:cb:
         5c:22:be:1c:78:69:2f:ef:d8:6f:15:ad:ca:92:80:23:d7:91:
         04:9b:e7:76:13:aa:39:f5:02:3f:10:03:7c:40:93:61:94:3c:
         04:b3:9d:14:f9:92:5b:43:64:af:cf:cc:75:7b:32:33:e0:3a:
         a6:6f:9b:6d:c0:17:9a:02:3e:ac:cb:d7:89:47:0f:b1:16:5c:
         75:37:e4:4d:7b:d9:fc:e1:69:c1:98:59:74:64:93:87:33:8d:
         bf:64:9a:55:bb:3e:9c:77:9b:a2:28:3b:3e:34:5f:d8:60:71:
         86:22:74:0e:ba:f6:07:84:0c:c4:76:a6:81:9e:f2:eb:71:9b:
         b1:3d:19:4c:64:a0:70:5f:78:e6:a2:55:ae:eb:0c:0f:43:f9:
         cb:f5:ad:86:1b:ca:e5:d4:b3:36:4e:54:04:a2:b1:5c:de:08:
         a4:73:2f:02:84:75:64:b2:f6:48:4c:55:42:42:84:47:f3:fa:
         05:c4:c7:91:6b:b6:d5:68:83:55:76:00:00:56:2a:65:78:e9:
         b2:dc:6c:a8:15:b1:5c:4b:7e:cd:88:01:0c:c0:8f:29:a8:ed:
         df:94:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:27:14 2025 by rpki-client