Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa
File:                     1f997c12-50db-3e69-8eeb-5a9137c21344.roa (raw, json)
Hash identifier:          ESoiEfHL0N5TKDS/ivewNiYGdCDv6/NBetjkzIeKzwk=
Subject key identifier:   9B:B5:64:0B:1C:5E:E0:91:A4:74:C2:18:F3:AB:EC:3A:AA:D5:A9:C6
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F43285848FD56AC6BAC9CB86F3B22A100
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     18875
IP address blocks:        66.97.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ac:6b:ac:9c:b8:6f:3b:22:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=de9af923-2f83-44f0-9014-d279754a1af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:30:e5:94:8a:24:1a:7f:95:8e:c6:f4:b9:
                    dd:0f:5c:fe:3a:47:f1:53:28:e9:99:e7:75:64:28:
                    fe:6a:20:7d:87:6a:d4:e2:c1:6e:e1:f8:35:40:48:
                    da:65:fb:7f:77:3b:21:57:90:4c:78:08:6a:e3:0d:
                    5d:ed:ac:39:23:0b:3f:59:2f:f3:4f:14:fc:48:6e:
                    67:14:04:e9:01:3c:9e:99:af:76:e5:6d:c8:e8:26:
                    52:2b:e6:8f:0f:f4:eb:9b:57:7f:cb:51:42:41:49:
                    12:62:88:20:62:3a:02:44:58:2a:31:0d:09:88:18:
                    5a:98:28:34:a9:ca:89:08:c1:fd:0d:d0:e0:07:30:
                    c0:9a:7d:5d:4c:32:9e:bb:fc:87:fd:5d:e3:f7:e9:
                    d8:8f:30:e7:d6:bc:53:33:2f:e8:fa:4c:68:8c:2a:
                    9f:e0:71:0c:1e:cb:ff:48:aa:a4:16:56:0c:9a:77:
                    51:99:e1:34:32:a4:07:fe:54:88:fc:c5:a4:57:1a:
                    42:20:0e:94:9e:32:ec:78:f3:35:d2:f9:2d:ad:46:
                    12:6a:a4:87:ac:af:ce:ef:03:76:ce:79:22:a3:08:
                    77:a3:4e:c9:6a:85:08:2e:04:3c:fa:f5:d6:f2:57:
                    3b:ad:0a:37:48:88:58:97:10:93:6b:72:a3:1a:eb:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B5:64:0B:1C:5E:E0:91:A4:74:C2:18:F3:AB:EC:3A:AA:D5:A9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:9e:2b:f2:65:b6:f1:4b:cb:e7:0d:ab:1c:0b:a1:ec:ab:
         01:24:5e:d4:15:c4:7d:85:a0:d3:3a:05:7e:35:fa:06:3c:13:
         6b:e0:89:f0:d8:6d:b7:a2:d3:91:13:45:0c:c2:81:ff:89:15:
         56:51:f3:78:8e:ff:60:a5:a5:e1:bf:07:2e:75:c8:15:2b:a1:
         80:ae:b0:e9:56:37:c8:59:10:86:19:5f:39:6f:ab:40:3f:8b:
         e9:b1:dc:c6:ae:f5:0e:36:c3:9e:a4:c8:c3:7a:65:33:cc:7f:
         20:6f:92:60:23:f9:b6:78:82:c1:33:c7:51:63:b5:51:63:02:
         13:f3:77:2c:13:d6:7f:2b:d9:45:91:b6:30:f6:26:a4:43:47:
         85:f1:f9:7d:0c:fe:17:d9:b7:f6:17:7d:52:99:1a:df:68:e3:
         7d:2c:b2:fd:a8:92:3d:01:1d:d2:bd:8b:6b:a8:65:34:ca:9f:
         57:54:f7:26:2a:04:4b:d7:b6:7f:26:1a:ff:3a:1c:c6:d6:42:
         22:3b:6f:e7:f0:77:05:b0:7f:b6:9a:87:34:8d:34:54:f5:47:
         61:84:b1:f3:79:c9:e4:5a:db:e8:62:52:3c:71:40:cd:d4:23:
         bf:6a:cb:d7:cf:fd:24:9c:5f:56:6a:46:ee:e8:1c:55:87:e3:
         8a:54:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:10:49 2025 by rpki-client