Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9e6dbb28-e8fc-3ae8-aabf-bd05f3c39021.roa
File:                     9e6dbb28-e8fc-3ae8-aabf-bd05f3c39021.roa (raw, json)
Hash identifier:          /icyW942yrQ7yhk7zkSu49B6uIsycS/U1Aoln/b3uBA=
Subject key identifier:   B6:E5:59:15:7F:15:91:BC:B4:53:43:E0:0E:05:F8:3E:2C:74:8D:8D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB5324F557FB64FB5DF200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9e6dbb28-e8fc-3ae8-aabf-bd05f3c39021.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3360
IP address blocks:        66.54.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:53:24:f5:57:fb:64:fb:5d:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=d8beec2c-d4a8-4bb0-91e0-fe2db39fa499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:da:7a:6f:55:ae:84:e3:e8:e0:99:90:ba:
                    dd:8e:60:92:17:b2:b2:70:ea:63:1e:a8:7f:69:ba:
                    7f:ca:9c:86:60:6f:2f:05:33:fb:05:00:db:b0:0f:
                    5e:4b:73:2d:1d:f9:3b:03:e7:d3:55:ae:c0:a7:1f:
                    f2:15:8e:e1:33:b2:d3:ca:e7:9e:c7:9c:54:f9:99:
                    7a:69:97:67:39:b2:83:3c:b6:2c:e2:df:f9:44:47:
                    d8:c9:69:1a:87:48:51:50:ff:62:31:23:30:57:20:
                    f4:0b:52:a9:8c:9a:50:c0:28:47:d5:d8:50:e5:39:
                    32:7f:5a:a3:22:df:61:c3:2e:3f:cb:75:5b:df:6a:
                    0b:fc:84:34:4c:01:da:61:1e:49:11:67:20:76:42:
                    75:9e:51:ff:1b:35:16:5f:93:8e:4f:94:bf:41:47:
                    7e:05:84:18:86:9f:72:8f:0f:e5:49:e3:42:c7:37:
                    a4:3b:57:6f:b9:8e:1d:0c:a6:16:92:d3:2e:9b:5e:
                    b7:af:b9:eb:e0:86:76:eb:59:df:7b:91:de:18:bb:
                    46:6a:28:8d:ee:c4:d2:36:cb:ec:33:d9:7b:18:86:
                    a8:ab:a9:1c:4a:52:bd:67:1b:7c:1c:24:3c:c1:8a:
                    40:1a:07:36:e8:50:f4:45:10:9a:1e:66:9b:f5:eb:
                    28:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E5:59:15:7F:15:91:BC:B4:53:43:E0:0E:05:F8:3E:2C:74:8D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9e6dbb28-e8fc-3ae8-aabf-bd05f3c39021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:3e:18:4b:b1:0c:dd:6c:70:18:df:58:87:ef:a7:0b:87:
         dc:e1:69:b4:49:d9:82:24:0c:8f:39:ff:09:83:31:56:6b:6d:
         29:a8:14:c8:a5:87:e6:e3:84:20:36:7b:fc:63:c7:88:e9:4e:
         b1:cc:5b:95:92:ee:d6:ec:07:f8:7c:96:66:bb:d8:eb:49:33:
         0f:fd:3c:6b:3a:4d:7b:6f:7e:e3:cd:e6:c9:1a:59:19:3f:98:
         fb:8c:ca:d6:63:a3:09:8d:4d:2e:de:e4:73:1f:47:62:d6:9d:
         f1:23:28:05:b0:c8:b8:b9:f2:dc:ae:bc:e0:af:60:2d:f3:53:
         f5:79:28:f7:92:0e:5c:45:82:c4:f3:a5:a7:cb:33:95:14:a5:
         2c:2f:05:bb:8e:c7:c8:d6:86:61:44:e3:20:d2:1b:c7:89:7d:
         7b:15:c9:97:3b:81:03:e2:69:a1:54:ea:85:03:8d:9c:13:c2:
         cf:55:32:81:64:a7:03:2d:4c:7f:3c:cf:0b:66:d3:40:9c:1f:
         33:c0:98:e5:8f:a2:6d:f9:14:3c:a2:69:a3:ca:41:b8:aa:a7:
         60:bd:d1:15:0d:41:1b:bb:66:94:e0:f2:d7:e3:ee:40:e2:d7:
         ae:c2:7a:5c:9a:c1:49:54:18:60:34:f2:6d:2c:91:4b:b6:99:
         3e:ec:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:06 2025 by rpki-client