Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa
File:                     7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa (raw, json)
Hash identifier:          m61udL8umc5GPI1HeLFjRYN7beaj6mGAumq10JyA3EQ=
Subject key identifier:   45:9A:06:15:3A:F8:45:E2:76:FB:BD:63:E2:D4:34:DE:D6:B1:C9:1F
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858481C9A796BEB27CBAFA8E78280
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        66.22.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:79:6b:eb:27:cb:af:a8:e7:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=b8d51a75-4bcd-4ba6-92ba-b9798c1d6f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:4d:ec:a1:ee:75:e7:5b:64:ab:8d:ef:4c:
                    0b:9a:55:c1:20:51:87:c5:df:a7:82:31:8b:78:6c:
                    d3:99:e5:21:89:73:ac:6f:5d:0e:90:ee:8a:e8:3b:
                    cb:e1:7e:a2:4e:22:23:4a:f4:d4:c8:08:48:2e:3c:
                    71:a8:c3:32:47:b4:37:6d:f6:aa:2f:9f:84:50:c6:
                    8e:82:fd:8b:d4:c3:34:de:06:c4:e4:f5:3c:13:92:
                    a6:15:e6:7c:de:4f:63:ec:10:d2:27:fd:04:45:90:
                    48:cc:46:ba:f5:b1:65:31:2c:d1:8d:f2:8f:e2:49:
                    a4:a8:b4:bb:5c:c2:64:e2:6f:3b:1e:7f:48:92:27:
                    6c:fd:6a:49:81:d0:84:71:d5:ca:cb:11:20:e8:00:
                    4c:60:cf:0d:6e:e3:02:21:43:67:8d:a3:15:a0:db:
                    c9:0e:e5:a1:96:05:5e:ec:12:f2:eb:73:91:de:dc:
                    49:da:39:77:7c:ac:a4:ca:35:76:fc:cc:10:bc:63:
                    15:52:cc:41:e4:9b:50:8b:d3:4d:7f:99:a4:63:c1:
                    2a:47:2e:2e:f0:fc:29:27:42:4e:8b:95:a5:27:6a:
                    9e:8b:57:e3:6b:96:87:78:d1:15:7b:99:5a:72:60:
                    25:1d:5c:62:cb:ab:13:ad:23:ea:b6:a6:3f:60:d3:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:06:15:3A:F8:45:E2:76:FB:BD:63:E2:D4:34:DE:D6:B1:C9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/7f844fb2-cc3d-37e4-b5a8-859585f2c737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:44:73:3a:f3:86:f9:b3:bc:5b:5e:05:92:5a:fa:08:ee:b5:
         1e:d9:9e:27:c1:91:1c:f3:03:2c:12:5b:08:d1:39:f9:d5:41:
         cd:63:14:5d:35:bd:8d:39:85:1d:a1:fb:7f:91:c6:ed:3d:9e:
         b7:45:88:56:3f:cc:29:2f:fc:e8:94:8d:b9:01:b0:4a:e5:03:
         5a:16:be:ad:c0:87:d8:25:cd:18:f4:e0:f4:66:e1:e6:0b:bf:
         d5:bd:a8:17:a3:46:cf:ef:df:4d:86:88:1b:83:44:59:df:f5:
         ec:0b:c9:27:30:bd:b8:ab:b1:ee:08:56:0f:1a:db:19:65:3b:
         4a:cd:db:05:d9:b4:23:53:c1:95:5f:c0:6a:c3:d8:61:e1:bc:
         9e:db:66:2b:23:c8:9c:36:d7:77:b3:6c:f9:2c:8c:8e:e1:d9:
         a3:74:f6:c4:d0:34:9e:3d:3e:41:cc:9e:0b:6b:87:7a:cf:f0:
         7d:0a:23:68:aa:fd:17:50:9e:09:94:3a:b8:ed:97:da:7d:4e:
         fe:dd:56:95:3b:86:d9:51:8e:8e:6d:e3:98:4e:31:f4:92:d6:
         e7:67:ff:f6:30:f8:08:a4:a0:a9:4d:cc:28:1b:45:f5:96:30:
         e4:95:f2:5e:db:ea:40:1c:e5:9e:7d:91:e7:18:41:7e:8a:46:
         19:5e:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:51 2025 by rpki-client