Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa
File:                     db4643c8-62dc-3411-a667-146682d9742b.roa (raw, json)
Hash identifier:          nkPIPi10JC4p5xmsdGJZtYBhVu8rVmXF58Iaa5Pt8cE=
Subject key identifier:   24:59:25:5A:E9:2F:CD:E3:83:58:5A:91:18:E1:C5:72:A7:BD:52:3A
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584812D53196FD46E908B7F93BF0
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     62537
IP address blocks:        66.85.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:31:96:fd:46:e9:08:b7:f9:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=3a09b8fb-2d87-417e-ad90-360df678377e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:b1:8e:42:89:15:12:c3:e6:f3:8c:9e:59:
                    cc:e8:24:32:07:10:02:71:1b:6b:7e:bb:cd:78:ea:
                    6e:87:30:c2:41:73:dc:d3:53:41:01:58:4f:29:88:
                    59:94:d9:2d:5c:5b:d7:eb:74:06:9c:75:16:28:54:
                    f6:1a:27:c0:df:f4:a3:32:a8:1f:28:61:68:ee:b8:
                    f4:5a:8e:7d:1f:b1:ce:77:43:a5:1b:29:81:1e:9b:
                    bd:63:02:08:75:b9:85:9d:ba:d3:0b:3d:a2:b2:9d:
                    6d:1d:ba:92:ef:d6:95:15:60:60:ba:c4:46:62:69:
                    de:fa:83:75:6e:10:cc:a5:41:af:03:af:74:d3:fd:
                    db:57:92:48:9f:5f:ee:2b:18:9a:c2:67:81:e5:be:
                    fc:41:b2:e0:b7:b2:68:1c:a1:7f:3b:56:94:03:ac:
                    7b:8e:8d:37:69:c8:eb:82:27:da:9a:62:8b:42:85:
                    90:d6:12:7b:44:33:2d:e7:36:c2:06:58:c8:ce:26:
                    93:4d:f2:3e:80:db:0a:91:09:3b:39:3b:ad:50:77:
                    70:ae:ee:9f:d7:56:6c:98:0c:06:e1:2d:ec:09:84:
                    08:53:7d:30:90:b3:64:8a:b9:c6:77:27:88:d7:d0:
                    43:75:75:a8:e8:bf:af:b8:91:a1:b1:7d:2d:47:b7:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:59:25:5A:E9:2F:CD:E3:83:58:5A:91:18:E1:C5:72:A7:BD:52:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9a:9a:16:9c:28:9a:89:53:0d:be:02:67:a8:60:73:d0:77:
         bd:83:37:f0:13:81:56:ea:fc:ba:80:76:60:47:86:5b:45:0d:
         c3:58:45:1e:2c:87:06:23:f9:ca:4f:8c:46:83:d8:15:39:13:
         eb:76:0a:73:fc:bd:43:0c:6b:c2:fd:9e:fe:12:43:20:9e:92:
         b6:07:9f:f6:4a:0a:aa:3d:b0:22:df:12:1b:61:05:0c:a0:68:
         bb:bf:8b:e8:0b:d1:99:01:10:ee:6f:81:f4:42:bb:c0:c4:ac:
         83:c2:05:be:c5:5e:89:7e:92:67:5e:59:15:ec:47:c7:3f:f4:
         44:bf:8b:7b:22:df:22:80:a7:35:f1:9f:41:70:79:52:a4:58:
         70:a4:f2:e1:22:84:39:02:77:d8:11:8a:a9:fe:cf:d4:ce:5b:
         3e:35:fb:63:6b:0f:3b:65:35:f0:ae:40:64:d1:c1:ac:1f:8e:
         7b:21:fc:28:60:6c:dc:04:dd:cd:e5:dd:80:43:5a:58:91:a0:
         cf:fe:ff:76:9c:f6:e3:01:87:0c:f8:83:b1:23:38:06:d9:53:
         c2:ef:5a:6b:ac:61:df:02:34:25:fe:c8:a0:56:c1:94:d3:5d:
         d3:8e:84:06:ca:18:92:d6:19:ff:31:07:60:35:84:03:d5:81:
         20:25:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:14 2025 by rpki-client