Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/23c8b8bc-2b56-31a5-bbeb-32b0b7d73c16.roa
File:                     23c8b8bc-2b56-31a5-bbeb-32b0b7d73c16.roa (raw, json)
Hash identifier:          OoG/D9GMCjBQqvUvgXAUG94aQ0hPzRZd618XLrKFaZA=
Subject key identifier:   FF:EE:B0:5A:7E:F5:6E:C9:41:6B:39:C6:30:FF:3C:F3:69:05:51:DB
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858494F93EB6BA7CDC691FA973F70
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/23c8b8bc-2b56-31a5-bbeb-32b0b7d73c16.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     852
IP address blocks:        75.127.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:eb:6b:a7:cd:c6:91:fa:97:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=152c3337-eecd-4729-8cbc-2f8ce765e0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:2a:de:d2:58:88:08:38:9f:13:20:7d:4e:
                    ab:2b:7c:af:5e:88:c8:2a:19:70:c0:05:99:4c:b5:
                    3d:3e:18:12:64:5c:15:5c:2a:16:fa:d9:b9:ce:85:
                    97:72:76:5c:6a:b4:ce:47:2c:47:dd:8c:0c:f8:f2:
                    50:d6:f8:e1:75:ee:7b:7d:48:4b:90:8e:99:d6:ce:
                    43:e8:8d:0a:a4:c0:2b:9d:ea:ea:8b:48:0d:ee:8a:
                    d0:af:97:8a:42:58:05:c0:76:fa:44:f0:c5:7a:78:
                    11:26:c1:17:28:7e:8a:eb:94:48:3b:58:a3:17:1a:
                    87:4a:be:d2:c2:ba:a5:41:a7:bb:66:7d:f5:5e:df:
                    52:be:ff:a2:61:f5:93:ca:24:a4:6c:e0:56:da:99:
                    e9:10:a8:c8:8e:72:12:7f:ef:17:f8:57:aa:cf:38:
                    89:1e:76:68:a1:18:b9:a6:a2:d0:00:4d:c7:f2:c2:
                    b8:e5:bf:df:76:a4:1f:29:11:05:c1:c5:0f:21:93:
                    e2:80:ac:18:a9:80:ea:10:35:44:9e:de:07:68:a4:
                    ff:76:91:e0:ab:46:b7:41:3e:5e:c2:43:64:66:48:
                    f7:df:0b:fe:87:ff:39:d8:df:1d:84:4d:4b:f0:f8:
                    b6:2a:38:dc:2b:f0:d0:98:b1:78:6d:79:ca:d5:35:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EE:B0:5A:7E:F5:6E:C9:41:6B:39:C6:30:FF:3C:F3:69:05:51:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/23c8b8bc-2b56-31a5-bbeb-32b0b7d73c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:54:22:7e:62:c0:2b:c5:6f:4f:55:84:8b:b4:6b:fa:84:0e:
         5d:52:0e:ba:6e:d5:6d:40:ba:0b:dc:e9:0f:9c:54:c6:5f:d5:
         b2:37:f0:16:18:85:47:e4:d3:44:50:d0:d5:d3:a6:fd:b2:70:
         b9:7b:07:f7:1b:be:4a:f1:27:03:b7:f9:04:12:ec:27:25:c4:
         ec:44:b2:00:16:a0:5e:ed:0a:17:69:a7:09:ed:b2:6b:17:2d:
         77:a0:bc:bf:6b:53:a2:42:7b:58:0d:a3:14:ec:e4:87:9d:1a:
         18:f8:89:ff:35:b4:c5:3c:06:f3:62:0c:87:11:09:56:ac:e0:
         c3:8e:ba:bb:58:59:04:d1:1c:43:82:c3:43:05:a7:f3:c1:ff:
         89:c4:88:c3:fd:a2:6d:37:b5:38:96:68:9e:28:32:d7:6c:34:
         6e:79:c1:04:e1:db:ec:1d:c0:d8:e3:72:df:1d:0c:8f:e8:4d:
         d5:cb:b5:f3:5f:d9:31:9c:0e:5c:5d:e1:b1:af:16:a4:a4:11:
         1e:c9:8a:6d:a6:11:af:f2:61:9b:de:ee:cd:bc:7a:6d:8e:41:
         cf:81:78:86:2e:ce:f2:67:04:29:be:44:a4:b9:5d:0e:a6:5f:
         73:06:94:cd:c6:f5:70:e7:62:77:ec:24:f4:05:07:58:95:ef:
         9d:4d:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:53 2025 by rpki-client