Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa
File:                     a3ddba2a-e859-3207-b00d-f00374375e58.roa (raw, json)
Hash identifier:          SJf+mhdQV9ASfIALwd48CjZpegYOfAnbll/Kovf5SlY=
Subject key identifier:   0B:38:64:70:9E:D9:60:B8:B8:0C:0F:2F:10:2C:A8:BD:D4:1D:E8:98
Certificate issuer:       /CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f
Certificate serial:       010D0C9F4328584922E8F5C18AD5534099DD1E80
Authority key identifier: 7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa
Signing time:             Mon 10 Mar 2025 01:00:39 +0000
ROA not before:           Mon 10 Mar 2025 01:00:39 +0000
ROA not after:            Sun 08 Jun 2025 01:00:39 +0000
asID:                     32160
IP address blocks:        66.11.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:22:e8:f5:c1:8a:d5:53:40:99:dd:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2362de-5bcf-4e4d-a582-af59d5ffb75f
        Validity
            Not Before: Mar 10 01:00:39 2025 GMT
            Not After : Jun  8 01:00:39 2025 GMT
        Subject: CN=d55080ef-8b18-4cc4-9914-c5b880ab0990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:2c:7b:69:9c:40:22:18:0d:72:4a:7e:b6:
                    5e:88:85:70:45:72:dd:10:47:78:41:9a:0b:b4:de:
                    74:2a:a5:c4:8f:21:57:a5:9d:39:e6:bf:75:14:c0:
                    5f:4f:94:ea:d4:48:c9:74:ff:8f:b9:54:ee:61:d8:
                    42:57:62:68:fb:e3:a6:3f:e8:0c:61:d1:d5:d7:3c:
                    0c:18:c4:5b:4d:df:c8:61:6e:e9:73:50:b1:fe:4b:
                    8d:fc:f8:11:ba:ef:a3:5f:8b:5e:8f:d4:25:7a:ab:
                    53:9d:21:d1:8e:4c:c7:85:67:17:01:6f:67:76:4e:
                    72:cc:71:db:a9:f5:0a:25:da:f5:5d:eb:7e:ad:4d:
                    0c:2b:69:b2:56:21:36:95:44:59:11:6c:53:5a:cd:
                    e4:68:12:d4:a5:69:03:62:73:b9:13:20:e6:6d:29:
                    92:3e:36:c6:f3:95:1c:8c:df:64:0c:12:50:0d:68:
                    79:d7:28:5c:53:de:46:af:f2:06:66:34:46:c3:fd:
                    0f:c2:c8:18:8a:42:bc:dd:4f:00:59:ec:7b:52:77:
                    02:c9:a7:66:16:29:de:1a:69:b3:a6:ea:ef:29:e3:
                    f2:8b:48:af:a8:d3:0b:5f:86:24:15:d8:9f:ac:c8:
                    15:9c:76:92:d8:0a:ca:bf:3c:dc:e4:12:4f:26:62:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:64:70:9E:D9:60:B8:B8:0C:0F:2F:10:2C:A8:BD:D4:1D:E8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/a3ddba2a-e859-3207-b00d-f00374375e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f/be2362de-5bcf-4e4d-a582-af59d5ffb75f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:DC:9D:79:C7:D5:10:B8:2C:FA:88:34:CA:F0:64:76:15:61:E7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be2362de-5bcf-4e4d-a582-af59d5ffb75f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:3e:b2:c3:84:31:3d:8b:56:4d:df:03:31:f3:c3:aa:92:
         ec:04:95:ba:0f:3e:1a:af:2d:9b:ee:77:60:3f:34:ea:98:4b:
         25:7d:2d:b9:2f:3f:14:c5:61:4f:cf:bb:30:f7:ee:57:fd:d5:
         1b:82:ca:9e:30:aa:c1:b6:8a:cc:83:80:57:c9:94:c9:e4:90:
         8c:d0:95:14:23:a8:48:8f:fe:4e:51:98:e3:9a:23:41:66:ec:
         16:88:91:48:0a:36:04:2e:78:9a:02:93:e7:ed:c0:d8:46:99:
         de:e9:21:e4:2e:ec:27:24:e9:3f:8a:d7:34:6c:99:1f:d6:62:
         e7:81:4c:1d:ed:67:46:7b:00:f1:fa:98:f8:b6:a4:f4:88:d1:
         73:75:13:67:bb:5c:9d:69:1e:d8:09:a3:af:ab:96:35:bf:d2:
         af:2b:bf:0b:88:14:ba:00:45:25:f9:cd:a0:34:f9:8b:25:6e:
         02:64:b0:fa:af:f4:23:82:e8:99:ac:7c:22:95:0e:3c:0e:6e:
         44:05:65:d1:c6:ce:63:03:1a:5b:2a:6f:92:2f:e3:e1:b1:47:
         83:55:78:52:35:f3:20:52:c9:37:04:2b:b7:f8:9f:34:a2:70:
         e7:3e:60:7b:88:7d:e0:0b:ab:05:61:91:39:37:4c:2e:aa:42:
         ca:31:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:52:58 2025 by rpki-client