Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa
File:                     54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa (raw, json)
Hash identifier:          kJyvqXoAk1+oFa3rR2LVHsob5VePZKVzqrx3y1MY8/Q=
Subject key identifier:   62:40:6B:37:E8:8B:07:EF:AE:E4:FE:B9:52:74:AD:11:DD:74:65:3F
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F43285848A400BC34B3806860AAD463A0
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     399331
IP address blocks:        66.220.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:bc:34:b3:80:68:60:aa:d4:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=8de1db62-dcd7-40f5-8caf-29cf92321f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:84:b1:ec:64:ec:a8:1a:15:d6:90:99:b4:
                    c0:f0:e1:0f:8e:3c:dd:47:98:45:2f:d6:6a:27:58:
                    ce:00:15:5f:b2:32:b3:85:f0:50:d6:d6:ab:ad:7c:
                    a8:40:4e:66:8a:17:b9:7f:98:0d:ba:e7:58:f5:b2:
                    7c:0c:66:a3:1b:fa:bc:93:53:f9:69:60:25:49:e3:
                    b7:39:22:d5:02:cc:15:71:91:7c:78:94:92:8a:c5:
                    98:d4:44:ea:2a:0a:2f:a3:53:44:43:12:4b:b7:04:
                    08:ec:f2:c3:ed:71:00:15:9f:d7:97:b2:b7:45:fb:
                    ee:24:5a:5a:da:2f:ac:e4:66:d7:3a:31:a2:55:b0:
                    87:a5:84:c7:a8:f0:d2:fe:9e:94:81:fb:fd:5b:2d:
                    2f:cf:0c:3a:eb:7d:ee:7d:78:1b:99:90:74:38:45:
                    84:8b:91:49:0e:55:e3:74:cd:bb:3d:c9:75:21:ad:
                    3a:ac:3f:6e:5e:50:78:02:85:cc:24:05:9a:2e:a4:
                    f9:b0:65:12:81:fa:5a:06:b1:5d:16:a4:a0:66:c3:
                    32:87:6c:a5:49:d8:bc:10:c9:fc:7a:69:e9:e0:36:
                    a8:1e:a2:64:99:c2:da:ab:e1:91:43:63:53:9a:e2:
                    15:3e:64:91:d8:c7:93:f3:ef:5d:0f:ca:7c:9a:41:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:40:6B:37:E8:8B:07:EF:AE:E4:FE:B9:52:74:AD:11:DD:74:65:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/54cbb232-62d5-3d76-8e8a-7ea680d89f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:77:3c:b6:92:d1:62:d4:1f:ae:39:82:16:02:71:dc:ee:3a:
         46:3d:a1:fd:2d:58:9f:7e:2c:81:3d:b6:3d:9c:6b:84:f9:51:
         ee:6a:52:1a:e3:9c:f2:c8:bd:d1:48:3c:d1:7f:19:29:06:8d:
         19:44:43:5c:f8:ba:84:a3:f7:33:18:47:f3:fd:13:df:47:bf:
         39:90:95:96:ba:9a:c4:95:59:7b:a5:8b:75:53:52:a9:f6:bf:
         f8:92:a2:aa:7d:0f:72:10:d3:3e:59:5e:73:05:7a:a7:b3:99:
         5a:12:e3:e9:fa:4e:ae:c4:ce:b7:dc:55:7d:df:a7:63:1b:63:
         d7:8d:7d:0c:c4:d7:7b:25:8a:71:35:a3:5e:cd:11:41:c3:cf:
         df:2b:c5:bd:6e:f2:2a:a1:88:5c:db:42:ec:77:9f:f3:ca:f4:
         97:ab:3e:e6:c1:e1:be:3e:c4:c5:4f:b0:05:77:06:28:64:4b:
         69:8b:f6:2a:79:a6:b9:bc:b4:6a:3e:2a:5e:61:d0:28:09:fa:
         53:02:ee:ee:b0:22:5c:0a:72:a4:71:3c:95:8b:e1:f7:4e:f4:
         f9:10:49:a9:0a:5d:f3:64:6f:dd:5e:ee:91:f0:43:86:6b:2a:
         81:0e:ed:04:e5:4f:a6:62:6b:2a:7d:88:e0:45:99:33:2f:0f:
         03:a4:5e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:05 2025 by rpki-client