Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/343450ed-1527-3cd3-a6ef-128cf87c4b37.roa
File:                     343450ed-1527-3cd3-a6ef-128cf87c4b37.roa (raw, json)
Hash identifier:          KvSLlrV8aDljImra/WfwHZyg0XqrKU/Coi6nrJ6ZG+8=
Subject key identifier:   80:25:F0:60:E3:3A:62:7C:16:FF:1D:90:81:A4:B3:5A:5A:15:5D:F8
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F432858490E16BE86E5805F526DB1D160
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/343450ed-1527-3cd3-a6ef-128cf87c4b37.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     36321
IP address blocks:        66.187.0.0/23 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:be:86:e5:80:5f:52:6d:b1:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=25982390-cc44-4364-a27e-0f84ce65f459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:16:44:9f:f1:9d:e6:33:5a:95:33:8b:22:
                    55:97:75:84:1e:fe:8f:ae:60:53:51:b8:62:25:dd:
                    ca:29:ba:12:f5:a3:73:65:6a:10:23:52:6e:0a:be:
                    5f:b8:d0:74:24:51:8f:44:b0:43:ba:1f:79:cb:c9:
                    9f:9d:54:e0:8e:ce:59:b1:a0:3f:fd:c2:3c:bb:0d:
                    3a:fb:50:fa:1e:82:39:e8:5c:41:62:7d:ba:e6:de:
                    f5:b6:e3:3d:3b:fb:b6:f7:ef:35:15:12:f9:b2:7a:
                    73:11:39:e2:69:58:ed:07:a3:5f:3c:52:33:ec:8d:
                    2e:5d:3f:19:e8:dd:e3:3d:50:21:55:26:aa:c3:93:
                    0d:c2:63:b2:27:eb:c8:59:d9:80:0d:9a:84:74:96:
                    61:95:c5:52:87:15:0d:67:a5:50:5c:a0:7c:28:9a:
                    24:c3:5b:e7:db:25:c3:81:b5:a3:a1:ed:c3:00:3a:
                    5e:1d:60:51:3a:4e:96:7d:4c:9f:71:c8:42:12:07:
                    af:cb:5c:8a:4e:e3:e1:73:6b:96:e8:dc:13:cd:ee:
                    38:fc:28:33:17:d9:c9:43:c1:c8:05:65:b2:27:6d:
                    bc:13:c5:90:ed:11:6b:dc:9f:1f:30:a4:af:d3:7e:
                    cd:1d:b9:88:bd:40:e4:fa:25:3d:9f:ac:4e:0a:e8:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:25:F0:60:E3:3A:62:7C:16:FF:1D:90:81:A4:B3:5A:5A:15:5D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/343450ed-1527-3cd3-a6ef-128cf87c4b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:23:e7:c9:dd:9c:c0:fc:47:a1:b6:e3:f4:db:c5:8a:a9:b6:
         7c:ea:f1:a2:0d:f6:92:49:c3:c9:72:db:db:9a:96:71:d9:a3:
         7d:c1:79:66:07:89:5e:e0:47:01:17:50:27:09:d8:4f:d9:2f:
         e0:d8:a8:ce:9a:3f:97:1d:76:a5:c7:95:39:fc:26:ec:50:d0:
         4d:19:d9:00:0e:88:ca:98:77:7d:63:1e:de:6b:45:31:a6:f1:
         9a:11:83:e7:83:fd:42:f4:e1:4a:f9:8d:10:1c:9c:50:9d:87:
         d1:9a:47:75:86:12:e9:7f:7f:74:89:db:8d:36:2c:ca:e8:4b:
         9f:f6:b8:75:b9:2b:17:8a:87:8e:bc:42:3f:50:16:06:c5:05:
         8a:e1:5b:e7:4e:3f:6d:3b:ca:62:54:08:c9:b6:cd:ed:56:e6:
         8a:a9:ac:c1:04:e0:f2:67:75:3f:a7:a7:65:bb:5a:1a:e9:3d:
         a4:da:0c:df:e2:3b:61:83:fb:55:16:87:ea:05:6d:51:62:d8:
         2c:02:f7:59:09:28:af:64:c1:ae:b2:bf:7f:1e:66:ac:ef:cd:
         12:df:03:37:10:0b:d6:30:00:26:2d:b1:0a:25:c1:12:1c:c4:
         5e:e7:72:79:78:fc:cd:c7:9e:d9:6c:00:cd:32:da:a6:6a:5c:
         e7:dd:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:44 2025 by rpki-client