Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b23ce072-5558-3c62-adb3-b4cef504a838.roa
File:                     b23ce072-5558-3c62-adb3-b4cef504a838.roa (raw, json)
Hash identifier:          DRz3+wVYG0SoE/PZ33OVorNjAT1dCQhQ/wtzJsRmLac=
Subject key identifier:   2C:B6:79:E1:10:0D:66:C8:AA:72:48:3E:96:E1:6F:B2:3B:AD:C4:B9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584937D93F2FC8E840944A647DE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b23ce072-5558-3c62-adb3-b4cef504a838.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        216.66.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3f:2f:c8:e8:40:94:4a:64:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=a3848451-c1c7-4144-826c-a0215734e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:bc:b2:6b:8c:59:a7:8c:0f:1c:9e:bc:39:
                    92:7a:39:5a:3d:f2:11:8e:0e:f5:4f:92:c5:5e:25:
                    32:8f:57:1a:86:00:78:22:4d:d8:2d:fa:0f:b2:d9:
                    14:c4:8a:2e:a4:e0:11:1c:4e:e0:b9:b3:86:f7:c0:
                    96:28:87:58:1b:a7:0a:ec:f4:70:02:0d:6b:06:85:
                    ba:98:b7:a0:5a:f3:b2:e1:10:e8:9b:c6:d0:cf:ed:
                    ef:a4:bf:64:87:1d:45:81:4c:7f:d0:77:a2:c9:01:
                    48:71:ac:5e:85:54:71:67:9d:31:62:ec:37:32:50:
                    d8:01:98:43:31:86:37:79:94:76:9e:f4:90:63:7e:
                    17:32:9f:5b:f1:d3:c2:20:cb:e9:3a:da:57:60:b1:
                    77:bd:d4:c8:47:a3:60:4c:fd:38:95:67:73:ad:95:
                    38:f1:50:b4:2e:ef:23:5d:af:ac:ab:40:ae:6a:4b:
                    26:52:63:b7:cb:f3:8b:92:a8:37:92:55:f2:c3:a3:
                    1e:54:4d:06:e4:06:86:b2:45:8f:17:98:08:ab:1e:
                    9e:56:a0:ba:f4:ac:82:32:9d:a1:01:8c:ed:8a:9c:
                    9d:dc:dc:32:b9:bb:51:0a:8a:b2:83:e8:4c:b9:41:
                    6f:02:5a:f3:c5:ba:04:30:cf:80:c7:26:5f:87:37:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:79:E1:10:0D:66:C8:AA:72:48:3E:96:E1:6F:B2:3B:AD:C4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b23ce072-5558-3c62-adb3-b4cef504a838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:38:ce:e2:22:3f:fc:8f:df:d3:4a:1f:8f:42:63:42:15:b0:
         46:66:88:ef:3f:e0:74:04:9f:fc:cd:c1:fa:a5:71:1a:5c:b0:
         3d:ee:27:1a:c6:b3:19:50:ec:24:93:96:02:49:f0:3b:2a:30:
         c4:73:26:34:25:d2:ff:17:f8:6a:83:4c:ba:ce:1b:58:40:ee:
         af:4a:f8:66:9e:22:73:8d:33:2d:5d:64:49:4c:b5:26:76:c4:
         f0:98:23:af:87:4c:e5:b6:ed:3b:b4:1a:df:ce:14:17:40:49:
         18:ee:d2:94:46:ca:91:bb:1f:63:4a:97:ca:ef:2e:ed:84:27:
         3c:d7:34:bd:98:5f:f1:60:64:7a:37:72:8d:47:3c:78:7e:0b:
         b7:d7:49:aa:a8:9e:28:32:c7:5e:2d:8b:e1:34:1a:4e:1a:e7:
         62:39:ae:1b:17:70:57:35:d3:9a:53:e7:27:db:1a:19:ec:1d:
         82:a2:ad:5a:6f:b7:f1:15:6d:3c:a1:fa:56:4b:fd:65:37:73:
         28:51:42:eb:ac:3c:03:cd:f0:f5:64:4e:e4:a5:34:4e:95:cd:
         12:6d:71:63:19:ee:c5:bb:d3:f1:ae:df:ba:3c:0b:03:6d:27:
         c8:37:9c:18:36:3c:80:40:e3:0b:a5:77:ad:d7:e3:e6:96:b7:
         ad:b4:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:37 2025 by rpki-client