Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa
File:                     fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa (raw, json)
Hash identifier:          Gl9XtKXVCS2g7BOQIGukplef9shbrJklCDaRsrTp0cY=
Subject key identifier:   65:27:C4:4E:A1:66:9A:B5:B8:21:FB:B2:E5:65:ED:F2:4A:60:5C:63
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584937D93F516E4B7180F135AB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        66.220.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3f:51:6e:4b:71:80:f1:35:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=f08ca02d-d7bf-4e57-8621-17756cf6d002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:25:f3:b5:ed:2e:68:29:24:43:d1:99:d2:
                    b1:ff:cd:55:4d:f3:8a:76:1a:66:bd:9b:b6:1b:98:
                    a9:b9:3f:60:d4:4c:af:7a:53:83:d5:48:48:14:44:
                    e7:5a:59:b9:b0:5d:4f:fc:f6:84:b9:a2:c8:56:96:
                    ac:54:db:e7:e9:2e:8b:07:d2:5e:88:67:4b:d8:ac:
                    fe:66:5d:fc:70:a3:39:14:1f:4d:1e:7c:07:72:3a:
                    63:01:c2:b7:aa:0d:52:3c:25:90:58:3d:ca:b4:0c:
                    5d:6f:5b:9a:c8:50:89:5e:b2:ab:16:d7:97:59:43:
                    ab:3a:81:61:40:4f:5f:db:56:aa:5e:21:4c:fe:d6:
                    79:97:e5:48:1d:bd:e3:6d:39:b0:fa:5b:ec:d5:ce:
                    fe:8f:aa:4d:46:7f:95:8d:d7:1e:64:14:82:13:73:
                    42:55:33:93:95:f5:12:70:94:21:b6:1c:c0:8c:24:
                    e1:ef:f2:f2:cb:1b:60:50:3d:fd:86:b9:01:ed:8d:
                    6a:3c:a7:ce:c3:3b:a1:4b:6d:d6:96:2f:1d:bb:ba:
                    d4:2e:8f:41:01:f4:6a:d2:34:46:bb:e7:9b:62:7d:
                    e5:c6:8a:71:7f:d0:32:a7:2c:69:e5:e5:8d:94:a6:
                    87:36:80:b0:af:be:c2:9c:42:8e:c9:a8:80:ab:2a:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:C4:4E:A1:66:9A:B5:B8:21:FB:B2:E5:65:ED:F2:4A:60:5C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fab74a17-0bec-3b46-8f24-3ec2a5f08a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:9d:ca:01:80:7e:a4:96:64:23:64:80:51:c4:c8:0f:a3:
         24:7f:f0:b0:7d:0f:2a:a7:d1:a3:76:d2:27:65:17:2b:02:6c:
         89:37:73:51:60:8d:40:8e:b6:61:e1:df:e4:ef:51:92:6c:19:
         8e:1a:a4:8e:8a:13:74:ab:e8:17:f8:88:0c:2e:23:e7:ed:d1:
         d2:df:af:e3:9d:aa:6a:38:09:05:37:0b:a9:ad:c1:25:8f:73:
         b4:02:9a:be:5e:05:cc:cd:95:5c:d4:83:09:90:a8:f4:1e:4f:
         88:48:21:7c:10:fc:d7:33:b5:25:dd:37:54:4b:56:d2:16:66:
         22:9e:1b:70:eb:62:60:8e:7e:66:65:65:0e:49:e5:5e:e0:79:
         02:99:ef:ad:33:85:e4:77:16:f2:88:9c:99:bb:e5:b4:8d:97:
         eb:40:03:9a:19:50:66:71:19:56:d9:38:8f:3d:3a:0a:fd:9f:
         07:30:db:f6:51:8c:28:9d:18:66:23:3d:4f:fe:a8:71:95:3d:
         01:e0:be:e4:03:9b:9c:48:d0:b1:8d:43:0e:68:d3:a6:ab:bf:
         c9:0d:21:be:9a:39:d4:2c:68:9d:47:83:d0:ef:b1:61:c3:65:
         fa:7d:b3:ff:7a:a2:fc:48:a7:42:2a:3c:78:02:79:88:d4:ea:
         a5:1c:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:09 2025 by rpki-client