Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/0740f2e9-9b3a-3a1d-9f2d-e1ea949ae57a.roa
File:                     0740f2e9-9b3a-3a1d-9f2d-e1ea949ae57a.roa (raw, json)
Hash identifier:          Oja95D+/K3RuGMEzkF+Do+u7MSNUAdWOmjqbaoaLEo8=
Subject key identifier:   D8:67:AB:E1:0B:22:AB:A7:36:33:76:C1:69:09:0B:39:89:CB:8B:CD
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285849393E7A17082F3E08157B3700
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/0740f2e9-9b3a-3a1d-9f2d-e1ea949ae57a.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        66.159.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7a:17:08:2f:3e:08:15:7b:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=79c86c12-2d88-43e5-8f7c-e6caab1533d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:3b:4c:d1:ba:98:28:19:a1:a8:b4:a8:c3:
                    37:f8:bb:be:c5:ee:5d:d2:87:3c:9d:e1:54:c8:ff:
                    d2:b0:56:fc:99:55:0e:a7:1b:3f:cd:72:8d:ea:15:
                    97:68:55:47:a5:e9:02:2d:61:54:34:ff:f4:ee:de:
                    f7:3b:21:1b:bc:9a:f3:3a:75:ec:c3:f7:d2:80:99:
                    b0:09:84:21:2a:74:91:94:76:eb:41:e1:c3:4d:2e:
                    93:cb:33:cd:09:1e:55:3f:c3:f4:7f:c0:22:4e:e6:
                    23:dc:44:d7:ef:c9:1e:69:f0:dd:7c:aa:f6:82:c3:
                    a4:c4:5f:24:b8:b4:61:a2:5c:21:ef:9a:e2:ef:1b:
                    c7:fa:c6:77:c9:b8:39:c8:96:7b:88:d9:45:a3:30:
                    e9:41:d1:52:5a:60:30:91:04:07:66:b5:b1:af:8f:
                    66:22:f2:a2:00:1e:0d:0d:ef:2b:88:9e:fd:19:2a:
                    42:ed:de:1d:00:65:4e:73:78:0e:b4:34:e0:13:85:
                    c5:91:cf:b0:62:54:7a:8c:f9:cf:07:bd:58:17:bd:
                    17:97:31:c0:1a:ac:94:6d:04:c7:9d:ed:64:da:80:
                    a9:7b:6c:1d:f4:46:64:6b:23:5e:11:59:fb:3c:99:
                    52:f3:c2:87:4d:e0:e2:42:bb:ee:bf:63:a5:c4:3b:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:67:AB:E1:0B:22:AB:A7:36:33:76:C1:69:09:0B:39:89:CB:8B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/0740f2e9-9b3a-3a1d-9f2d-e1ea949ae57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:f4:62:2b:87:7c:b0:da:4f:c9:c6:99:8a:3f:7e:e9:15:
         6f:6a:b4:c2:2d:14:d1:20:44:fd:80:ab:7a:b5:84:c0:ef:e3:
         a4:cb:4e:16:29:a6:72:85:a3:52:a1:11:32:ef:93:2a:f8:60:
         3d:76:44:4f:a7:32:8b:c5:15:04:18:ca:a0:fa:4d:59:e1:c8:
         5e:3b:b7:e3:8d:9b:f0:7d:e3:95:c3:25:71:45:99:15:bf:86:
         18:34:a6:04:21:09:c1:b1:70:ed:3d:cc:43:20:16:dc:56:d7:
         e8:45:43:d9:eb:b1:22:4d:af:21:ff:c6:e3:94:4c:02:c1:ef:
         f4:2f:93:9c:5d:b7:91:ec:d0:d2:ba:8e:b7:d2:cd:13:1c:e3:
         93:45:f9:1c:6c:6b:47:48:a1:74:9b:80:1e:a1:6c:4e:44:e3:
         a8:f2:85:27:0c:66:90:1b:03:69:80:40:81:2d:4c:db:e5:c4:
         f8:c0:07:7c:43:28:1a:4a:2c:4e:38:54:5e:0e:8f:73:ac:e0:
         04:29:09:15:92:70:67:a9:2e:ad:e5:94:42:18:b7:bb:76:bd:
         56:d9:39:8f:84:62:82:19:c8:72:4a:66:f2:8f:29:5c:d1:48:
         d4:d5:6d:4a:95:5e:9c:6f:66:72:76:a8:1e:ce:6c:d0:1a:2e:
         91:58:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:27 2025 by rpki-client