Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
File:                     8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa (raw, json)
Hash identifier:          Pyhak50tP8Cl3AzwUoWhSfPiSUWWIopQFXBqneU++cE=
Subject key identifier:   F5:BF:E7:DB:00:84:AF:E5:67:52:69:D6:FB:91:20:88:78:7B:77:1D
Certificate issuer:       /CN=de8b5430-108d-4deb-960f-6c438a23adc4
Certificate serial:       010D0C9F43285848B8F0D02AE99B8393067C6580
Authority key identifier: 85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        66.132.138.0/24 maxlen: 24
                          198.73.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:d0:2a:e9:9b:83:93:06:7c:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b5430-108d-4deb-960f-6c438a23adc4
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=3f9e472c-04f2-4ffd-8daf-2788ed103c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:6c:30:ce:f4:22:f8:ee:6a:33:cc:4b:f2:
                    38:d0:9b:e3:e8:c7:7d:43:ce:16:84:0b:f4:4d:fd:
                    24:9e:93:88:9f:73:27:ff:03:25:2d:2b:27:02:97:
                    c5:61:ad:16:2b:66:59:c7:3c:f6:45:9a:58:75:8a:
                    70:fb:fd:b0:e6:f0:fd:ed:4f:16:42:82:9d:e7:0b:
                    22:cf:9d:e7:dd:44:f0:73:72:32:50:5d:20:dd:77:
                    8b:61:57:77:52:fe:3a:8f:b9:7a:38:56:33:82:9b:
                    52:dc:de:a0:2c:f3:66:38:17:49:6c:bc:7b:92:f7:
                    7f:93:9c:a4:3b:19:ae:2c:13:f7:66:f8:c7:a0:11:
                    d6:32:7e:3d:ac:dd:39:f8:5b:73:5d:85:41:09:9a:
                    f3:6f:cc:e2:af:d8:4a:91:52:a1:19:f8:76:f7:04:
                    21:75:70:d6:6e:d0:e5:ac:fc:ad:a0:8b:8b:d3:a8:
                    b3:8b:e7:5d:23:30:be:ee:c9:78:a4:af:61:10:17:
                    da:ca:87:f2:6a:a9:e5:b9:06:56:42:d8:1a:fd:ee:
                    6f:b4:04:f8:09:d6:10:a3:9a:5b:30:5a:c1:40:6a:
                    61:4e:5d:51:f2:69:78:5d:de:3a:49:ea:7d:04:95:
                    f2:93:d7:dc:e5:ed:c3:46:00:16:f7:82:75:e8:53:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BF:E7:DB:00:84:AF:E5:67:52:69:D6:FB:91:20:88:78:7B:77:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/8f9977b4-bf3d-3886-86d2-2e574ff16f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4/de8b5430-108d-4deb-960f-6c438a23adc4.crl

            X509v3 Authority Key Identifier:
                keyid:85:AD:13:A5:9E:F5:E8:3C:11:52:3F:14:C4:31:A2:9F:04:8F:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de8b5430-108d-4deb-960f-6c438a23adc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.138.0/24
                  198.73.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:2f:65:af:0b:1c:e0:08:be:a3:3e:df:ce:a8:aa:aa:81:
         24:fb:ed:bc:db:a1:94:d9:88:d2:2a:b9:51:b2:ae:40:98:23:
         68:53:c9:b3:23:4d:c4:6e:bb:2a:86:1b:89:16:08:a4:8a:25:
         20:9f:86:56:b1:b8:08:16:27:0e:f1:d8:9f:67:87:56:31:f1:
         dd:e7:b5:ca:35:80:66:8d:4a:06:ce:bd:d7:d1:b7:16:15:9f:
         a6:b5:6e:b8:43:75:f3:10:e0:bd:ca:37:ce:f2:1a:b2:21:eb:
         e1:24:fe:2d:70:e6:e1:de:36:0c:c2:59:9a:ac:4b:ad:db:c6:
         da:76:81:e0:e2:77:d0:f7:c9:7d:a7:88:98:01:6b:ed:e9:2a:
         24:d9:cb:09:3a:c8:31:3f:c8:61:e3:ef:1c:56:59:b0:f0:f0:
         70:6c:d9:02:7f:ca:dc:84:07:0b:81:cb:eb:22:37:40:bb:5f:
         c9:be:e4:6c:21:d3:f0:5d:80:7d:22:ae:ed:51:84:77:a3:a2:
         80:dd:54:3d:66:61:8d:cc:b0:f0:86:e0:b9:c9:c9:6f:5f:d3:
         f4:76:c7:29:a1:0f:d9:3a:cd:61:dc:3e:0a:f6:ca:38:13:2e:
         86:52:73:d8:f6:eb:0a:a1:e1:44:27:57:8c:09:35:5c:d3:54:
         6b:3a:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:18 2025 by rpki-client