Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa
File:                     3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa (raw, json)
Hash identifier:          JrWo795l1AZjqm98ove6RLtSAB3X0OujbCvsLzEpkmU=
Subject key identifier:   88:1C:32:87:82:9F:58:6D:14:84:ED:2F:70:11:24:61:16:EB:25:83
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F432858493ED3D5C7A5110BEC2582CEC0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        66.178.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d5:c7:a5:11:0b:ec:25:82:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=5705c6b2-84b7-4b7f-8f61-e8912d1f90ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:08:34:06:d5:25:86:29:ab:fd:78:36:81:
                    da:b0:d5:a2:73:de:25:0a:75:75:22:f6:da:2f:31:
                    49:16:3f:04:60:28:a7:81:f6:53:d3:8d:7c:91:ac:
                    a0:3f:23:54:ea:f0:02:15:1f:a3:88:57:22:d0:e7:
                    00:ed:d8:c0:4e:e9:4a:5d:0d:a3:4e:17:f9:dc:16:
                    db:01:65:1f:81:6a:3f:18:f2:01:b7:1e:68:1c:3b:
                    24:2a:55:34:9b:36:78:6c:24:53:df:0c:02:aa:75:
                    0a:2c:ea:32:8b:a0:a0:84:72:43:8e:b3:c7:1c:37:
                    ea:26:bd:93:53:3a:f4:a1:f0:e4:83:bb:5b:b7:29:
                    f2:d7:24:38:b3:f2:21:da:66:31:f0:ce:dc:3c:0a:
                    7f:79:c5:26:f4:d3:8c:27:43:ea:b1:24:52:a5:f0:
                    e6:c3:66:7c:91:40:6d:39:ff:3d:76:6a:a5:1d:de:
                    04:87:46:bb:a5:d5:e0:99:f3:64:a2:48:0a:e8:ed:
                    c0:1b:2e:ca:b1:cb:05:39:05:34:9f:74:08:77:47:
                    2e:b8:d4:85:81:43:63:4a:04:c3:dc:18:cf:38:52:
                    1f:85:c4:90:39:40:7f:71:61:f4:35:0c:c3:21:e7:
                    50:54:54:e3:f3:bb:af:d1:e3:5b:90:bb:e3:af:86:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1C:32:87:82:9F:58:6D:14:84:ED:2F:70:11:24:61:16:EB:25:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fea99b1-9010-3bfb-9a15-e2a6d2c0e9a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:cb:51:89:fa:3d:0b:39:a3:9c:4f:6c:07:43:90:a5:65:
         75:5d:26:61:b9:66:5b:1f:bc:7a:13:de:f7:71:b2:3d:48:e9:
         33:5d:a7:04:a6:8e:63:79:9b:9a:1a:b4:82:0c:97:d4:5a:25:
         db:2d:b4:e8:a0:8d:1f:1f:3b:b3:ef:09:0d:77:15:98:ad:35:
         93:30:1e:95:4d:06:0e:03:3d:5c:5c:43:4e:0b:66:99:95:e6:
         e7:04:27:1a:d9:ca:1b:55:3f:a0:97:77:46:55:81:e7:7c:31:
         39:b0:a1:de:f0:74:73:33:02:ef:84:bf:cd:4e:01:64:68:1e:
         f4:7f:8f:68:52:c0:0c:4a:7f:fc:7a:04:63:8d:64:e1:18:b4:
         87:58:5f:6c:74:0b:65:8f:8d:d6:bc:f9:8c:25:4f:52:97:a1:
         4c:81:50:71:cd:d2:3b:03:9d:ec:9a:af:4a:5c:b3:e8:b1:6e:
         3b:bb:e6:84:db:20:e4:02:8a:0f:6a:8f:a4:91:09:95:be:04:
         5a:b0:74:c2:28:ef:ca:ed:64:2e:0d:ad:d0:8f:37:bf:af:3b:
         7e:dd:2c:da:d3:e0:c8:eb:f4:97:97:f2:a2:75:11:8d:5f:39:
         d6:ff:51:7d:d2:97:91:f4:8b:70:67:5c:8f:31:68:e7:81:c9:
         cf:72:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:21 2025 by rpki-client