Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa
File:                     8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa (raw, json)
Hash identifier:          fA8H/i2STyATegqga+vkvdAz6cB/dWsCHOkvjrLUCg8=
Subject key identifier:   4A:69:69:D0:DF:6A:A6:F9:4F:2A:31:63:E0:58:EB:FA:3F:35:76:9B
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285848E16BD29AFCAE3850D6DB0B00
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        66.178.140.0/24 maxlen: 24
                          66.178.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d2:9a:fc:ae:38:50:d6:db:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=1865fffb-458c-4c22-9f18-6b24ca8d65c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:67:99:1e:e1:5c:b6:2f:a5:82:6b:b3:66:
                    56:b1:cd:26:76:e3:39:29:8d:e9:77:76:66:b6:7e:
                    71:8a:d3:89:60:51:73:01:3a:9b:97:86:01:f6:ee:
                    f8:47:ab:47:50:d2:26:27:07:1c:88:6e:3c:20:7a:
                    fe:2c:3b:b9:20:0b:3a:ce:50:ed:6a:48:7f:cd:da:
                    dc:aa:c6:7a:5f:23:f7:dc:8f:e1:df:11:83:28:46:
                    6b:e7:b9:14:79:19:51:56:cc:2c:2d:c1:f2:7d:29:
                    fe:fa:b8:75:89:33:5b:47:f0:bf:78:10:d1:f4:b9:
                    44:a9:3c:1a:83:4b:6f:6e:fa:27:19:31:69:f4:cc:
                    92:0a:28:ad:d7:67:a5:f0:1a:c2:26:9b:9b:ad:af:
                    4b:3f:55:f6:c2:b0:af:95:14:af:5d:37:fa:ee:5f:
                    f3:b7:48:e0:c6:ea:a5:ce:d9:89:02:40:1d:24:98:
                    d9:01:ea:f2:d7:19:5f:30:ce:49:eb:06:8f:35:36:
                    d0:75:ce:d3:c3:61:94:86:8a:b0:74:7a:81:e9:23:
                    26:41:48:52:9f:c8:d4:bf:a7:af:8d:22:9e:68:a9:
                    a8:6d:54:f3:a2:9a:da:60:bb:7a:93:2d:7e:1e:4d:
                    3d:98:67:c9:ed:88:a1:7b:7f:64:a7:9f:f6:d8:5c:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:69:69:D0:DF:6A:A6:F9:4F:2A:31:63:E0:58:EB:FA:3F:35:76:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8d9b46d4-6fb0-39d8-aa5d-44f9383a517b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:b9:ab:91:20:7b:ef:9c:41:70:8a:fc:72:89:cc:5a:23:90:
         88:8a:84:f5:2f:10:60:a0:0b:f7:1e:8a:25:ec:fe:2d:9c:52:
         02:6f:ce:34:0e:33:00:cf:44:33:9f:25:b8:49:36:1d:b6:e9:
         2e:85:1f:64:1e:f8:d4:53:c1:e2:6a:7e:7d:79:c7:03:83:2c:
         99:db:13:5f:14:88:d4:02:bc:8f:25:0d:2c:7f:fc:40:c0:40:
         a7:77:4d:de:53:c3:b0:68:1d:90:bd:53:26:7d:d7:2f:c0:05:
         47:09:93:fa:4e:4b:3c:b8:c2:9a:43:a1:a3:f9:dd:db:4a:4a:
         c6:a3:c2:1a:42:3c:54:38:da:f8:27:87:81:33:f8:22:b8:0a:
         d7:39:4c:15:e6:28:2c:1f:4d:fd:aa:91:89:b8:89:7c:67:14:
         ed:27:b8:4e:d2:38:7d:03:9c:ad:cc:40:63:28:4b:33:42:34:
         d0:df:41:4c:78:f3:3b:20:25:4c:49:a6:58:2a:57:4c:1a:db:
         ec:3d:13:88:31:cf:5d:aa:ef:ba:73:bd:db:2f:43:ce:ba:76:
         ea:a4:17:28:5e:7c:db:6d:9d:6b:73:60:e8:d8:69:ab:9b:60:
         7f:4e:23:21:68:19:48:9d:9f:3b:96:3d:2b:4c:04:a0:b6:1e:
         94:0a:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:33 2025 by rpki-client