Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/34663886-ace0-399d-9a5e-3a935a4c5924.roa
File:                     34663886-ace0-399d-9a5e-3a935a4c5924.roa (raw, json)
Hash identifier:          PWjNb7isEqbFEsckCH77kcPC+MmVIrjyjHkm9tK31Bk=
Subject key identifier:   70:15:EE:54:4E:30:E2:C2:03:10:9F:21:44:17:95:6F:7A:D6:17:18
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F43285848E2D114C7C51FDAC251E42880
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/34663886-ace0-399d-9a5e-3a935a4c5924.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     9505
IP address blocks:        66.171.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:14:c7:c5:1f:da:c2:51:e4:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3f48d465-88c3-4624-8ea9-c5c0187a0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:65:b6:d1:4c:27:a1:24:0b:b0:41:5a:de:
                    48:8a:cc:0d:d9:d8:d6:2d:bb:f7:6a:3a:8c:4f:bb:
                    e4:6a:fd:6b:ee:4c:c8:37:61:3f:60:f8:06:fd:1c:
                    9e:b3:f6:56:0f:fc:8e:d5:5d:8e:3e:79:e0:1e:9c:
                    e9:93:25:e5:05:c4:34:8d:ba:75:b8:b4:fd:f8:ac:
                    f0:8e:7d:3b:b4:46:6a:4d:c7:9e:18:b2:38:c5:af:
                    79:da:75:fd:13:81:e3:86:4c:9e:53:37:da:fe:b0:
                    5c:71:e4:2b:af:fb:fc:e3:38:d4:38:26:be:68:85:
                    dd:a4:17:44:84:57:c8:bc:94:a3:94:5d:9a:4e:70:
                    5b:d6:a7:1c:ce:cc:a0:e3:06:37:82:35:c5:0d:37:
                    73:20:74:32:38:4c:7f:58:e0:7b:9a:d3:a9:9f:a0:
                    8f:bd:8b:67:ad:0c:e3:6a:bd:58:76:b1:c8:b5:9b:
                    e1:60:68:4f:74:57:db:3b:40:a1:df:1f:63:b8:13:
                    d6:27:32:02:92:1a:94:24:04:9b:68:ec:fb:64:08:
                    2b:a9:31:90:45:d9:ae:1b:ee:a4:25:eb:eb:4c:35:
                    8f:fa:72:a1:cc:38:b8:97:96:89:4c:38:97:be:18:
                    5a:ec:0d:b4:24:75:94:b6:4d:9a:aa:2e:82:f6:f1:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:15:EE:54:4E:30:E2:C2:03:10:9F:21:44:17:95:6F:7A:D6:17:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/34663886-ace0-399d-9a5e-3a935a4c5924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:86:ef:be:f9:de:2a:41:0a:21:80:da:bb:71:f0:52:09:c7:
         8d:76:df:ee:d7:db:ab:a7:ee:8b:e4:6b:07:f7:e2:78:b5:8b:
         fa:a3:bc:e9:51:fe:9a:af:13:90:01:ca:77:50:63:37:1e:67:
         6b:03:60:db:7c:88:ce:69:70:69:4f:f7:0b:dc:9e:61:cc:ab:
         6d:f4:e0:f2:38:3e:6a:6e:07:19:b2:d6:ce:20:47:08:38:fe:
         13:bb:b1:0a:c2:95:2f:7e:74:51:9a:86:70:ac:9e:20:70:ba:
         35:d9:bc:d5:47:3d:c7:b2:a0:71:f0:f8:da:3c:63:a5:13:73:
         88:8a:6d:99:30:c0:09:6c:d2:6e:7d:5f:53:64:7e:08:57:89:
         08:57:9d:6f:85:89:85:25:f5:fe:80:88:18:36:a0:f3:b6:91:
         e2:2f:64:17:4c:65:ab:d8:cd:20:17:1d:7d:3e:a1:e1:40:83:
         86:ea:58:25:72:14:a6:61:36:b2:6a:21:c6:c7:b9:6b:56:bf:
         b7:a0:db:a8:88:e2:03:3f:72:ee:cf:70:e3:43:19:65:bd:13:
         df:9e:d7:a8:37:dc:01:a7:4f:4b:4b:c1:e3:8c:82:3e:44:2a:
         ae:e5:1d:ad:0f:ee:e2:c8:f1:1e:ed:da:39:72:d0:d5:8c:8e:
         df:18:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:55 2025 by rpki-client