Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/c4a25dc7-bf9c-35d4-8609-11f63d2c4f2f.roa
File:                     c4a25dc7-bf9c-35d4-8609-11f63d2c4f2f.roa (raw, json)
Hash identifier:          Z1FuJVr8kuVjU7zOfem/T+LYouSLdfqYZ0UW7EuBM24=
Subject key identifier:   DF:FC:DD:4F:17:E7:21:A5:02:81:48:AC:0E:2A:C4:FB:0E:FE:03:BA
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F43285849ABB49DFB4ABE2A983F547F00
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/c4a25dc7-bf9c-35d4-8609-11f63d2c4f2f.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     31786
IP address blocks:        66.85.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9d:fb:4a:be:2a:98:3f:54:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=71224fad-ccef-409e-af5b-3ad0fa63304c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:11:f9:60:eb:c7:e6:ef:b3:f9:75:09:85:
                    81:17:0e:62:76:7b:3f:a0:8f:42:bd:2d:94:58:4a:
                    e7:c5:3c:0b:9e:9a:56:69:0b:ee:f0:b3:87:ec:ef:
                    1d:fa:9e:16:79:0f:2f:db:38:03:09:6c:a4:58:06:
                    e1:7e:cd:eb:61:d2:89:98:02:d2:35:94:bb:1e:93:
                    18:2c:dd:44:54:be:9f:de:ca:f5:0d:9c:00:5a:71:
                    9a:b5:2c:e6:40:ed:3b:6b:04:eb:42:20:30:23:fc:
                    fc:d8:d8:96:11:24:2c:38:a7:a6:26:ba:d1:c0:96:
                    03:90:5f:ce:18:dd:73:34:74:8e:03:30:de:3d:7d:
                    9a:a2:b6:69:f9:58:21:9b:98:fe:97:47:a0:ec:ec:
                    a4:9e:92:9a:60:67:b2:4a:77:22:9e:65:5c:10:60:
                    27:db:3e:58:88:3c:ca:86:31:ec:db:2a:53:f9:8e:
                    f9:62:27:c6:f2:c7:0b:41:42:d1:ea:12:7c:46:ef:
                    42:c7:ca:7f:21:fb:3f:91:f0:0b:14:77:46:45:18:
                    2c:7d:39:cd:99:b8:16:b8:20:b5:ed:54:07:c2:7c:
                    f0:21:e3:b7:cc:4b:9d:de:60:3e:07:ed:03:37:14:
                    5f:c1:f6:70:66:1d:fd:90:f0:8b:46:25:0b:29:62:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FC:DD:4F:17:E7:21:A5:02:81:48:AC:0E:2A:C4:FB:0E:FE:03:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/c4a25dc7-bf9c-35d4-8609-11f63d2c4f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:4a:0d:9e:d3:d4:45:c7:c8:6f:9c:2c:7a:96:8d:7e:7d:
         32:0d:e1:4a:49:ca:e6:28:db:08:bf:bd:af:ec:cd:89:da:03:
         e4:43:cd:77:2e:f0:b4:f3:fd:bf:89:84:3c:b4:db:1e:27:a6:
         1c:2a:11:ee:a0:cf:59:c1:d3:21:e8:46:17:9d:a4:45:d0:08:
         3f:c3:fa:0a:d1:e7:bb:ff:4e:bf:0b:d6:e1:1e:34:a1:24:73:
         df:6b:af:b6:d5:16:33:ca:96:9f:85:8c:e4:26:7b:cb:e7:07:
         8d:04:33:b3:de:aa:a4:b5:89:5f:13:80:4e:11:3d:06:d8:e9:
         64:59:d5:29:28:69:e3:93:52:e2:21:3f:42:95:f1:c4:c2:00:
         4a:1d:a8:df:6d:f6:aa:df:73:cd:9d:b0:b7:f6:3f:c1:69:bd:
         bb:94:8a:f2:2a:3a:f3:e1:6a:a5:45:ec:85:86:26:54:95:15:
         c3:7e:b6:6c:a2:8d:72:e3:66:19:00:80:67:39:02:9c:c0:a2:
         95:b1:e3:ce:69:8e:4a:38:f4:ed:e0:92:c9:7e:ea:dc:4f:2b:
         28:09:6f:d8:ce:38:19:8d:39:16:f6:33:de:cf:97:ae:fb:44:
         a3:52:a5:8e:82:8b:ac:c8:60:d8:ab:69:fe:d7:4e:bb:ec:1c:
         fc:6a:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:58:27 2025 by rpki-client