Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa
File:                     413e9f7d-2d3d-3845-aa41-861d68125bfb.roa (raw, json)
Hash identifier:          7v9Dvn8OXFguOf2RZOQegIgNqbTbZOqt2OsytRdzn/I=
Subject key identifier:   10:8C:1D:2E:80:22:78:07:FB:1D:00:45:E8:A2:A7:0F:00:20:31:AC
Certificate issuer:       /CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
Certificate serial:       010D0C9F43285848E2D11CB4DA5694439E9AC100
Authority key identifier: B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        66.45.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1c:b4:da:56:94:43:9e:9a:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=5e9cb11c-3087-4d67-827a-7f0838616ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:97:06:f6:db:f7:75:78:a1:fa:a4:82:fa:
                    ef:54:de:50:be:0d:2a:ee:16:d5:f1:c4:8e:56:6c:
                    92:bb:f1:df:70:ac:bf:a3:12:d3:7e:61:f1:db:04:
                    5c:0b:69:cf:ae:03:f1:fc:31:60:97:4c:c4:12:ad:
                    a2:85:a8:37:f9:e8:6e:f2:05:77:b3:5a:4d:6c:66:
                    de:c6:cc:5b:93:18:36:90:c9:c8:1f:74:90:46:45:
                    0e:1e:8b:93:b3:d9:0c:10:e5:75:18:16:3c:0e:56:
                    12:a4:68:d4:d9:d9:e9:24:cb:6e:0e:b3:9a:2f:34:
                    da:cf:10:bd:3f:db:e6:71:bb:f4:eb:22:1e:48:7a:
                    ad:a3:b3:b7:0f:12:bd:ce:df:6e:79:00:ce:48:16:
                    ef:1d:b0:2a:c9:d0:c3:8b:1b:2e:7e:ab:a2:b4:4e:
                    e9:3b:7c:1c:3f:56:24:db:d5:22:72:c9:41:ab:a7:
                    50:e4:18:1f:9d:8d:e7:4b:71:42:93:8e:ca:a2:6f:
                    52:d2:17:92:2f:81:36:95:1c:4e:d2:ed:1a:66:94:
                    f8:3d:09:45:53:92:b9:d5:5c:bd:1a:a7:c6:46:ea:
                    d4:d0:29:26:72:5d:6d:53:4c:a0:70:e0:54:62:db:
                    5f:8a:16:b8:cc:6c:e0:e2:57:ef:34:af:7e:13:20:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:1D:2E:80:22:78:07:FB:1D:00:45:E8:A2:A7:0F:00:20:31:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl

            X509v3 Authority Key Identifier:
                keyid:B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:39:63:1e:55:e5:ab:00:42:47:ec:61:ac:4f:7b:0c:18:ba:
         80:3a:40:c6:d0:95:32:45:94:53:14:a8:bc:99:3d:36:2d:6c:
         1d:8b:54:de:d6:71:17:77:74:64:03:b6:6b:b3:da:b2:e7:9c:
         ae:af:9a:51:73:5c:15:dd:9a:fc:38:dc:69:28:47:9a:75:12:
         1b:95:05:c2:29:df:35:94:fc:d8:da:61:76:16:dd:88:98:ba:
         c3:e6:7f:3a:93:ca:78:6c:c6:a1:15:ac:6e:42:80:9b:d6:a1:
         08:47:78:de:a0:bd:56:dd:ae:64:ec:7e:db:34:94:2f:e4:da:
         c2:3e:4b:0c:d5:4c:86:5b:3c:a2:4c:eb:6b:9b:d9:b6:11:53:
         56:20:b1:4a:2d:cc:61:64:52:74:c8:aa:ab:11:7b:11:ea:9e:
         38:8c:82:1d:a1:a7:fe:7d:05:16:4a:e6:98:53:03:d8:ab:ae:
         eb:90:f1:fb:7b:7e:7e:69:d6:14:dd:d3:54:46:54:29:47:de:
         55:7e:50:fa:e0:d7:f1:fe:84:90:67:8f:c3:fe:2c:8f:9b:69:
         20:b6:98:5f:fd:93:2f:45:85:67:94:bc:3a:b1:8a:94:f6:87:
         01:66:13:38:61:8d:a4:aa:bf:00:2b:a5:48:0e:79:40:fa:ba:
         94:0d:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:08 2025 by rpki-client