Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/66877e82-f422-3172-afcf-58c1401e7382.roa
File:                     66877e82-f422-3172-afcf-58c1401e7382.roa (raw, json)
Hash identifier:          AQCTh5hfOqOORzNcLRSCyJ+t+7b7RSyRFTYCeDrY/X4=
Subject key identifier:   3D:82:55:6B:1D:BD:70:1D:F6:AD:E4:38:03:65:A1:0A:EE:8D:CB:E1
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C43510F45213F4A67214E280
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/66877e82-f422-3172-afcf-58c1401e7382.roa
Signing time:             Tue 04 Feb 2025 02:52:15 +0000
ROA not before:           Tue 04 Feb 2025 02:52:15 +0000
ROA not after:            Mon 05 May 2025 01:52:15 +0000
asID:                     14813
IP address blocks:        69.73.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:35:10:f4:52:13:f4:a6:72:14:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 02:52:15 2025 GMT
            Not After : May  5 01:52:15 2025 GMT
        Subject: CN=08cc423b-d643-42a8-95c6-2766b7fd740d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:70:b1:81:e8:69:85:28:a7:bc:ff:e1:0c:
                    2f:10:f1:c1:7c:55:7b:66:a3:ab:ff:1b:de:4c:90:
                    a7:f8:7b:74:f7:7f:bd:79:44:22:27:bd:e9:ac:48:
                    77:b9:42:24:00:d2:b5:00:d6:ab:4e:f3:11:71:d6:
                    c4:53:6d:83:8a:ea:c6:1f:c0:32:d8:8e:1f:1d:48:
                    60:34:93:87:47:26:8d:21:df:8f:48:a4:b3:04:a8:
                    af:d3:fd:58:6f:23:b0:69:09:be:3b:69:fd:ff:4c:
                    76:6a:ee:b8:1a:4f:ca:8b:4f:37:c9:10:53:3c:30:
                    d3:f6:53:da:84:f1:c3:df:7c:07:38:e2:00:0e:bf:
                    70:1b:28:2f:e7:92:76:2b:30:c4:c5:6f:57:00:ac:
                    43:35:de:55:cb:63:98:09:e7:15:dc:8c:60:61:d1:
                    3a:60:0b:55:21:92:f5:d9:61:20:f9:e4:8f:03:0c:
                    36:53:83:7c:ec:04:51:1c:f0:72:2f:7a:ee:ad:a9:
                    d0:02:be:60:6a:85:74:29:95:c3:e6:52:12:d2:e6:
                    42:b0:f6:3c:47:37:fb:57:7b:7e:d0:9c:50:72:3a:
                    ee:6a:55:bb:01:1e:88:2f:10:81:a1:82:a4:4d:c6:
                    a6:4e:c1:45:14:31:70:32:60:6c:57:12:16:d0:31:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:55:6B:1D:BD:70:1D:F6:AD:E4:38:03:65:A1:0A:EE:8D:CB:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/66877e82-f422-3172-afcf-58c1401e7382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:71:09:a8:34:14:01:1c:71:9d:7a:62:44:74:d4:a0:16:e3:
         be:bd:56:87:a2:ee:cb:47:84:f5:25:cc:34:94:22:13:f9:17:
         dd:d7:96:8f:d1:09:cd:54:d3:b6:b4:25:99:0e:01:6b:a0:a3:
         79:c6:d5:07:3d:04:43:0c:6a:05:c2:1e:70:8f:ba:88:2e:9a:
         aa:37:f1:85:a3:61:5f:a4:fe:c1:99:b4:bb:5c:69:e1:da:dc:
         dc:cc:3e:08:93:51:53:27:5f:0a:7e:0c:ee:02:a2:23:f3:3f:
         e8:e0:0c:db:d7:c1:73:bf:e8:db:82:1d:8b:e6:70:f9:a9:49:
         9c:c9:72:89:f8:da:03:1f:de:4e:5e:80:e9:ee:4b:81:29:bc:
         bc:3b:f1:bf:14:d6:33:a8:e0:8f:bb:e3:02:9e:cb:a2:a9:46:
         21:39:10:3a:4d:2a:c1:0a:54:8e:12:82:8b:91:81:50:3b:48:
         d9:dc:9a:bd:e3:05:fe:12:75:f6:07:f0:45:77:8f:e9:43:fa:
         45:2b:5d:c2:94:2b:60:c4:eb:66:7e:86:67:10:f3:d2:e0:19:
         ed:dd:49:e3:76:d6:2f:40:86:ff:58:4e:97:af:ba:95:f9:24:
         a2:bd:8f:ce:06:d9:90:26:39:13:17:e8:14:81:58:41:f2:6f:
         9e:67:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:54 2025 by rpki-client