Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa
File:                     8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa (raw, json)
Hash identifier:          vjqP38JZta7XeTJlvdd6+4Zdi4JkVGIqyplFxM8RJ1Y=
Subject key identifier:   4F:12:78:F6:74:92:72:BF:2F:E5:E4:5E:C7:C9:A7:17:DD:87:06:B6
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285848A29B529BA34F3751FB75B100
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     13768
IP address blocks:        66.33.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:52:9b:a3:4f:37:51:fb:75:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=355697b9-4082-4bdd-974a-172dc934f8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:96:8c:88:dc:28:96:18:c7:10:95:93:61:
                    67:c1:8c:06:be:b4:05:1f:e2:37:eb:5f:f4:43:f9:
                    0b:71:ce:79:15:d8:c9:67:33:ff:1c:7a:8a:b7:4f:
                    af:88:02:fc:67:da:b3:64:58:d7:98:71:11:c9:d4:
                    b2:d5:a2:a4:f8:6f:2d:97:6b:fb:b6:65:1f:57:81:
                    15:a9:7e:21:e2:43:bc:4e:f9:0a:40:b4:08:c2:5e:
                    47:e6:71:3c:6c:ab:8d:8a:90:00:d1:51:19:d3:ac:
                    e3:77:a8:c8:f4:2a:30:7d:74:ab:72:8a:8f:cb:68:
                    ff:4b:a2:84:ce:00:15:71:50:9c:db:bf:4f:ca:cb:
                    9d:03:3f:9d:73:a0:c6:39:43:4d:83:8b:09:cc:cf:
                    15:5f:0b:dc:3b:37:db:c8:17:26:0c:dd:f2:3c:46:
                    65:1e:c1:40:31:60:71:4d:75:23:d4:ee:0e:f2:e0:
                    8a:a8:8d:c2:33:37:b4:32:84:64:47:43:e7:fd:97:
                    c1:2a:cf:38:b3:68:1f:ea:df:18:87:73:df:21:17:
                    fc:88:79:b3:12:80:0f:a0:81:a2:a1:0a:3e:e7:92:
                    5d:02:13:b4:d8:87:43:40:76:9d:20:0a:c2:45:56:
                    eb:5b:e7:ed:f5:c3:8e:c9:67:aa:88:22:4b:25:2b:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:12:78:F6:74:92:72:BF:2F:E5:E4:5E:C7:C9:A7:17:DD:87:06:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:f3:d8:30:9f:22:77:f2:0b:72:1b:2b:f6:cc:6d:2d:ec:
         b5:e0:18:93:22:fc:ff:bb:1c:d9:07:98:6b:94:65:48:b9:b2:
         e6:75:85:53:b8:c7:e5:84:d6:31:aa:be:99:f3:c0:66:a0:00:
         fb:96:c3:f2:47:a7:4b:b3:2f:ce:3c:dc:9e:dd:99:79:02:73:
         72:be:aa:91:a9:d1:94:10:22:eb:67:71:d8:b5:95:59:d9:d5:
         9b:90:b6:d3:d3:fd:8f:00:29:a2:85:d0:3c:d3:a9:75:a9:18:
         83:28:41:50:bf:a5:2b:e9:46:55:82:6c:b0:1d:ff:3d:ef:52:
         f7:83:f3:75:ed:4c:67:6a:6c:05:ae:13:9e:fb:e6:b9:5f:4d:
         99:0d:31:bb:88:14:17:b6:8f:cd:58:37:b5:b0:14:7a:52:20:
         3c:14:5a:18:89:3d:53:4f:e6:61:fb:d2:30:5d:55:45:2f:75:
         c5:88:80:21:54:e9:6f:af:22:58:4c:61:0a:d3:88:bb:80:09:
         6d:d2:64:b9:db:87:f1:79:26:0c:fc:f5:90:c3:32:53:97:d8:
         ee:65:52:3a:f5:a9:3f:17:cc:54:97:1e:63:42:9d:e1:2f:e6:
         36:23:27:df:55:ad:a1:58:86:53:38:7d:34:5f:02:f7:8b:7f:
         bc:6e:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:15 2025 by rpki-client