Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1ad57176-e900-3e39-94fa-b4e612a741a6.roa
File:                     1ad57176-e900-3e39-94fa-b4e612a741a6.roa (raw, json)
Hash identifier:          ydaR6LG+x3tIQ5A3yJb1JqCjpNnxEV7bw4bW/D40M7I=
Subject key identifier:   AD:BB:55:AA:A8:32:DA:7A:EF:AB:DC:99:C5:30:BC:40:10:FD:20:2E
Certificate issuer:       /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
Certificate serial:       010D0C9F4328584849456B594119CF6E2E933180
Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1ad57176-e900-3e39-94fa-b4e612a741a6.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        66.187.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:6b:59:41:19:cf:6e:2e:93:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=2e5ffe07-d0f6-4552-b20f-d91d9f3c2560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:56:81:d3:19:e9:7e:4b:e1:d5:46:8c:88:
                    09:4c:62:40:71:51:34:6b:04:58:35:23:57:69:7e:
                    1f:00:98:69:fb:05:11:54:71:0a:17:c3:42:79:54:
                    4a:5c:43:8b:8e:f1:50:44:df:ea:05:e7:e3:9d:b1:
                    2b:3d:b2:a2:e0:cf:24:f4:69:32:72:a6:e5:f5:06:
                    51:bd:e9:a0:c9:c3:e1:e9:47:b0:ea:46:26:1c:27:
                    32:78:c9:59:e1:9e:d4:c0:b7:0c:42:ac:39:23:4e:
                    4b:54:73:9c:39:fa:34:65:7e:ac:e5:6d:a3:53:61:
                    0d:12:f5:ae:fe:72:c9:9d:4f:40:06:a2:87:db:ed:
                    ab:f5:ad:6c:ec:d3:16:08:71:40:84:17:84:1c:e3:
                    78:62:65:ca:97:1c:9d:84:65:38:17:d5:49:d3:95:
                    e6:9f:4e:d1:96:b7:8c:07:1e:c4:5a:01:7c:4b:36:
                    af:9c:17:ee:21:96:89:ce:c5:b7:8e:6d:ed:77:55:
                    90:7e:76:d2:54:17:63:df:5b:ea:0f:ef:c9:14:dc:
                    d9:72:0d:d7:4f:ef:17:64:d5:db:95:db:fe:02:b6:
                    85:3f:95:3c:ad:3d:f7:78:31:5c:34:aa:a6:70:ef:
                    da:7a:63:00:c2:f1:41:1b:b1:ca:d1:98:8c:e5:f5:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BB:55:AA:A8:32:DA:7A:EF:AB:DC:99:C5:30:BC:40:10:FD:20:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1ad57176-e900-3e39-94fa-b4e612a741a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl

            X509v3 Authority Key Identifier:
                keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:42:37:10:5e:e7:27:b2:47:51:fc:67:b1:88:3e:47:d4:
         77:53:e1:42:c9:b1:51:f3:9a:eb:b3:64:41:76:4d:b8:e5:e5:
         8a:7c:d9:b7:14:c5:f4:af:05:6c:67:16:cf:c3:eb:ec:a5:56:
         cd:96:b6:89:3b:f9:31:2e:6c:17:9e:05:7b:4f:8d:11:13:a1:
         c3:1a:d7:4a:47:58:eb:e6:55:b7:69:59:c5:db:5e:da:21:8c:
         18:10:e6:a1:18:15:5f:35:91:6b:b7:cd:b5:ec:3f:24:a6:9f:
         d7:85:d4:46:c1:e4:0c:c5:e9:c9:e7:82:bb:ba:47:fe:76:de:
         26:56:c7:43:40:17:31:22:58:83:d9:76:73:ba:78:d3:2b:d2:
         b4:61:c6:03:7f:a1:ef:8c:e3:75:01:bb:c7:20:5f:45:f9:b8:
         6d:9c:30:c1:78:8a:37:6d:6d:67:3d:cd:cd:65:57:d0:b3:17:
         85:5e:f0:9b:d7:9c:40:05:af:ab:36:f8:c2:98:88:89:3f:aa:
         6f:16:36:ad:7c:97:be:b6:d8:5f:c0:8b:fb:c6:43:85:36:59:
         59:00:06:7c:f7:58:b4:74:5c:04:f8:ba:0d:5f:b6:4e:01:21:
         70:ba:dd:79:b7:e4:8d:12:53:59:87:47:db:26:60:ac:91:ee:
         4d:3e:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:36 2025 by rpki-client