Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/66bc8334-56b5-3188-afef-d99276881362.roa
File:                     66bc8334-56b5-3188-afef-d99276881362.roa (raw, json)
Hash identifier:          fWLlbYVxUxcUNGd5fQMLiHPTl6xPxBYc1OA/pUhwW2Q=
Subject key identifier:   45:D0:D0:D3:A5:DB:FC:3F:39:4E:AF:1A:72:6B:4C:76:80:67:EF:DF
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285848C2B645681AD70D86C76E7300
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/66bc8334-56b5-3188-afef-d99276881362.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        45.59.26.0/24 maxlen: 24
                          172.102.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:45:68:1a:d7:0d:86:c7:6e:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=8b417abd-c5c0-4f71-a38a-3c6eea547977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:de:67:34:f3:dd:f7:10:21:46:ce:a6:7a:
                    eb:bf:bc:b7:03:5c:b6:3a:53:ec:b1:db:7e:15:69:
                    64:87:80:cd:49:56:c8:20:c3:58:da:68:6b:86:e3:
                    14:1e:35:de:cc:3f:aa:49:3c:e4:cf:2e:49:db:70:
                    39:b6:14:0c:b3:f6:5f:1d:d1:1a:e4:2e:41:87:3e:
                    b2:4a:a5:10:b9:d8:39:15:ad:58:ec:8f:2a:e5:82:
                    5e:00:82:f2:52:13:5d:c4:b4:50:24:b4:6c:a0:36:
                    44:b0:f5:2e:6b:16:cb:f8:c6:05:2c:e5:ac:cb:22:
                    c1:26:ba:db:46:36:bf:8d:39:26:e6:88:df:99:a9:
                    9a:28:b1:fe:60:8f:54:6b:dd:35:1b:ab:bb:ef:cc:
                    67:d7:61:88:84:02:67:7d:68:3f:a9:c1:ba:b9:43:
                    70:c1:61:a7:64:c6:35:a0:1c:7b:44:33:3d:e6:5f:
                    c3:a1:16:d9:fd:38:5f:04:2f:e0:75:f4:aa:2c:72:
                    5d:a6:cb:be:40:fd:5f:a3:2c:b1:b1:fb:4a:a3:24:
                    4d:22:6d:e9:89:61:19:29:70:18:43:27:13:e8:d8:
                    d0:d7:a1:31:8d:12:39:7c:7e:92:ea:12:18:5e:e1:
                    11:64:67:26:52:88:fe:36:e9:28:67:f6:ad:33:88:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D0:D0:D3:A5:DB:FC:3F:39:4E:AF:1A:72:6B:4C:76:80:67:EF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/66bc8334-56b5-3188-afef-d99276881362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.26.0/24
                  172.102.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:73:bd:ea:36:af:4a:b6:d8:5a:da:11:bf:6a:63:3f:7c:de:
         bf:f2:d5:70:6f:be:af:e5:e1:dc:03:dd:d1:5d:f2:9e:46:51:
         52:ac:8c:04:a4:eb:d0:6e:94:ef:d2:61:7d:29:bb:e4:29:50:
         54:fa:a3:12:e3:91:1a:30:23:2c:93:a2:1b:88:eb:e8:4e:c1:
         41:a6:96:13:25:e2:e4:ec:0c:d4:85:1d:83:95:84:8b:71:f0:
         2e:1a:a7:bf:74:5c:c5:90:7e:06:e1:74:93:53:89:59:5d:75:
         fb:5f:20:03:41:b9:aa:9c:dc:21:0d:1f:3c:84:38:d1:00:ca:
         69:e4:09:80:41:50:b9:e2:ca:09:d9:69:c2:00:b5:64:8e:af:
         83:56:db:e1:ec:87:e0:db:70:52:c9:d1:f0:5a:ca:2b:70:f7:
         64:ae:01:55:5a:d9:6b:0c:d4:bc:28:e8:f6:0d:77:ad:12:78:
         10:80:08:f3:f2:b2:f9:65:d6:35:39:bc:77:0d:46:75:80:fb:
         b5:c8:fd:7f:20:cb:de:9b:a9:85:5d:d2:ef:65:58:d6:72:cd:
         15:fe:4e:a5:26:2c:12:1c:00:4f:c9:1a:7f:aa:3d:fd:f3:d2:
         a8:82:00:5c:01:e9:5c:fd:53:14:4f:d3:aa:72:14:58:14:6d:
         71:fe:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:03 2025 by rpki-client