Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/06673ad2-72bc-32b4-a8bc-4b4f9133d2ac.roa
File:                     06673ad2-72bc-32b4-a8bc-4b4f9133d2ac.roa (raw, json)
Hash identifier:          YL6zLhW3i1CwQrIUcEyen83nFqeOyqkHn17ut4PUc7c=
Subject key identifier:   E0:31:1B:21:E7:FC:DF:8D:DC:68:21:6C:B8:1A:83:99:EA:B3:C9:CA
Certificate issuer:       /CN=61393699-9734-421d-a324-4f3368d73fca
Certificate serial:       010D0C9F43285848CC7B8DBB4DE9841282F65080
Authority key identifier: 0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/06673ad2-72bc-32b4-a8bc-4b4f9133d2ac.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     397283
IP address blocks:        66.59.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8d:bb:4d:e9:84:12:82:f6:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61393699-9734-421d-a324-4f3368d73fca
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=14ac6ab5-04e1-4cb1-9845-b7c74645355b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:4b:fe:5d:3c:f7:ce:e9:77:b0:6b:85:24:
                    1c:ae:ce:f4:b5:68:07:6e:ab:fc:11:7f:e7:6d:ee:
                    b3:7f:f0:ca:84:00:28:49:d2:88:cf:26:3c:f7:00:
                    a2:a7:cc:f6:71:6b:55:bc:5b:14:5d:3c:e6:77:27:
                    59:ef:b3:55:67:57:24:0a:91:40:e2:c1:76:ca:87:
                    40:bf:2a:84:77:70:bb:4b:ac:7f:4e:f5:28:bc:b8:
                    61:c5:9b:f5:d4:14:e0:95:ba:b3:91:f2:f7:a9:91:
                    45:30:f6:2c:7a:d1:7a:1a:9c:e9:82:1d:3e:16:96:
                    75:4d:1e:63:72:1b:db:f4:f5:3b:57:5c:0c:5c:27:
                    6d:7f:7d:61:43:25:f8:50:d9:9f:e9:0f:dc:26:11:
                    5b:98:5d:6e:7b:ec:2f:4d:09:b2:c8:b6:47:d5:77:
                    eb:a6:85:af:52:64:91:8b:0d:8a:f2:08:60:a5:ca:
                    06:f7:ae:26:81:7c:15:78:8a:d5:ee:50:f0:31:48:
                    dd:81:b2:86:91:c6:62:4f:14:41:4d:41:fa:19:2f:
                    50:3f:0a:8b:b3:c2:f6:6a:96:fc:cc:50:74:c3:a1:
                    6d:63:15:c3:07:74:f5:6a:c3:d7:0e:b2:4d:dd:b1:
                    26:55:15:9b:d2:6a:d5:94:19:97:75:ed:e5:66:00:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:31:1B:21:E7:FC:DF:8D:DC:68:21:6C:B8:1A:83:99:EA:B3:C9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/06673ad2-72bc-32b4-a8bc-4b4f9133d2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca/61393699-9734-421d-a324-4f3368d73fca.crl

            X509v3 Authority Key Identifier:
                keyid:0A:34:E2:80:44:87:4B:28:F7:9C:57:B2:52:72:7C:22:94:75:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/61393699-9734-421d-a324-4f3368d73fca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:2e:52:60:51:4f:b2:20:83:9f:4c:64:3f:c8:54:e9:ab:
         6b:83:b1:cc:4a:2e:e1:d7:6e:04:23:55:92:44:c7:7f:3b:d2:
         53:e0:72:a9:d3:8f:e3:44:00:6c:d7:f8:77:e1:e9:35:fd:45:
         ee:5b:8a:c7:82:40:ac:52:2e:6a:fc:9b:9a:9e:27:2c:65:2c:
         7c:83:00:ce:8a:aa:96:8b:cd:73:f8:b2:45:d5:13:2e:43:8c:
         f8:e4:27:a1:6f:c8:97:d6:ae:b6:36:80:48:bc:b9:10:46:52:
         84:5d:a2:45:92:16:3b:31:0c:b7:08:d4:24:01:85:53:50:b9:
         77:18:48:09:3c:63:df:96:39:b7:ee:dd:b6:e4:5d:1d:83:24:
         77:d8:af:7d:36:85:0d:a4:64:b1:e4:f2:dd:de:b5:c0:b9:22:
         fc:e1:4f:5e:e7:ff:ae:af:bd:3a:9b:d3:7d:dc:0a:8c:62:b8:
         a7:a7:fd:5e:13:c9:1f:c0:e0:7f:80:08:43:cf:87:ee:16:3e:
         45:f0:ad:64:17:7f:a5:a9:5b:59:8f:50:c1:79:01:d0:a1:ca:
         29:36:28:6f:b6:84:6c:f4:c0:a6:e3:11:87:3a:ce:32:0c:40:
         ce:a0:a5:af:6b:6a:04:19:3f:5f:a6:1b:d3:9a:6c:7d:ed:12:
         59:f5:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:34 2025 by rpki-client