Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa
File:                     d13f9f99-e597-3904-ba20-da0c91f2c353.roa (raw, json)
Hash identifier:          zeE4OdDOtIPDW5RkdDEC1HamVucyJTzctEtz0NGnVEk=
Subject key identifier:   80:21:D2:7F:B4:6E:04:17:E5:98:34:96:F0:50:AA:91:4E:F7:DC:EC
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285848424AD79FF46A9625E5B58C80
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     27608
IP address blocks:        66.161.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d7:9f:f4:6a:96:25:e5:b5:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=5b7864db-5cd5-4a83-b85e-04b39eb253d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:b9:40:f7:79:20:b7:63:8f:97:c3:cb:8b:
                    1c:ec:09:0d:14:79:43:a6:ab:d6:3a:2e:dd:81:d5:
                    4a:88:d5:0f:02:d8:f5:20:17:d9:56:ad:9e:dd:65:
                    8d:60:17:a9:d3:69:66:94:e2:c4:f2:bd:a8:a8:5b:
                    31:83:f8:1f:bb:d9:fd:64:3c:c8:ed:61:6b:3b:fd:
                    34:02:22:39:36:7c:a1:76:05:4c:23:65:3c:90:7f:
                    17:50:2a:b0:14:d3:cd:92:2e:9c:18:1a:28:29:88:
                    89:6b:cf:d2:83:53:30:f7:c8:0c:d7:42:68:96:fc:
                    5e:7e:5c:30:ba:74:3a:88:d0:dc:2e:7c:b6:78:56:
                    e2:d7:81:d6:a5:2d:4e:9c:d9:ff:db:0e:2a:b7:42:
                    92:42:82:fe:ae:0f:dd:3a:5a:91:f2:75:f9:b2:2e:
                    e3:d8:66:09:2e:1d:a0:90:25:6c:c4:c5:91:e8:5d:
                    69:92:f4:e3:6b:47:10:f6:52:3f:ba:9d:9a:a5:fd:
                    f6:70:38:28:36:4c:9d:8b:f3:cc:d7:e8:c8:be:26:
                    a5:e3:e7:80:5a:b0:59:41:c1:23:75:63:70:bf:2b:
                    08:5c:e9:26:8a:15:be:68:23:1d:58:57:1d:45:ae:
                    02:d6:d0:54:93:92:a5:ac:60:5b:8d:a9:6f:a9:22:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:D2:7F:B4:6E:04:17:E5:98:34:96:F0:50:AA:91:4E:F7:DC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d13f9f99-e597-3904-ba20-da0c91f2c353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.161.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:8c:e6:2e:82:bf:32:c6:4b:c8:85:b7:e0:54:b4:3d:82:
         01:3f:74:6d:50:c6:8c:4f:e2:c9:a5:e1:7b:58:f1:dc:cc:9c:
         c5:13:2d:41:cd:a2:67:94:dc:c8:61:6c:31:6c:47:6c:26:07:
         02:d2:bf:5c:16:7f:ac:8c:0e:73:69:5e:09:b6:43:07:09:f7:
         61:16:cc:1d:6c:85:9b:aa:4d:14:c8:76:65:f5:a8:ac:5f:9f:
         c4:cb:af:5f:7f:33:e1:3e:e6:1a:e0:cd:9a:5c:65:3a:fe:e9:
         09:d6:6a:8f:b3:99:e1:fa:e3:69:62:76:19:aa:53:33:2e:02:
         ef:b0:0c:8e:49:a1:74:af:0c:01:9a:f4:66:19:10:ba:01:48:
         41:f2:bb:ec:d1:fe:c9:95:39:e2:0c:56:bf:a8:ec:e6:33:d5:
         4f:09:81:bf:9d:96:92:b1:85:70:2e:30:0a:bb:98:9a:12:09:
         a5:21:e7:5c:0a:8c:21:05:66:41:b6:0c:08:15:4f:51:9f:64:
         d3:7e:d7:8d:51:92:c5:54:9d:73:f7:3f:20:0d:25:57:53:6a:
         89:4e:3d:b4:b9:95:90:0a:c2:1e:2b:f0:c5:f7:0c:bd:63:8e:
         9d:25:60:d3:38:4a:30:9d:ca:5f:89:c4:81:b1:15:95:9a:74:
         6a:f6:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:58 2025 by rpki-client