Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f037a158-16f2-361a-8db7-14ace1d91987.roa
File:                     f037a158-16f2-361a-8db7-14ace1d91987.roa (raw, json)
Hash identifier:          RLLDX93Dhz9aRN0eMkWw6l2uQjliRGqGkfsrJ9/CgZw=
Subject key identifier:   C9:60:00:97:4E:5D:56:23:E9:AA:ED:F1:0D:AB:B5:8C:A6:02:E4:D5
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285848424AD76ACECAA2DFA8E25080
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f037a158-16f2-361a-8db7-14ace1d91987.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     30059
IP address blocks:        66.161.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d7:6a:ce:ca:a2:df:a8:e2:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=15401492-f1f3-42a6-bbf5-2d6bc26a7fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8c:76:b5:21:49:d7:6b:55:57:b4:9d:dd:27:
                    7a:3f:53:1a:b4:a9:32:1f:04:f4:60:91:dd:2a:6a:
                    2f:40:18:57:fe:58:87:65:54:d5:c4:37:f7:e1:64:
                    f3:91:cb:45:13:5c:b2:ab:ff:eb:fe:9f:a6:75:3e:
                    63:53:57:75:94:a1:5f:4d:92:d9:70:2a:e4:bc:13:
                    5a:99:f2:d7:bc:c0:7c:b2:c7:85:f7:55:ba:4e:ed:
                    13:9e:aa:74:38:f3:f0:c9:1c:17:c8:75:19:f2:44:
                    b5:94:85:c9:ad:84:b9:81:1f:92:0d:76:c1:72:d6:
                    c7:58:b8:d3:92:3b:84:59:a5:dd:89:4f:eb:0d:7a:
                    a7:40:3d:45:5c:62:fd:d1:fc:dd:d1:d1:00:ec:23:
                    ba:a3:0f:db:76:69:3c:4f:cb:b4:b3:7d:6a:1f:89:
                    71:2c:27:cc:ea:68:b1:e3:4d:65:74:60:da:fb:ec:
                    5e:ea:9f:fd:f4:21:cd:ef:4c:aa:9a:4d:56:25:83:
                    f3:52:bd:df:62:dc:d3:f5:61:17:41:14:1c:ea:87:
                    7a:3d:15:54:c4:94:12:20:12:d3:70:25:8a:3b:78:
                    6a:eb:94:51:a3:17:a0:29:9a:9c:36:d6:03:78:06:
                    1c:52:1e:1a:cf:5e:f9:c1:1c:75:17:3e:0b:73:e2:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:00:97:4E:5D:56:23:E9:AA:ED:F1:0D:AB:B5:8C:A6:02:E4:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f037a158-16f2-361a-8db7-14ace1d91987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.161.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:64:0d:10:fb:ea:fa:1f:2b:68:bd:69:5e:f2:91:3b:f6:7a:
         cf:b3:c8:45:27:77:fe:47:1a:f6:d7:26:25:1d:97:c1:c5:2f:
         4b:3d:63:a4:79:58:8d:29:a2:cc:37:a5:da:d8:cc:1f:04:2c:
         38:66:4b:59:5c:f6:dc:27:4a:66:32:58:be:88:37:21:1c:4e:
         32:b5:4a:e0:db:98:f2:0a:de:d7:58:e1:2d:2f:98:03:28:15:
         6b:f6:48:71:a2:d9:fc:aa:97:19:4d:06:f8:52:05:3f:8d:2d:
         11:42:10:52:d5:4a:ae:8f:62:d2:54:c4:7e:e9:cd:d8:83:ae:
         17:6f:93:1b:99:8c:ac:0e:53:3d:56:7b:54:d5:a3:58:04:83:
         e2:3d:3c:69:ef:53:32:c0:74:b6:ad:0a:29:d9:2a:90:55:f5:
         a3:22:98:e6:50:59:1e:64:e7:84:7f:85:3d:22:4a:4f:c0:6f:
         1f:f3:a4:38:25:f5:b1:b1:9e:12:63:62:0c:98:e3:f9:44:54:
         54:b5:7c:23:f1:5e:69:41:a8:83:c1:34:6f:fb:45:e5:b0:5c:
         98:0c:76:82:dc:41:2e:98:07:86:1a:94:1a:7f:18:d9:26:9b:
         6a:66:15:c4:b1:b2:ed:cd:fb:b7:4e:bb:ac:ef:74:63:a0:1c:
         54:85:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:36 2025 by rpki-client