Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
File:                     e7f8b070-b54d-345a-99c3-6754564c0672.roa (raw, json)
Hash identifier:          oxu/lQ48HaufPKzuTpv0ELSzvYvRTF6Gua0zgi3aEHU=
Subject key identifier:   D6:A9:DF:47:95:06:3A:32:4E:0F:7C:05:46:80:F7:88:7D:9D:A7:AA
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F43285849244E887DFE345EFAEE9E43C0
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     8075
IP address blocks:        67.210.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:88:7d:fe:34:5e:fa:ee:9e:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=21374cc3-42d8-443d-a8b7-7905d720978d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:eb:8a:37:29:3a:11:42:08:c5:27:7f:f9:
                    ab:a2:2e:f2:ce:b2:8d:fa:f9:80:f2:a1:8f:d2:68:
                    dd:94:82:df:c7:74:ef:b5:8a:8e:6d:8a:ec:76:02:
                    49:1e:59:d0:e4:2d:68:1d:c3:9d:4f:33:16:86:c7:
                    15:3b:f6:6b:60:0c:43:7c:f9:d2:88:4a:1c:a9:22:
                    84:4b:b5:9c:66:aa:63:e4:7f:30:45:74:06:0d:a4:
                    3e:de:67:01:5c:dd:d1:f5:7e:6d:b0:da:e9:2b:9e:
                    a4:ff:c2:e6:49:2c:99:c1:c4:c2:23:d9:d7:fc:dc:
                    7f:eb:fb:ab:a3:8b:d1:25:de:88:9f:cb:ce:f0:15:
                    26:04:24:12:33:26:b3:c8:b5:bd:2c:d6:32:92:64:
                    01:2b:0b:10:bc:26:0b:be:a7:47:5c:c3:b0:70:b2:
                    80:d5:03:d2:ba:fc:c0:0f:5a:03:f4:0e:96:2e:5a:
                    47:a7:f6:ad:53:53:64:6e:bf:42:dd:63:3f:90:0c:
                    34:e7:34:e4:1b:91:80:0d:e8:64:9a:08:07:91:f9:
                    9e:5d:82:13:dd:4c:77:b4:51:65:11:b0:25:63:4c:
                    c2:d4:78:65:13:64:ef:ad:4a:cf:23:f6:3a:41:4b:
                    fd:e0:67:bb:2d:21:f9:16:30:78:66:7c:07:f9:35:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A9:DF:47:95:06:3A:32:4E:0F:7C:05:46:80:F7:88:7D:9D:A7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:51:09:5e:f3:ab:e6:70:63:e0:56:48:31:e3:46:29:ed:df:
         26:09:89:81:ea:1a:c9:21:c9:3e:37:79:66:2e:bd:7f:53:c5:
         4f:9c:f5:5a:60:da:66:77:a7:4a:87:66:ba:43:1c:05:a6:da:
         db:d5:a3:f7:20:f3:e4:ed:63:4c:d0:60:c1:86:52:f4:ad:f5:
         18:6f:e0:60:cc:4e:c1:ca:a3:a9:cc:a4:eb:63:46:82:22:e4:
         a5:8a:ff:51:d3:c2:6b:ab:f4:37:59:c6:f7:24:a1:20:7c:4f:
         a2:f2:2d:0f:c6:48:d3:8b:7e:54:12:4e:22:91:26:54:09:42:
         d7:cb:0e:49:8e:92:15:a2:04:e9:ab:4f:77:28:2f:d4:2f:db:
         f0:35:5d:bd:0a:91:91:17:13:fb:f9:ff:d8:c1:3a:07:a4:57:
         a0:5f:98:ca:ad:3e:71:1d:50:b4:45:56:9a:b0:84:55:44:ef:
         de:12:4e:ea:07:f0:19:14:02:28:78:a3:9b:45:f2:a8:cd:6e:
         38:87:4f:e4:09:2e:c2:ab:77:9a:81:0b:62:73:d5:d7:f0:78:
         48:5a:b9:e6:a8:54:77:01:80:4a:be:6c:2a:3f:ea:c0:8a:5f:
         fd:31:36:f6:ad:75:38:2a:1c:f4:07:01:96:3e:d8:a3:32:c3:
         f2:a3:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:14 2025 by rpki-client