Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd/127f7ded-bc3c-34b6-bd6e-39021cada679.roa
File:                     127f7ded-bc3c-34b6-bd6e-39021cada679.roa (raw, json)
Hash identifier:          oZ3gGXzXmdWlpEBH+IPFMC1ZL9morx7ZPYGXLSImcVw=
Subject key identifier:   83:0B:68:31:F2:AC:5E:78:F4:61:DA:0D:C6:EE:4B:6A:2A:39:B8:22
Certificate issuer:       /CN=eefcf46c-d529-418c-ba4e-cade6f43a2bd
Certificate serial:       010D0C9F4328584905B6B2F6551A72FA13E903C0
Authority key identifier: F7:23:8A:9D:C7:1E:F7:20:0C:3E:3E:69:26:2D:FD:AA:1C:57:9B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd/127f7ded-bc3c-34b6-bd6e-39021cada679.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     19934
IP address blocks:        66.179.86.0/24 maxlen: 24
                          66.179.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd/eefcf46c-d529-418c-ba4e-cade6f43a2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd/eefcf46c-d529-418c-ba4e-cade6f43a2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b2:f6:55:1a:72:fa:13:e9:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefcf46c-d529-418c-ba4e-cade6f43a2bd
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=76a63360-ba10-4a46-b8d1-7294967002a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:63:57:b9:65:41:49:b6:99:d3:5a:40:6c:
                    ce:ff:4b:fd:fa:7f:29:b7:fb:1a:50:bb:de:4e:0b:
                    d6:19:dc:95:11:01:5d:7b:57:88:cb:ae:7d:4a:ee:
                    f4:e3:c3:98:fc:2d:a3:84:a2:7c:ed:ed:3b:b1:88:
                    a1:41:68:4c:64:cc:a0:9e:1d:b4:b6:37:96:9c:b0:
                    54:93:e0:bf:85:ec:0e:71:8d:7a:f5:96:0d:66:48:
                    e9:ca:f8:a7:fd:79:d6:e4:81:a3:12:c9:8f:d2:81:
                    90:c3:79:95:af:1d:fd:de:4f:53:17:02:78:e9:87:
                    78:8f:19:d2:c6:8a:da:71:e4:2f:63:09:81:a1:52:
                    3f:68:59:05:1f:18:28:a7:ed:a3:b4:0e:cf:88:68:
                    d8:34:36:75:48:12:06:50:d7:c4:ac:98:57:7d:1e:
                    9a:ff:30:67:bf:b7:b0:0f:8f:18:27:b1:27:18:02:
                    e8:97:62:9f:d6:d6:ae:2c:0b:5b:d5:ca:c0:ca:38:
                    f7:33:f4:2f:39:b7:d1:5c:ad:11:68:c1:e2:98:07:
                    9b:6d:5c:a4:3a:02:70:0a:3d:a9:19:a2:44:ec:14:
                    4c:c3:eb:bf:9e:1f:f9:ea:57:6f:24:e6:c5:a5:1c:
                    d1:ef:88:e9:f4:e6:7d:04:a3:76:85:fd:fe:47:88:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0B:68:31:F2:AC:5E:78:F4:61:DA:0D:C6:EE:4B:6A:2A:39:B8:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd/127f7ded-bc3c-34b6-bd6e-39021cada679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd/eefcf46c-d529-418c-ba4e-cade6f43a2bd.crl

            X509v3 Authority Key Identifier:
                keyid:F7:23:8A:9D:C7:1E:F7:20:0C:3E:3E:69:26:2D:FD:AA:1C:57:9B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eefcf46c-d529-418c-ba4e-cade6f43a2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c8:72:1e:75:d6:98:66:97:ca:88:e3:01:f1:94:23:c1:77:
         1b:cb:ed:e2:8b:80:be:23:02:39:c4:5b:b0:99:8f:c6:f2:8b:
         01:d9:27:e8:64:76:9a:40:c9:8e:05:b0:84:82:96:df:a2:95:
         13:1f:a8:59:93:68:51:bc:e4:45:1f:37:79:c1:ee:04:3d:48:
         23:a3:19:83:79:37:55:f4:9c:ce:e6:94:b2:00:0a:d0:4d:d8:
         e6:05:0c:b4:81:79:48:60:4d:34:89:75:ed:9f:dd:dc:2c:39:
         7b:ad:26:23:79:18:98:cc:79:09:03:83:a7:d5:59:6b:52:2e:
         c0:d8:48:94:6a:90:43:e1:b4:3c:49:cf:2c:29:3a:e7:22:b8:
         c5:cd:72:94:21:6b:0c:cb:4c:31:e0:26:77:82:2e:bf:bf:51:
         9d:c5:92:5f:3c:08:33:3d:18:18:d0:af:9c:ca:06:5d:ac:84:
         40:fa:09:64:bb:12:80:43:62:fa:a8:94:0a:93:42:d3:a3:18:
         b0:38:83:ad:4a:28:61:85:54:8e:b9:cb:cb:b2:93:b4:42:aa:
         f9:e3:a8:84:ef:33:e0:ab:6a:43:ce:13:71:73:11:56:33:22:
         ff:62:20:5f:17:b3:53:be:32:8e:8c:5c:8a:af:6a:af:5e:3d:
         30:de:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:04:03 2025 by rpki-client