Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa
File:                     85bd442b-ff54-31da-8177-81f7c28bd362.roa (raw, json)
Hash identifier:          YW074bA8dYL613BJMyFgvopDZPBN/XNPx2Bg98pAm1M=
Subject key identifier:   64:4B:EF:07:C5:3F:D4:E7:CB:63:CC:18:51:5C:A6:49:FE:F3:F3:CF
Certificate issuer:       /CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
Certificate serial:       010D0C9F43285848CC7B87489347F267775C19B0
Authority key identifier: 0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        66.218.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:87:48:93:47:f2:67:77:5c:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=21cc4aa1-5652-4484-99be-79c5b3703f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:f1:57:bd:dd:d0:81:5b:c8:35:2f:c3:09:
                    4d:30:23:01:6c:28:4d:95:10:bc:fb:be:e0:68:bd:
                    a6:8e:90:78:21:72:ee:6d:57:22:3c:c4:35:21:a2:
                    2c:10:39:69:4d:1d:28:0b:3a:39:c0:3c:30:45:e1:
                    a5:b9:05:85:e0:2f:54:bd:66:d7:86:3c:5c:a6:cd:
                    54:0e:a7:11:da:ed:0b:c8:50:14:42:78:8c:98:82:
                    6d:89:86:c0:ae:3d:ad:bf:2b:b6:04:41:dc:6a:80:
                    9b:73:26:5f:2e:0c:e8:9d:af:e7:19:94:b5:8f:b4:
                    c5:09:a2:20:da:0f:bf:58:f0:6c:71:60:bc:fa:ed:
                    e0:75:1b:8f:b4:32:05:d8:62:ae:99:b3:e6:b9:c4:
                    69:de:1f:66:a2:6e:03:e2:0a:52:e0:b8:44:35:22:
                    56:9d:e0:21:ff:b5:d4:dc:8a:f1:fd:1d:06:9b:e2:
                    0c:e1:a5:dd:52:3f:0c:39:38:22:ba:3a:87:4c:7e:
                    c8:94:5c:34:ce:06:05:ae:b3:c8:98:4f:27:b9:fb:
                    62:b7:bb:f2:61:1a:88:22:57:85:50:c5:14:44:c0:
                    78:cc:18:c6:2e:a6:fc:6b:5d:50:15:8b:a7:be:86:
                    46:ab:f7:c2:6c:0f:e5:d0:68:a8:2b:8c:67:b0:fd:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4B:EF:07:C5:3F:D4:E7:CB:63:CC:18:51:5C:A6:49:FE:F3:F3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/85bd442b-ff54-31da-8177-81f7c28bd362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.crl

            X509v3 Authority Key Identifier:
                keyid:0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:54:3b:72:bb:0a:ca:55:34:e1:46:16:fb:d9:73:85:53:89:
         92:0d:e2:7c:4a:0a:1e:e6:19:07:7a:bb:33:c1:15:86:05:1d:
         a8:9d:b0:21:63:58:77:ec:2c:35:69:04:6f:19:1c:8d:32:7b:
         96:d9:db:d8:28:be:83:94:fa:1e:53:05:e6:d8:7e:c1:1d:0a:
         df:28:ff:b2:a0:ba:7a:8e:85:39:e3:fb:bc:73:95:d6:2e:0e:
         2a:e1:9e:1d:15:59:28:0e:91:ae:84:fa:48:cd:4f:bb:1f:9a:
         33:a5:8e:32:5e:bf:9e:f6:2e:7d:e4:85:91:0a:2d:e3:65:1d:
         ed:fb:4f:02:76:2d:74:c7:36:e6:41:bb:0d:75:74:a3:b1:9a:
         da:01:f6:52:33:73:0e:64:17:fb:70:1d:b8:eb:05:0d:8c:e1:
         8a:27:d8:da:77:60:52:b1:cc:ae:87:82:76:05:38:5d:87:9f:
         12:98:b4:bd:83:23:49:0b:2b:21:3b:af:a8:c0:95:e6:81:05:
         1c:3e:0b:81:e7:f6:07:7b:ea:76:f3:20:e2:61:bf:b7:17:99:
         79:29:d5:f6:03:6d:1f:04:78:cd:b2:c3:a7:39:b2:35:5c:7e:
         45:a9:a9:af:3e:87:05:5a:a3:a4:60:09:80:dd:84:95:0f:ac:
         5d:99:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:39 2025 by rpki-client