Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/7674d537-0001-384e-94b7-026faa07d2c8.roa
File:                     7674d537-0001-384e-94b7-026faa07d2c8.roa (raw, json)
Hash identifier:          vCNLD9TuTkyRJW7l1QOfEeet/O3CiP5Ll1NsOPdqVto=
Subject key identifier:   2D:3B:51:BD:B7:F8:91:D6:26:B2:FF:B9:36:08:E8:32:37:EC:00:2F
Certificate issuer:       /CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
Certificate serial:       010D0C9F43285848D4DB9212BBD4AEA7A9B49DB0
Authority key identifier: 62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/7674d537-0001-384e-94b7-026faa07d2c8.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     1100
IP address blocks:        66.179.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:92:12:bb:d4:ae:a7:a9:b4:9d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8104549-f98b-40af-9dbc-4a8cad0f59fd
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=7679569e-e320-4e44-b45e-d5f898ace7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:08:ff:72:48:7c:33:3c:6f:3e:bc:1a:bb:
                    28:d2:ad:0b:e0:95:c5:89:07:b9:b4:64:74:2d:70:
                    0b:dc:4a:2c:49:52:72:1b:3c:d8:15:0c:36:e0:21:
                    e3:d9:9d:69:fd:60:ea:32:d0:a2:85:78:00:c1:9c:
                    18:ea:19:62:a7:78:ab:f8:3d:2e:95:24:7a:ad:4d:
                    08:c8:b3:c6:72:f7:38:95:e2:85:40:b0:b7:0a:ba:
                    44:34:6c:05:6c:8f:ab:79:21:07:fd:92:75:a0:f0:
                    bb:6f:f3:a0:45:e2:01:9d:d3:6f:7b:c8:76:8f:9c:
                    53:26:5d:6b:a7:6a:d0:89:9f:0c:5b:4a:ca:4e:24:
                    44:d9:13:aa:da:ec:12:63:c7:90:dc:9d:69:cd:2c:
                    8b:dc:05:bc:a6:05:37:19:63:13:51:fe:73:60:05:
                    eb:74:83:a7:3e:fa:a5:be:4f:1c:7d:6e:03:2d:4c:
                    93:1e:79:1f:dc:9c:72:cf:45:4b:70:77:37:ac:30:
                    f2:f4:a2:69:3d:3f:0c:da:94:08:59:47:24:d0:2d:
                    33:3c:77:2e:99:c3:fc:20:cb:f1:40:d6:3c:25:50:
                    95:27:5f:79:33:23:4c:e8:f2:34:8e:19:42:87:f3:
                    a8:a1:6e:c9:c2:3d:00:7e:f5:c7:e8:75:c1:a2:67:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3B:51:BD:B7:F8:91:D6:26:B2:FF:B9:36:08:E8:32:37:EC:00:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/7674d537-0001-384e-94b7-026faa07d2c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd/e8104549-f98b-40af-9dbc-4a8cad0f59fd.crl

            X509v3 Authority Key Identifier:
                keyid:62:7A:A3:A6:16:CD:B9:44:48:B2:3E:CB:73:53:FF:61:77:12:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e8104549-f98b-40af-9dbc-4a8cad0f59fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:d4:08:d3:24:45:46:57:d8:a8:ca:80:92:99:f1:a4:95:
         c6:58:3d:c8:47:f5:d8:71:1f:b0:dc:7e:46:07:f9:87:38:f4:
         55:7c:19:b7:90:e4:e4:fd:03:89:98:56:6b:7b:3c:f6:d3:e4:
         ac:6d:6e:fe:65:2d:a6:58:55:ea:c3:e7:22:4e:b3:a6:ae:af:
         28:03:22:d5:47:e9:5c:85:e6:b6:50:f9:19:ef:bf:a3:29:96:
         9b:62:fe:d4:24:0a:43:46:05:52:89:de:e8:d7:57:ac:95:fa:
         c6:8b:41:73:06:c1:c9:e6:4b:4c:a6:fa:67:d6:85:f2:df:44:
         ed:25:9b:2c:17:4b:f1:51:10:95:93:1f:37:55:fc:36:0e:11:
         8d:a6:3c:1e:31:b8:80:d5:52:24:13:1d:d5:75:c1:cb:e5:ef:
         fc:0e:df:18:c3:1d:64:bb:a7:36:00:e1:2e:d9:21:8e:b1:63:
         86:e8:72:d3:71:c8:32:ca:38:e4:ba:0a:87:74:72:72:f9:66:
         09:8e:e6:0c:c5:c6:ec:7a:58:ba:2c:6c:34:34:78:d6:0d:a9:
         fc:b2:3b:36:5f:6e:da:62:2b:f1:c5:22:fc:d1:76:c4:eb:ac:
         58:87:6a:93:39:3b:5f:7f:ae:b8:ff:8e:53:84:0f:43:ed:29:
         b5:1d:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:21:59 2025 by rpki-client