Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa
File:                     840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa (raw, json)
Hash identifier:          y0xwZgJV/69Oz4ok7ULskOqwBztVgYEbd7UA1w5Jd0U=
Subject key identifier:   BA:F3:34:77:23:45:28:44:31:3D:AE:7E:8B:C7:9C:C7:03:5B:26:C2
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584937D93C148BC76DE64A912600
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     393436
IP address blocks:        66.198.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3c:14:8b:c7:6d:e6:4a:91:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=30ef4854-ec29-46b5-81fe-1bc603116654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:84:a5:94:31:fd:ba:e2:4e:c6:48:44:15:
                    bb:72:aa:e7:6c:93:27:ba:09:a0:fb:b0:2c:06:cb:
                    90:a2:1d:eb:e8:e2:f9:72:75:2e:b1:1d:e3:5f:5c:
                    b2:eb:d8:e1:ba:ed:68:13:8f:d4:cd:cb:72:d8:a9:
                    6c:60:cc:33:ff:2e:97:b6:ab:e0:93:30:f2:e9:53:
                    ac:7f:fe:50:9a:a7:a3:9c:79:06:0c:9a:74:df:33:
                    cc:2d:f9:b1:d8:a8:4d:01:84:9c:c5:ee:2c:6d:48:
                    47:42:1f:8c:e1:08:94:4b:d0:87:3a:6b:83:90:58:
                    63:af:25:0c:85:cc:58:2f:0c:de:7f:af:a3:ef:c6:
                    c5:7e:ec:db:d9:aa:3b:dd:d0:1f:b9:57:2b:1f:63:
                    6c:76:54:7b:b0:01:58:fd:f6:00:5c:8e:29:ea:66:
                    97:f0:ba:74:39:2f:76:e1:09:63:88:eb:33:d8:d4:
                    d3:e1:2c:a2:0c:86:a6:15:84:53:95:9f:3e:dd:37:
                    05:b1:48:ac:16:8d:30:16:1c:cd:44:12:12:96:0c:
                    2a:3b:bd:62:41:10:09:59:0a:8b:3c:04:8e:f9:82:
                    5a:b0:e6:14:e3:6c:38:6b:76:c6:42:a6:35:37:bd:
                    9f:ac:9b:56:9e:17:4c:50:cd:16:77:1c:17:53:21:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:34:77:23:45:28:44:31:3D:AE:7E:8B:C7:9C:C7:03:5B:26:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/840a10da-20bf-3108-a4f3-0ac5dc1ea062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:79:d6:f4:42:f4:cd:39:39:c8:ac:85:0d:f7:be:3b:f5:
         a2:9e:dd:87:37:03:2f:21:3f:3e:d3:49:41:6c:0d:19:e8:3b:
         5a:0e:d2:98:fd:9a:10:21:6a:67:53:a5:7f:4d:0e:49:49:89:
         0a:d7:b5:93:17:76:30:54:c7:b2:b9:76:60:5d:db:59:4b:2c:
         d6:90:2f:5a:39:b3:cd:d5:6d:0a:ec:11:13:02:27:f0:77:ac:
         25:f3:36:28:c2:d9:8e:91:ed:f1:75:88:d6:6a:8d:76:71:8e:
         2a:34:c8:42:eb:fb:3a:6d:5f:56:ba:30:24:e0:ad:b7:d5:4f:
         50:5e:7f:0f:79:f9:23:06:ee:4e:40:d7:91:30:09:eb:a7:8e:
         ba:2a:78:c5:40:ee:b0:84:bb:c0:84:e7:97:91:de:ef:f5:75:
         59:d9:6f:22:73:b7:2d:b7:bd:b8:59:0c:61:4e:84:28:4f:a4:
         1f:6f:65:0e:9e:72:39:06:03:5b:7f:3b:d4:df:b8:31:1e:f9:
         8f:d6:0a:87:5c:9d:a5:f7:1c:aa:86:ea:23:ce:c1:b0:b5:4e:
         ed:91:32:22:9b:3f:5b:ed:08:06:7b:40:8f:23:dc:94:a4:51:
         b1:91:a6:9b:a3:9e:b2:9b:d3:b2:65:bc:6b:d5:3b:d7:da:93:
         f5:be:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:22 2025 by rpki-client