Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
File:                     7a58c066-a3a1-386d-87a0-7cb55812f128.roa (raw, json)
Hash identifier:          mStMuGPVLQ6895rmatjC4QqOHhJ+HNCsKuU6EhfGV50=
Subject key identifier:   F4:C5:97:A8:02:D9:CE:A8:41:30:68:B8:B8:C7:5E:61:B3:0A:E5:D3
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F432858488F107FFAF861E791DCE01410
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     15171
IP address blocks:        64.66.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:7f:fa:f8:61:e7:91:dc:e0:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=a1251f28-56cc-40a9-b6f6-545f4b1b2050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:89:bd:cf:e5:03:d3:59:cb:f3:33:b7:d5:
                    b3:00:36:05:1a:45:b7:07:95:1a:be:6e:08:cd:c3:
                    20:8c:6e:2f:4e:be:a5:d4:bc:4d:27:c0:b3:13:db:
                    3a:94:d7:d8:09:15:3a:d2:2a:3c:4a:9d:74:d3:af:
                    ec:16:1e:60:b1:6d:bd:00:fd:d6:47:42:bf:e0:e7:
                    67:9e:75:c8:ee:ee:78:9d:20:44:b8:44:6f:06:06:
                    00:d1:0a:9c:d7:e6:bc:fc:fb:4d:2a:63:39:68:76:
                    43:48:07:4e:0f:a4:76:41:34:d4:10:99:58:b3:72:
                    ac:cc:11:bc:4d:35:ce:c1:ff:fc:54:51:a3:e9:f1:
                    87:d4:a0:42:00:f0:8c:5f:1f:01:fe:fb:38:1d:27:
                    e8:b7:41:b3:1a:9a:ae:8e:d3:a8:2c:c8:45:e3:4e:
                    8a:56:4d:64:98:0e:24:6b:9b:b2:15:3b:75:f8:2b:
                    88:33:b8:a1:a9:d9:8c:b2:b4:83:ed:9a:6a:d9:da:
                    90:a5:59:a8:95:43:2b:47:dd:de:61:90:59:fa:3d:
                    97:dd:c3:a1:b2:84:ac:fe:31:0e:39:29:1a:91:18:
                    ec:df:d3:2f:8d:04:7e:4a:78:9c:9b:d3:47:6c:1a:
                    96:96:47:e5:57:45:44:2c:e9:7c:3e:37:18:97:1d:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C5:97:A8:02:D9:CE:A8:41:30:68:B8:B8:C7:5E:61:B3:0A:E5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/7a58c066-a3a1-386d-87a0-7cb55812f128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:66:9a:06:8b:26:55:4d:40:c3:6c:a5:dd:26:83:c8:af:3f:
         46:e9:d0:60:29:b0:dc:f4:2d:9a:cd:8d:08:50:14:6d:90:f3:
         88:c5:20:38:2f:9e:4b:3e:11:a9:a4:c5:25:39:0d:76:8d:88:
         f0:30:80:6a:f3:05:d6:69:c5:bf:26:de:fc:fc:16:b2:43:71:
         99:63:de:79:b2:af:a8:34:39:05:12:7d:0e:86:c8:3a:62:3e:
         80:3e:af:5f:26:d5:e2:88:f2:6e:dc:90:00:70:0d:24:92:30:
         74:ce:4f:f1:c9:85:3c:51:4e:67:9f:2b:16:34:ee:14:80:f8:
         b5:e0:76:26:15:57:ee:31:da:96:8c:9c:38:f9:c4:a0:ad:36:
         0c:49:2e:55:d3:36:0d:ec:db:f3:fc:4e:91:46:f5:ad:55:ed:
         ee:d8:3a:71:a6:87:69:5d:c9:41:74:3a:68:8b:87:90:a8:d3:
         39:04:62:91:84:05:ee:b3:60:99:d6:63:8c:a3:fe:47:70:e7:
         34:8a:f1:7e:93:e7:98:69:b8:f2:57:fb:22:94:4d:db:94:70:
         30:8d:d9:0e:47:42:17:7f:c0:44:64:1d:38:bf:06:01:e7:67:
         ac:f1:31:80:c0:9e:aa:a6:65:dd:53:90:07:08:06:4c:88:7a:
         68:c5:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:58 2025 by rpki-client