Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
File:                     f05bddbd-66de-36a2-be24-ae30e4826c09.roa (raw, json)
Hash identifier:          C/ZOl7A39RvHVPkhNDF7OWLK6soq3A944yChc9Ts/ec=
Subject key identifier:   6C:D2:32:27:EC:72:39:4E:52:2A:37:76:3F:16:70:00:54:AF:20:17
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F432858492E13C6E1A79018C9CF685A40
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     1742
IP address blocks:        192.5.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c6:e1:a7:90:18:c9:cf:68:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=a5b6cf11-2fca-4ac6-9cc7-bf47a94b3ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:e0:56:a2:e8:59:5f:c3:f6:b8:37:13:43:
                    32:ef:63:78:91:c9:7b:bb:df:19:e0:f2:35:e7:26:
                    f1:95:6a:30:33:25:b7:48:55:c7:15:17:a4:62:97:
                    9e:ec:cb:a3:58:b5:1c:1a:71:e7:0a:de:e3:27:b7:
                    9e:45:d6:86:ff:d5:f5:27:02:5a:e1:ee:8c:3e:49:
                    a0:e3:b6:1b:5e:b6:72:37:0e:97:e6:9d:aa:59:9f:
                    b7:bd:63:5d:3f:b3:60:00:05:1c:c2:0f:ed:53:d7:
                    69:4f:02:b2:4a:87:0f:03:0d:0d:2a:b1:c3:83:0e:
                    b0:dc:53:e4:54:d7:31:f9:74:24:e7:6c:87:4b:d3:
                    45:24:a2:26:32:e9:ea:85:04:c1:6a:4e:56:5b:9d:
                    ea:d1:87:02:8d:a8:7a:28:0d:b6:62:f3:0d:fa:9b:
                    e9:06:99:5e:41:b4:34:69:24:e7:42:62:5c:52:2e:
                    be:57:74:07:cf:ba:41:78:53:77:6f:c7:8b:07:2b:
                    76:e5:4f:71:db:66:da:6a:a2:59:a3:00:e0:22:35:
                    c3:f4:59:ad:77:72:c6:e6:2f:f5:7f:f0:6a:e5:1f:
                    57:2a:af:41:12:2c:d4:91:cc:5d:ad:2d:e4:61:f5:
                    fc:85:12:2e:57:ed:20:3f:32:c0:eb:7b:61:d3:1d:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:32:27:EC:72:39:4E:52:2A:37:76:3F:16:70:00:54:AF:20:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f05bddbd-66de-36a2-be24-ae30e4826c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:91:bb:3e:ef:6f:b9:f6:73:12:b7:4a:5f:33:4e:78:26:
         7f:41:be:0d:ee:1c:ef:88:b2:dd:06:50:50:0c:7c:b0:b4:5a:
         25:3d:60:2a:83:7b:79:d5:ad:dd:40:ad:09:07:4f:81:9f:d1:
         88:ea:db:83:2a:f0:dc:64:62:b1:60:47:85:72:22:4c:3a:5a:
         76:d9:d2:3a:b0:94:c4:26:5d:bb:38:22:4f:7a:20:7b:02:c3:
         bb:85:32:59:32:df:cc:c5:58:4b:4d:19:1f:3c:ea:73:4c:93:
         ca:4b:89:40:69:d2:0b:64:37:ad:12:d0:4b:00:e9:31:b8:6c:
         f2:37:1e:74:35:3e:83:67:fb:74:af:be:39:08:bb:2d:93:d1:
         85:33:68:b9:6c:88:4a:4d:1f:7b:83:f0:05:fa:e8:f4:de:f9:
         19:c5:27:c8:4f:ec:8d:9c:9b:4e:bb:0c:d1:da:e4:40:d7:74:
         45:c4:47:0c:1e:47:cf:52:c0:fc:b7:53:51:9a:c7:c5:64:c3:
         e8:ba:e3:6c:97:44:e1:aa:b0:a1:bc:0a:aa:4f:05:52:84:8a:
         c0:3e:00:24:56:3d:95:10:04:5b:af:c4:f9:22:4f:b8:ed:6c:
         9a:5b:90:84:ea:33:4f:b0:0c:74:79:78:9d:b7:46:08:ab:17:
         cb:ad:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:46 2025 by rpki-client