Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/7f895766-1f63-3d26-a931-dac291fc94f1.roa
File:                     7f895766-1f63-3d26-a931-dac291fc94f1.roa (raw, json)
Hash identifier:          KESVuwK5rCeuTBehtEr6m35sNvdkenTNDpPjKxnFHsQ=
Subject key identifier:   F4:02:F8:13:93:7A:37:EB:D3:AB:B0:DC:78:83:31:F9:E4:59:56:0B
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848159FD8DF1C8CA885C9243500
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/7f895766-1f63-3d26-a931-dac291fc94f1.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16904
IP address blocks:        66.242.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:d8:df:1c:8c:a8:85:c9:24:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=7f1d2f6f-8ba5-4c86-b6c6-1fcc52a61e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:96:cd:8e:3a:dd:4a:ab:6e:a6:99:31:35:
                    a7:62:db:e4:32:ce:d8:03:70:2e:9b:fb:c2:22:18:
                    08:22:6f:a8:1f:24:d5:fa:7e:7e:c1:c7:57:ae:e8:
                    de:50:23:24:83:d3:8e:5d:46:33:ea:c8:e1:3b:30:
                    c8:49:e5:6e:a6:4e:2e:70:33:53:09:83:dd:c9:b5:
                    68:ce:a5:42:d7:27:fc:cc:bc:dd:0b:25:c4:88:12:
                    8e:17:d2:5e:46:ed:1d:3e:7d:3b:87:a8:d4:48:59:
                    f1:25:7e:e3:5e:de:94:09:31:2e:c8:53:cc:a0:17:
                    ba:0a:22:18:0a:1c:79:5b:ca:cd:91:38:9a:81:f1:
                    c3:e0:06:4c:fe:6b:45:1d:50:8b:4c:1b:94:93:ba:
                    53:aa:ba:fc:f6:fc:30:be:1d:44:72:e7:95:ec:62:
                    f6:dc:f1:09:52:43:50:2d:99:a7:54:77:b4:f6:07:
                    94:46:b0:51:c2:43:a4:f2:d8:cb:a4:13:49:34:3b:
                    b4:ce:86:d8:b6:a5:b4:3c:05:93:c3:66:8c:9d:2b:
                    a2:fd:ec:ae:33:39:78:73:54:5a:64:73:d8:3b:23:
                    67:c1:a5:0c:d0:8b:7f:31:40:0d:f3:6b:d5:b7:08:
                    dc:c1:8e:30:b0:e2:d3:0d:1b:ca:3e:5a:6c:c1:73:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:02:F8:13:93:7A:37:EB:D3:AB:B0:DC:78:83:31:F9:E4:59:56:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/7f895766-1f63-3d26-a931-dac291fc94f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:11:11:42:d1:03:94:ec:3f:7a:4d:26:b7:0e:98:b2:65:
         da:69:09:c1:e3:be:bc:e9:d0:b1:84:67:d4:10:ec:80:99:ed:
         4b:6d:60:44:9f:f6:a6:8c:e7:b1:06:05:0a:47:40:58:d9:20:
         ca:59:2c:3c:e5:00:85:12:76:3e:db:a9:1f:7c:97:9e:02:79:
         fd:d3:2a:e5:cd:1d:9a:2f:e2:03:47:db:c6:2c:81:07:5e:27:
         92:93:a3:aa:fe:4f:03:f0:1e:cb:87:94:e5:a5:03:57:46:0d:
         7e:3b:f0:e0:3d:09:45:48:f8:f3:9f:ab:f0:98:0d:67:4f:83:
         8d:0e:b9:4f:14:6b:f5:72:62:06:37:92:82:5a:6e:61:d4:48:
         f4:14:73:7a:5d:2a:3c:33:39:3d:7a:c1:cd:a6:a8:d4:ea:68:
         43:be:eb:63:82:9f:4d:13:06:87:fc:96:77:2c:0f:df:23:64:
         8b:84:9b:25:b3:65:10:24:21:97:6a:72:ce:e4:2d:7c:7f:c3:
         fc:46:83:4f:70:10:28:a9:25:01:18:bf:d3:ae:5c:ea:a7:a2:
         cc:20:80:af:68:01:3f:04:07:e5:04:62:46:dd:15:6d:84:df:
         27:4a:05:59:9e:98:77:b7:76:2e:30:75:ab:dc:c4:2b:8d:41:
         cd:9f:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:31 2025 by rpki-client