Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e7721b89-0dbf-3901-b075-a775eb3984a6.roa
File:                     e7721b89-0dbf-3901-b075-a775eb3984a6.roa (raw, json)
Hash identifier:          jtXivgvfZEdG/NXEmW3CW6NgZtnvgjA+8wFwlDldCYM=
Subject key identifier:   6E:BB:C0:91:A4:1C:F5:DB:23:E9:1C:EE:17:7C:A2:3B:FD:4E:BF:FA
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285848EF612F3E16D26F7E7934D680
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e7721b89-0dbf-3901-b075-a775eb3984a6.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     394437
IP address blocks:        66.60.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:2f:3e:16:d2:6f:7e:79:34:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=56f4f028-4907-40ca-9805-986f402b6866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:c7:c2:5a:4a:58:31:ac:52:b1:41:0d:3c:
                    4a:97:ef:85:58:5f:8d:c4:92:43:34:34:ba:0d:6e:
                    86:d6:90:d7:c9:9f:97:c4:c8:41:49:00:26:a1:41:
                    af:01:7c:ea:64:19:f7:09:a5:0b:44:39:ef:1a:e1:
                    76:75:5e:78:f7:f9:3c:d5:80:46:e9:18:36:34:60:
                    18:71:52:ed:27:57:f2:54:df:51:c9:a1:9e:68:4b:
                    6a:cf:02:d5:55:13:7d:5e:a6:21:aa:5b:41:6b:a7:
                    6d:25:c2:d9:cc:fd:d1:47:02:3c:26:60:83:1a:f9:
                    77:6a:0d:b9:3a:43:98:10:d3:8c:24:50:08:0d:c2:
                    ee:15:39:d8:3d:15:c1:86:65:a8:ac:d7:d0:de:18:
                    33:5e:40:5f:dc:31:e7:78:fe:b0:ab:33:d8:69:36:
                    ff:b1:67:ab:d5:9c:c3:cc:53:f6:f8:bb:b6:d7:d7:
                    b3:cd:b0:01:e1:be:3a:ac:34:ab:1e:5e:51:7e:ba:
                    74:66:7c:9e:62:bb:c5:bd:d5:18:0c:56:79:c0:aa:
                    b3:ef:e6:ba:19:bd:37:ff:7e:3f:75:a6:c0:4c:12:
                    a6:fd:3e:b2:b6:2e:59:0b:2e:7f:f6:4a:ae:1c:64:
                    cf:31:74:d8:13:ae:46:01:d3:da:06:9a:34:08:3d:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BB:C0:91:A4:1C:F5:DB:23:E9:1C:EE:17:7C:A2:3B:FD:4E:BF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e7721b89-0dbf-3901-b075-a775eb3984a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:8d:06:7c:86:44:75:be:fb:d9:3c:e6:ec:75:f8:54:e0:b3:
         60:55:fc:d0:83:0b:d0:f5:5a:1c:13:52:d3:1c:04:fd:b9:c0:
         d2:10:60:10:7a:3f:69:73:6a:e1:31:eb:45:d4:f1:e5:af:41:
         87:ce:e3:f3:60:6c:b4:9f:7d:d7:04:2c:60:d6:8c:21:34:e0:
         b8:ff:f1:a1:d4:10:f1:5e:02:b1:9f:4c:b1:9f:c7:22:39:55:
         5c:d0:d6:90:ae:01:77:72:16:bc:3a:be:27:a6:09:66:49:81:
         12:10:c5:9c:5c:0a:80:66:5a:88:1a:e4:6a:d9:8b:9b:be:f5:
         48:04:f5:d3:8b:b2:d5:80:ed:0a:88:dc:ef:f8:12:83:da:77:
         15:b4:fb:da:6d:ac:db:1a:09:19:44:10:5b:47:76:48:c3:d0:
         53:a8:7d:ec:e2:18:83:37:e5:d4:5f:75:a3:d4:1b:6a:ce:10:
         af:9d:03:7e:da:fc:fc:d4:f7:cb:ac:c3:be:20:ea:43:04:0d:
         0e:4e:77:41:e3:e0:0a:80:8d:37:09:09:62:c0:8d:6b:d5:d8:
         31:c1:74:ee:aa:60:e0:f6:01:2b:b3:84:1b:5d:84:17:7c:a4:
         40:5f:0a:83:7e:32:5b:0e:16:ef:21:9f:03:cf:fc:9c:19:ac:
         2a:ee:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:49:30 2025 by rpki-client