Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa
File:                     5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa (raw, json)
Hash identifier:          4vkPvZBVnoI/ZK7WUoYd1qpR7shJYb7XkwhisLOVR/g=
Subject key identifier:   02:DC:7A:62:BE:1B:13:78:C0:A4:F9:D5:B9:8F:22:F2:58:5D:42:EA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848CF4635C23296B0F838F16280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa
Signing time:             Sat 08 Feb 2025 02:00:38 +0000
ROA not before:           Sat 08 Feb 2025 02:00:38 +0000
ROA not after:            Fri 09 May 2025 01:00:38 +0000
asID:                     397630
IP address blocks:        66.146.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cf:46:35:c2:32:96:b0:f8:38:f1:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  8 02:00:38 2025 GMT
            Not After : May  9 01:00:38 2025 GMT
        Subject: CN=b41a596f-1b94-4253-8149-6cafe4c91b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:da:40:72:37:cb:a5:81:23:40:c7:d5:a3:94:
                    ac:3f:2e:37:53:34:02:f3:cc:f4:c8:b9:b7:ee:92:
                    f3:df:45:31:e1:f8:ff:2e:ca:60:df:b1:b2:29:1a:
                    c7:21:58:7d:10:ff:35:01:cc:2e:60:dc:a0:68:59:
                    5b:6a:ee:05:f7:33:be:46:f1:70:f7:72:5d:fb:9d:
                    99:25:c9:e9:d1:61:ff:29:19:6e:b2:86:14:38:b3:
                    e9:72:c7:47:68:24:e5:ac:72:db:35:ce:4f:e9:29:
                    bf:27:b0:9a:4e:e4:f1:53:b4:ef:79:dd:e4:f4:78:
                    7d:50:ae:7e:f9:46:a2:44:cc:10:79:26:7c:62:63:
                    c1:69:bb:39:6a:be:f4:7c:38:94:03:37:6c:eb:86:
                    9a:ef:ee:b4:7f:b6:98:b7:cb:1d:18:a0:74:99:b7:
                    de:c2:be:7a:ea:66:1f:07:e3:d0:3b:65:cb:24:02:
                    4a:4c:89:a1:12:73:e7:42:d1:fd:a3:1a:e8:30:93:
                    e6:af:c9:04:86:de:eb:b3:f6:41:dd:34:4b:d6:35:
                    27:cc:1d:e8:76:23:61:67:4e:0d:dd:08:58:2e:f1:
                    ae:fa:ea:e4:2a:0a:09:86:5a:13:a8:f8:85:71:df:
                    50:b6:08:95:44:34:95:77:d8:71:ae:f8:ba:a1:69:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DC:7A:62:BE:1B:13:78:C0:A4:F9:D5:B9:8F:22:F2:58:5D:42:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5025f2dc-def6-3e17-b7c9-cd03f628f8a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:6f:83:b8:74:8a:7d:5e:a0:bd:92:42:8c:0f:70:27:83:1a:
         07:4c:7c:6c:bb:eb:ac:5b:4a:df:6f:8d:7e:5b:eb:0b:80:6b:
         98:69:1a:ee:8a:d1:6e:8b:b0:29:a6:26:cb:07:6a:93:21:4b:
         fd:ba:82:1e:dc:6d:c1:c0:01:f9:5b:87:cb:de:e5:be:ec:6e:
         64:e6:07:fb:d1:3d:60:a2:e1:03:d3:20:7b:38:b1:59:d5:29:
         13:82:cf:97:23:43:3c:7c:90:46:5d:58:df:6d:eb:2d:11:c0:
         bc:e6:29:4b:cf:2f:22:25:d0:d0:68:5b:cd:ce:82:8a:62:d5:
         4c:40:85:36:ee:2c:11:51:fe:28:b1:ef:2e:0c:0a:4f:0a:0c:
         3b:0e:91:d1:5f:ba:6e:f7:cc:29:b3:33:4a:7c:f6:3f:0b:2f:
         67:cd:d3:92:0e:f0:11:ab:1c:46:ab:15:89:78:78:80:b8:1c:
         1a:02:84:61:74:6e:9b:3b:df:dd:1f:61:38:69:9a:40:bc:19:
         8a:25:c4:81:cc:b5:37:d9:8d:a2:fc:88:e1:2e:18:e1:6f:9f:
         81:4b:79:dc:3e:e7:38:49:98:62:7b:b3:72:fb:99:30:94:49:
         0c:c8:79:4b:f7:b3:07:5c:cc:71:21:2e:28:10:63:67:53:cc:
         1f:0b:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:57 2025 by rpki-client