Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/074106b6-d991-3a13-8bef-58899c6b1b5a.roa
File:                     074106b6-d991-3a13-8bef-58899c6b1b5a.roa (raw, json)
Hash identifier:          6VISAVrueOmskFKD79a5A1YFZUAacFYhi2S18zF0JLU=
Subject key identifier:   C2:B8:52:7D:01:34:D9:5C:FF:6E:98:31:4B:91:CF:F1:49:EB:AB:9F
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848F22C655E19E03B174E7D3C80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/074106b6-d991-3a13-8bef-58899c6b1b5a.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        66.110.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:65:5e:19:e0:3b:17:4e:7d:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=28ff5dd5-ec0b-4fef-a831-445be777f989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:55:ea:8e:67:98:9a:5d:e1:5d:48:b4:f0:
                    de:d6:e1:f1:bb:7f:cd:8f:a9:e3:21:29:d1:f4:d7:
                    22:a3:f0:bf:27:a0:0f:65:08:f7:5a:fe:71:78:f4:
                    7e:d9:0f:a4:31:1c:f2:39:0e:19:73:01:c9:15:2b:
                    c6:21:3d:46:2e:0b:cf:e0:45:16:ef:2a:c7:52:47:
                    7f:b3:70:ec:cb:b5:6a:f6:f9:62:b4:ca:0e:94:da:
                    12:c4:b8:94:d0:c4:88:a0:9e:a6:f9:af:5a:85:d3:
                    1c:85:d7:ae:e9:fe:50:61:85:10:bb:a1:a8:b0:2b:
                    e6:39:3a:b9:0f:bd:05:e7:6d:b8:f6:0e:58:cc:bb:
                    23:97:c8:c0:56:04:bc:23:b9:56:fa:e5:16:ea:f0:
                    36:6a:be:bb:d6:89:2a:f1:23:ff:21:71:cc:66:fe:
                    b5:17:a6:2e:69:42:20:e9:03:09:a8:0b:62:15:96:
                    b4:5b:cd:fb:82:12:6b:85:f4:9a:65:92:01:43:63:
                    90:86:d9:c5:49:21:c3:90:03:69:a6:4d:93:37:22:
                    05:7f:f4:0a:91:83:b6:c6:ef:a0:82:91:5c:97:43:
                    33:a5:1d:10:f5:7c:80:ad:80:12:41:0d:3e:98:75:
                    f9:1a:52:70:5c:51:34:3c:06:83:31:42:fb:fd:f7:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B8:52:7D:01:34:D9:5C:FF:6E:98:31:4B:91:CF:F1:49:EB:AB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/074106b6-d991-3a13-8bef-58899c6b1b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:f2:fe:0a:13:98:a3:ab:d5:40:92:16:e2:46:5a:78:4d:
         ff:d2:d7:b6:81:fb:46:42:37:5a:f4:5c:6d:e3:98:bd:af:46:
         93:84:6e:e3:02:b9:ba:87:1f:28:0d:ae:bb:0b:3c:03:b9:e4:
         79:26:1a:a2:70:2b:5a:9e:29:4b:52:83:06:60:f4:f7:e0:da:
         e5:1a:c9:4b:fb:6e:86:6b:84:75:a8:61:4b:fe:f2:39:5a:72:
         02:7f:bb:b1:a8:b2:3c:84:d4:c2:76:6e:5b:3c:cb:2d:23:08:
         4a:da:d2:b7:35:c9:b9:9a:8d:9c:b5:b2:4f:a0:5a:67:dc:0a:
         57:2b:c7:6b:2b:00:67:81:81:ab:0f:ee:6c:0e:b0:84:83:a6:
         c8:1d:da:a0:48:ce:74:51:34:79:fe:3a:f7:44:ee:bf:44:2f:
         06:45:6a:43:dc:b8:68:4f:0d:8f:c8:ee:2d:84:a8:91:82:35:
         80:35:c8:bb:17:5c:49:f6:bc:ea:54:e6:15:d0:a7:a4:ca:36:
         d4:8d:71:79:b2:6a:d8:69:8d:a6:c3:5f:92:a6:a3:cb:26:67:
         0b:a8:0d:f7:78:3a:27:44:f3:97:d9:1c:0d:03:fa:92:18:e3:
         03:f5:57:bd:62:70:4a:3a:cc:ae:d5:34:a4:ab:ca:aa:5c:81:
         be:dc:77:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:28:38 2025 by rpki-client