Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a30c5a5-1d9c-3494-8ea6-0d0d3c3d5dff.roa
File:                     1a30c5a5-1d9c-3494-8ea6-0d0d3c3d5dff.roa (raw, json)
Hash identifier:          AFhe2Snnlsn75V87rBujllu1MFuVbpO/L1ll+riwtq4=
Subject key identifier:   E0:65:31:36:02:FD:ED:8C:AF:EB:5F:68:9F:4E:4A:42:7F:FC:D2:58
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBCA875CB49BBFECA32580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a30c5a5-1d9c-3494-8ea6-0d0d3c3d5dff.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        104.196.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:ca:87:5c:b4:9b:bf:ec:a3:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=54122c2a-8796-4073-b81f-8bd701f256ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:c3:dd:ff:fe:67:74:8f:ed:70:7b:63:50:
                    4c:a1:ae:68:21:38:7c:3c:13:e9:06:1b:48:5c:35:
                    db:4f:c2:91:77:e0:3a:9d:64:69:31:80:90:93:02:
                    2b:90:02:1a:54:26:04:92:cb:14:d6:e4:af:69:50:
                    6d:92:64:42:6a:94:e6:b2:f4:d7:f3:aa:42:a2:74:
                    78:c8:9a:0c:e9:81:3b:d7:16:48:4e:7e:6e:62:a7:
                    a6:96:84:df:1f:60:08:ca:5f:7a:ab:a1:c5:42:70:
                    d0:39:f8:24:e5:c3:10:70:05:4f:de:22:7d:3f:0f:
                    ff:11:a5:f6:21:93:96:de:6e:b0:5d:71:be:36:3c:
                    b1:3b:0e:ea:46:14:86:d5:a6:cf:aa:6b:a6:f6:15:
                    ea:4a:12:86:19:a7:ac:f3:50:a2:9f:e4:ef:00:c9:
                    82:54:7d:d0:6e:04:ef:22:5f:77:67:18:e9:81:f1:
                    e3:4a:99:06:56:c8:7c:40:55:37:3e:9b:58:1c:30:
                    e5:f3:f6:29:c1:f7:94:03:1b:a3:23:90:c0:d9:fd:
                    c3:1b:92:6e:59:43:73:1e:c0:a8:1b:15:09:43:f3:
                    1c:95:de:49:0d:04:ff:15:dd:0a:34:d9:a0:24:57:
                    23:0f:b4:29:06:58:83:54:90:3f:16:b9:34:e7:be:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:65:31:36:02:FD:ED:8C:AF:EB:5F:68:9F:4E:4A:42:7F:FC:D2:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a30c5a5-1d9c-3494-8ea6-0d0d3c3d5dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:72:24:29:94:c6:f0:2d:2b:7d:0e:ce:9c:80:72:9b:80:
         a6:41:4a:b1:ee:51:f9:70:34:cf:61:60:0c:e2:4a:24:6f:27:
         68:77:b1:51:b8:b5:ff:7e:60:d7:29:84:61:3e:db:35:6d:64:
         b5:58:fc:18:a6:fc:de:cc:0b:fc:b9:d4:61:8c:91:09:83:1b:
         b8:63:fc:b5:f7:90:bf:db:dd:6a:28:eb:ad:e0:e2:7b:1b:7e:
         14:8a:65:00:2c:66:7c:bd:9e:15:44:0e:41:9c:78:21:31:84:
         1d:2f:c5:03:e4:69:bc:3f:7b:be:f7:42:f6:b0:16:b4:41:e1:
         41:a0:24:7b:13:13:65:20:75:8a:20:29:1f:e1:87:88:d6:a6:
         7f:9e:03:19:d0:d3:68:d9:1e:2a:8b:12:dc:71:36:8e:1e:ff:
         1a:15:c9:44:e6:0a:63:93:9e:6d:08:e9:48:15:52:bf:9c:71:
         f0:28:f6:72:0c:9e:e9:b7:79:a4:af:c0:fa:50:d6:51:4f:61:
         35:a2:81:a3:87:91:33:f2:26:8d:19:cf:32:bf:ac:50:b9:8b:
         92:e2:e2:57:2d:83:08:2f:c7:02:6d:43:35:70:b1:b4:45:0b:
         54:73:3f:7b:c6:f7:d5:40:76:58:62:9f:9c:18:2f:0c:22:3a:
         93:db:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:23:07 2025 by rpki-client