Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/db48774d-4cbc-3156-85d5-9b2c6327d4fc.roa
File:                     db48774d-4cbc-3156-85d5-9b2c6327d4fc.roa (raw, json)
Hash identifier:          XhtNihvPkrB0JOEi6JhTs+uUuz7keuoVtIouKy3QEEI=
Subject key identifier:   7E:DA:7B:DE:03:61:C1:1A:27:32:C7:D8:08:D9:77:13:28:8C:1F:D8
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285848D0ABAE842D80B7971CE3BFC0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/db48774d-4cbc-3156-85d5-9b2c6327d4fc.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     2914
IP address blocks:        66.114.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:ae:84:2d:80:b7:97:1c:e3:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=350d42d6-1979-48ec-8e55-63db50b310fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:b6:ca:4b:30:61:c5:4a:e5:1a:44:58:0d:
                    ff:06:92:1b:51:a3:38:31:01:36:58:42:9d:eb:9d:
                    5f:a2:bc:c9:92:5e:3f:46:2d:35:93:0a:1a:bd:88:
                    eb:72:db:d9:5d:8f:a2:1f:0c:38:d0:53:f6:3a:65:
                    92:69:9a:f4:2c:49:35:2e:c1:5c:c4:91:37:03:30:
                    57:38:23:42:c7:7b:30:08:10:b2:c3:ad:22:51:01:
                    97:67:0f:5e:36:e9:27:18:05:7c:8d:3e:90:d2:d7:
                    4d:e2:5e:5b:32:87:91:37:87:d7:b8:1b:f3:cf:6a:
                    61:23:e7:f0:66:35:59:c8:d3:18:54:95:1c:a1:cb:
                    21:9f:9a:c4:2b:41:05:e3:2e:3c:18:b4:b1:f8:cf:
                    e4:3c:60:fd:65:e0:86:ce:f4:ba:a7:c2:83:5f:d5:
                    f3:5a:04:d2:5f:4c:ed:17:dc:6e:17:88:7b:e9:df:
                    3e:cc:57:10:80:10:c0:b8:ad:1c:39:67:24:d2:a5:
                    3a:3f:74:57:c3:7e:33:48:ed:5b:e1:3e:84:7f:8f:
                    d8:3c:50:d1:7b:cf:63:c7:25:dd:20:90:8e:31:00:
                    14:71:a7:f6:d5:8a:bf:b4:f7:2b:77:44:ad:39:cb:
                    93:43:fe:3c:f8:b5:ae:1f:0a:49:b9:83:91:5f:66:
                    d1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DA:7B:DE:03:61:C1:1A:27:32:C7:D8:08:D9:77:13:28:8C:1F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/db48774d-4cbc-3156-85d5-9b2c6327d4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:71:5b:36:42:51:94:0e:17:a0:6b:c2:fc:c1:ba:e4:75:
         34:97:ca:ac:24:4a:8a:ec:d1:9c:d5:54:c8:06:4e:5e:0d:58:
         a7:4a:b5:9c:67:e7:b9:4d:74:35:e3:f6:50:99:18:1c:67:3f:
         24:b5:6e:08:74:45:77:4f:8d:36:21:70:ed:1a:af:cf:b1:35:
         2e:c5:e3:a0:cb:1f:09:b7:3c:66:49:7b:5a:ee:3c:56:9d:49:
         b2:ed:2d:26:b7:c3:5f:87:41:4a:52:ef:e6:31:79:1f:8e:d8:
         eb:28:00:c5:a2:06:22:25:3d:6c:4a:d7:cf:43:72:a8:7c:9f:
         ab:5b:e3:2c:c4:33:18:56:fa:66:39:d8:5d:15:43:0f:3f:47:
         08:8c:f1:45:7b:d2:28:5a:19:70:1b:61:bb:a8:14:14:b7:09:
         85:d8:ff:7e:b7:cc:c5:22:29:a7:cb:57:93:ee:ab:84:e6:0a:
         11:08:05:21:7d:bb:ed:dd:44:f6:32:77:b5:f0:68:6e:a9:1a:
         cb:ef:5a:23:ce:06:b2:24:7f:e6:c0:3d:42:a5:70:a3:9a:38:
         69:5a:99:ce:38:02:b0:92:2f:2e:a7:d0:c3:f8:d1:68:bb:25:
         89:07:5b:9b:b3:a8:65:27:0b:53:fe:b1:75:ca:5b:8e:18:9d:
         6d:98:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:52 2025 by rpki-client