Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/5ddf323b-518e-3dcb-a06b-9546e1f9ed19.roa
File:                     5ddf323b-518e-3dcb-a06b-9546e1f9ed19.roa (raw, json)
Hash identifier:          WsOkwdDQ35wXMvf7JpKHYZcQ8wR6YPDdTO+f6jmy1GI=
Subject key identifier:   2B:77:18:C3:80:7C:79:D5:F4:DA:8D:09:A6:9D:14:76:25:F3:6B:22
Certificate issuer:       /CN=acdcf67c-3f56-42fa-a790-eac540e58280
Certificate serial:       010D0C9F43285848B6261B452B9C1AD89513C600
Authority key identifier: C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/5ddf323b-518e-3dcb-a06b-9546e1f9ed19.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     27876
IP address blocks:        66.218.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1b:45:2b:9c:1a:d8:95:13:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acdcf67c-3f56-42fa-a790-eac540e58280
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=1eb187fb-2848-4834-990e-34f0e70fd4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:2e:71:ad:c3:52:08:72:48:23:74:68:9d:
                    3d:37:50:cc:6e:b3:9f:80:f7:50:53:b1:82:61:87:
                    5b:0e:17:b4:5c:18:77:87:1e:41:3e:6c:eb:48:25:
                    51:dc:c0:a5:0d:63:86:a3:66:8e:f8:03:27:51:13:
                    58:90:20:83:26:4f:48:7c:8a:84:48:05:5a:6d:49:
                    1a:60:df:d5:20:72:b4:b8:7b:88:ab:51:b4:d1:fd:
                    ed:4a:cc:c1:27:9c:2e:91:8b:80:36:11:0c:9c:d1:
                    37:d4:19:bc:6a:9f:82:f6:94:84:cc:fc:a4:ce:b2:
                    8f:46:d5:46:5b:f4:4d:ad:97:3a:5c:31:df:de:8e:
                    c5:f8:1c:f2:ae:32:a6:06:d6:55:ca:1d:b6:cc:fc:
                    17:4d:e3:46:27:03:3a:70:68:a5:8e:6b:11:34:ab:
                    cb:f4:20:fc:f2:64:0a:db:0f:57:13:52:82:10:60:
                    0b:fc:50:d3:c3:be:1a:de:32:ad:c0:38:9c:7b:d2:
                    51:ee:89:49:be:ec:6f:a9:91:5e:ef:c0:ce:95:96:
                    79:44:55:98:a0:2e:b9:f3:71:e5:f2:71:ed:f1:00:
                    f2:98:6d:86:97:d4:9d:86:60:86:f3:5d:c5:bd:cb:
                    c3:9a:2f:64:e3:e1:7a:f1:5f:a5:ad:81:0c:ee:18:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:77:18:C3:80:7C:79:D5:F4:DA:8D:09:A6:9D:14:76:25:F3:6B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/5ddf323b-518e-3dcb-a06b-9546e1f9ed19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.crl

            X509v3 Authority Key Identifier:
                keyid:C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:8e:d5:b2:4e:d9:cc:19:15:f0:15:d9:88:a6:39:16:bc:
         7a:94:98:f5:c6:e6:12:35:7a:77:dc:99:9a:7f:eb:63:6f:1b:
         b5:d5:8f:8c:ff:12:b8:52:ac:94:ab:e8:48:a8:8f:d5:c7:f6:
         96:cc:73:c9:0c:e2:ad:5c:71:e0:b2:e7:88:e1:35:aa:cd:4b:
         e0:4a:86:fc:61:1f:59:5f:74:fa:cc:03:e0:43:5c:a6:fb:16:
         c3:2a:b4:b3:f4:90:29:c6:16:44:30:34:c1:ae:f5:cf:93:d5:
         25:72:50:da:56:76:d2:53:f3:1c:8f:d0:d2:33:a9:f1:00:fe:
         cd:d9:f8:10:5f:ad:60:cd:36:65:f7:a0:5b:30:ce:82:c9:90:
         b7:15:83:90:f2:a7:cb:63:e4:59:7c:e1:dd:99:d4:b8:6d:0d:
         01:6b:ad:55:8c:ae:ec:75:05:b7:30:cf:d3:6b:dd:65:98:be:
         2c:4a:93:3c:63:2c:4e:52:f4:c0:83:2b:e1:b9:91:4d:1f:d4:
         f5:ea:4b:df:c3:f7:14:9d:40:0b:2b:88:f1:69:a9:02:5d:54:
         fa:b8:39:2a:5a:44:5a:6f:c4:ae:c9:e6:e3:6b:45:53:de:a9:
         09:1f:60:d3:44:fa:98:f3:1d:35:5f:85:f6:49:f3:9b:8f:47:
         7a:f9:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:16 2025 by rpki-client