Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/66037807-05d2-3b81-8627-385a3bd8717b.roa
File:                     66037807-05d2-3b81-8627-385a3bd8717b.roa (raw, json)
Hash identifier:          5Ab+fI03eHxdeXcQohUCTA8r7Yl/akLir5TOGj9qBW0=
Subject key identifier:   E6:28:34:1B:D2:5A:1E:4D:64:D8:82:1D:33:89:5E:B1:B5:BC:9B:18
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285848B1F630EF4F911189604D87C0
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/66037807-05d2-3b81-8627-385a3bd8717b.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     21743
IP address blocks:        199.255.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:30:ef:4f:91:11:89:60:4d:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=63821601-d47b-490d-96ee-35f0137b63bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:66:ba:e1:08:15:6b:dd:21:21:7b:96:dc:
                    77:47:e7:e6:2e:8b:b7:71:9b:cf:e4:4f:8e:11:d5:
                    8c:be:8d:d6:f7:1d:00:e7:03:d5:30:23:7e:aa:99:
                    fb:cc:7d:7d:a9:2b:9b:0d:19:aa:c4:a0:ba:46:58:
                    83:53:56:41:62:5f:54:da:b6:bd:c2:78:85:6e:80:
                    65:02:f5:08:04:fc:db:8b:1f:f2:53:9d:77:73:da:
                    ac:b1:7f:93:08:6a:7a:3e:18:e9:5d:d0:23:a5:42:
                    a5:72:eb:45:3a:d0:87:1b:b2:0e:23:6d:75:8b:aa:
                    37:d4:4e:07:9e:69:9e:3a:03:f3:86:9c:37:d9:16:
                    97:ac:05:24:67:5c:a7:69:fc:b7:bb:ba:b4:20:56:
                    57:5c:48:14:5b:ef:f3:1a:7b:9c:b9:77:6d:46:08:
                    25:73:9a:b5:14:da:19:3b:10:65:3d:3e:30:15:b5:
                    cc:f4:b2:e3:13:84:87:5d:09:89:82:00:b4:34:82:
                    5a:43:c5:ac:54:5d:04:d5:0e:d0:6d:2a:23:66:13:
                    35:d9:f3:93:c0:aa:50:75:d8:59:44:18:90:11:fa:
                    c0:82:db:6e:48:e4:2c:dc:62:61:75:43:93:9e:b1:
                    90:de:51:e2:a7:c4:9b:34:b9:8e:a0:ac:ea:5a:50:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:28:34:1B:D2:5A:1E:4D:64:D8:82:1D:33:89:5E:B1:B5:BC:9B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/66037807-05d2-3b81-8627-385a3bd8717b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f3:b0:e7:84:d7:cc:4c:8d:44:33:1f:9a:b7:a0:17:4d:fa:
         fc:51:09:d6:11:4a:69:b3:2e:e9:c9:00:1e:d8:cc:dd:be:d6:
         62:c7:72:71:28:41:ba:d3:cf:26:7f:5e:b9:93:be:3a:44:3c:
         38:98:09:09:c2:50:60:3c:70:a8:e6:af:c6:24:ab:f9:7e:d0:
         f7:d8:e6:23:4b:fa:a3:78:18:96:b9:b5:6a:f6:9b:91:75:54:
         6a:84:fa:7b:1c:93:dc:a1:d3:ff:a6:7a:2b:2a:55:22:e6:ac:
         86:e5:8e:a5:7c:71:61:12:44:cb:56:cd:4c:05:20:ca:38:4f:
         f9:45:c1:1a:1b:0b:8e:e9:0a:97:79:3a:56:47:fd:0f:02:7c:
         be:a5:d9:85:a6:5d:68:02:6a:cf:4d:c6:ed:68:1d:ac:ff:f2:
         f1:ff:b5:2f:8d:aa:19:86:17:62:79:ad:f5:b5:c9:ca:8e:76:
         56:19:6a:43:3a:29:89:90:0d:f0:5a:51:98:0a:77:74:ca:cf:
         24:09:01:cb:06:d6:8f:ca:b3:f6:2b:78:fe:12:c9:b7:77:ce:
         07:5b:ef:ad:1e:ea:ac:5d:6f:05:b7:68:02:13:68:7c:b7:3c:
         94:57:b4:08:e6:b7:ab:80:ae:38:a7:08:d4:8e:03:b3:f2:55:
         44:b2:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:56 2025 by rpki-client