Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa
File:                     e14cc174-68fa-3252-9d74-713b58db3ade.roa (raw, json)
Hash identifier:          SxLcZXC0aBngJ2F4a9u2gBnJh5glPYckwI1eyf2NzJQ=
Subject key identifier:   72:EE:15:6C:84:11:16:ED:49:17:01:DA:C0:8E:A5:0A:FC:91:4B:F4
Certificate issuer:       /CN=f8424ff1-5313-4a68-a60f-9d8217567420
Certificate serial:       010D0C9F4328584894A5EBA42219CAC30AE5FED0
Authority key identifier: B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     397731
IP address blocks:        66.245.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:eb:a4:22:19:ca:c3:0a:e5:fe:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8424ff1-5313-4a68-a60f-9d8217567420
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=85446cc1-a3ff-4a97-b231-cc229e7bf01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:09:ea:85:72:e6:0f:ee:52:5e:cd:1f:49:15:
                    c0:02:7d:6f:7f:5a:6b:ed:ff:91:83:c5:a5:d6:bc:
                    01:c0:bf:01:85:4d:2f:4c:1a:78:83:58:b3:ca:8f:
                    ec:76:6b:f1:ae:5f:1c:2b:02:c2:2d:f6:ee:c9:55:
                    56:fc:7a:dd:65:aa:ce:a9:3d:19:8d:a4:5c:22:9f:
                    35:e6:05:d1:1a:37:4e:15:81:65:16:2e:cf:92:da:
                    ec:a3:d7:74:04:8d:73:78:2d:0f:2e:02:84:3f:b1:
                    9d:45:2d:bb:a0:6a:08:54:fb:5d:4b:d6:e0:f0:65:
                    a0:4d:ef:1d:ed:4a:69:04:20:52:8d:8f:bf:47:17:
                    2f:e5:32:98:4a:0e:61:be:f9:3e:4e:d2:7d:c4:20:
                    e5:58:95:3b:e4:70:4d:66:6d:06:7f:5b:74:ad:18:
                    2b:09:2c:cb:cb:0f:62:08:ca:52:ad:10:4f:a7:d8:
                    d9:0d:30:16:1b:07:ca:34:dd:01:75:df:02:ac:94:
                    ab:51:93:f9:48:9d:c2:aa:8e:3d:0a:b2:0a:99:cd:
                    74:71:81:cd:15:43:51:db:1a:d9:4e:cd:cd:6d:e4:
                    d4:da:c2:9f:aa:dd:1e:3e:33:58:14:0c:c7:d9:16:
                    c1:60:83:a1:67:3f:f8:12:f8:32:87:04:e0:4e:99:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EE:15:6C:84:11:16:ED:49:17:01:DA:C0:8E:A5:0A:FC:91:4B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl

            X509v3 Authority Key Identifier:
                keyid:B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:4a:a5:92:66:97:e5:ce:27:55:fd:62:0e:47:d1:84:c4:
         8f:69:30:26:7a:9e:bd:49:b0:17:62:9b:5b:03:6a:21:40:99:
         71:ad:e3:21:39:04:b0:a2:8f:17:0b:be:6f:e9:b8:b3:9f:bb:
         ee:27:17:ef:08:c3:50:ac:bb:6f:38:40:c1:63:86:f7:df:af:
         90:37:a9:ab:02:fc:88:2d:1f:35:57:50:49:03:4d:c3:7e:69:
         e7:f1:66:c5:53:c0:a7:d6:b1:ab:e6:b9:1c:65:de:37:4a:54:
         c1:8a:f1:11:b1:56:69:d3:9f:4c:5a:c0:98:a3:d4:df:ea:77:
         57:cd:f0:53:d8:dd:6a:45:57:30:69:47:51:64:c3:b7:8f:c2:
         1c:04:b9:94:e0:86:36:16:b1:3c:b9:d9:fa:3f:eb:6d:ea:28:
         0b:e4:1f:4c:9e:12:4d:f9:77:bf:1b:44:69:14:c8:6a:40:7f:
         99:3e:14:ee:93:c7:26:73:12:40:fc:a1:23:10:16:a1:d5:a6:
         02:93:59:f2:fe:2f:f4:54:16:e3:ab:8c:49:72:ea:16:96:ba:
         f4:5d:f0:e5:4e:07:5a:94:48:1f:8a:df:c6:d1:67:bb:cd:45:
         00:32:20:73:e8:56:ac:7a:16:04:31:04:6c:07:81:e5:79:61:
         44:14:9d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:57 2025 by rpki-client