Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/b8577262-e08e-3979-b11a-7ba1eadf6602.roa
File:                     b8577262-e08e-3979-b11a-7ba1eadf6602.roa (raw, json)
Hash identifier:          wrSJq7oebdkMOVBymogD5IIFjvPB82MU2caeS0SfLmg=
Subject key identifier:   E7:90:BA:FC:7A:54:6B:9B:3F:55:63:84:13:E8:69:8F:8F:2C:C5:D1
Certificate issuer:       /CN=fc1f6698-8c5a-433a-85f7-479fcb609e9a
Certificate serial:       010D0C9F432858489075F1D2FE0967916DF4A838
Authority key identifier: 57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/b8577262-e08e-3979-b11a-7ba1eadf6602.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     397601
IP address blocks:        66.205.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f1:d2:fe:09:67:91:6d:f4:a8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1f6698-8c5a-433a-85f7-479fcb609e9a
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=7e36a69f-952a-4ca9-a083-e10a2b6cf3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:c6:fa:c9:e8:3f:df:6a:0c:ee:44:de:44:
                    04:dc:99:80:65:75:98:0b:0b:8b:58:dd:40:a5:91:
                    1e:79:e4:5b:ce:81:d9:48:67:ae:ee:87:12:7c:71:
                    be:a5:99:6d:2c:c5:39:30:2c:a5:aa:9b:91:c5:c9:
                    75:94:f8:39:fd:8d:f9:4c:42:ae:04:8a:d4:69:c0:
                    9d:05:32:ac:2b:02:54:99:e6:0a:bc:e4:ce:40:c6:
                    da:3f:7d:25:0f:35:6f:60:e7:37:b2:68:99:8f:3a:
                    22:b8:46:0b:35:b2:7e:82:2d:1c:8b:34:7b:a1:4b:
                    a5:de:50:1d:b1:ce:b5:02:0b:70:e4:6b:d4:cc:07:
                    2a:d1:04:80:1d:bf:a2:ed:bc:7f:4b:61:73:5c:ac:
                    74:e7:22:42:54:2e:77:07:a1:2f:6d:a5:dc:d0:31:
                    ef:8c:5b:68:e6:1f:38:67:27:89:60:d2:eb:0b:f6:
                    b3:00:89:c6:bf:2f:e6:db:66:fb:fa:b4:0f:5d:d5:
                    c7:4d:7f:35:3d:01:b8:8d:cd:4e:f2:94:4e:a7:b1:
                    06:55:f2:ab:22:28:0b:6a:3a:b0:3b:a7:40:f0:e9:
                    3d:fe:d5:94:65:50:c8:37:6b:49:66:12:c9:80:c6:
                    80:c7:dc:3a:b9:93:af:f6:a5:8f:96:0a:f0:10:58:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:BA:FC:7A:54:6B:9B:3F:55:63:84:13:E8:69:8F:8F:2C:C5:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/b8577262-e08e-3979-b11a-7ba1eadf6602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a/fc1f6698-8c5a-433a-85f7-479fcb609e9a.crl

            X509v3 Authority Key Identifier:
                keyid:57:12:47:53:58:1F:4A:20:E2:DD:8B:A4:AB:9E:7C:AE:85:EF:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1f6698-8c5a-433a-85f7-479fcb609e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:4f:80:5d:5b:dc:33:f6:e7:c0:d8:00:ac:b8:48:09:97:4e:
         c9:bf:a3:af:b9:2a:74:eb:86:b5:30:bb:08:e6:a7:d1:fa:3c:
         62:bf:60:af:84:ad:02:64:1d:89:a4:9f:ed:8e:37:1a:81:27:
         78:61:2c:c1:82:ee:11:b4:e5:99:58:65:ca:b2:d9:31:6c:c4:
         1e:2d:19:8b:e5:f8:ef:30:0a:80:e5:29:b3:3e:cd:45:07:76:
         6c:45:19:17:45:c4:f9:10:2f:df:46:58:ff:05:d6:d8:8a:bf:
         e9:96:7b:7d:dc:27:f0:85:0f:32:8f:5a:4b:22:d1:85:13:87:
         e6:43:ba:f6:ff:d0:ca:e1:8e:e1:43:50:2e:ce:86:f6:bb:8e:
         b7:98:45:de:ce:74:59:b9:f8:cb:45:68:1f:a2:91:6f:63:60:
         0d:8a:d6:24:cd:f5:1b:dc:e6:4d:d8:6f:9a:1d:69:8b:48:11:
         e0:cb:4f:f1:4b:0e:1a:b2:1a:d2:4b:81:11:17:d7:0f:03:a8:
         ea:4b:57:41:9d:83:8a:8b:bf:fa:4e:7c:3c:4e:c3:83:c3:59:
         2b:b0:9a:68:d8:67:14:40:23:55:cd:98:e8:0d:06:6d:de:bb:
         ed:50:32:4f:d8:38:70:ff:f3:6a:94:6b:7a:ce:40:bb:16:0d:
         f1:8e:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:08 2025 by rpki-client