Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/23d6c5ae-3503-330f-83b1-2d4c439d8079.roa
File:                     23d6c5ae-3503-330f-83b1-2d4c439d8079.roa (raw, json)
Hash identifier:          AhmpyP5Va2nPJRc2SQAvsJetLk3Ejeh1OOGzV8H3VMA=
Subject key identifier:   7E:09:FE:A1:89:79:BA:0E:3E:D6:45:FD:F6:E5:E1:EB:46:4D:C3:40
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F432858494B641BC9C27BB16A0B750F00
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/23d6c5ae-3503-330f-83b1-2d4c439d8079.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        66.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:1b:c9:c2:7b:b1:6a:0b:75:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=af0e6513-c309-40c3-a30c-ed8d7d7f3fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:fe:a1:d7:df:7e:33:11:16:29:ad:36:76:
                    c6:03:4d:95:2b:73:d0:7c:7b:8e:0b:e8:4f:f4:03:
                    92:77:7e:6e:52:a6:05:50:64:75:f7:31:88:05:73:
                    16:1f:7b:62:03:b8:53:a2:33:6f:80:36:45:b7:12:
                    62:6a:1a:a2:a1:b6:e4:fa:f6:33:44:09:6c:b5:e6:
                    f0:9a:d8:23:6c:73:9d:a3:ff:cb:20:4f:4f:a9:75:
                    1b:86:d7:be:ef:18:a6:cb:1c:b6:d4:ca:58:03:ce:
                    96:de:cc:ca:a0:da:a8:cb:0b:3c:48:59:6b:91:70:
                    e3:85:1f:4d:55:33:f6:e9:31:2c:7f:16:8a:88:5e:
                    86:18:51:80:c7:2e:17:0c:7f:6e:6d:db:01:27:f2:
                    f2:c6:d1:c6:7c:02:45:30:44:6e:55:99:de:11:08:
                    08:d5:45:96:65:67:ab:d2:2b:76:80:01:e5:c7:83:
                    29:c4:38:0f:b2:fa:bb:2c:d8:19:93:58:57:e5:ee:
                    c6:36:8e:a8:8e:02:8a:81:e1:93:5d:13:ff:ea:fa:
                    22:0f:2d:d2:03:89:9d:75:3a:a1:d5:3a:18:9e:1a:
                    05:83:b2:83:58:3e:30:e9:f1:77:e8:fa:03:53:bc:
                    0e:98:f3:b2:56:99:ef:67:39:7f:5c:3b:94:2f:2f:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:FE:A1:89:79:BA:0E:3E:D6:45:FD:F6:E5:E1:EB:46:4D:C3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/23d6c5ae-3503-330f-83b1-2d4c439d8079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:06:88:62:ff:19:6e:0e:52:d1:d6:0c:57:cc:a3:29:0e:
         a5:ae:68:32:32:e5:73:67:8e:ad:57:bc:d9:68:3f:21:66:b1:
         4f:67:7f:e7:c3:68:e3:b7:95:af:27:72:ab:8d:57:98:61:86:
         aa:8e:e4:7b:fa:32:42:1c:79:92:6a:18:8a:de:6e:a8:de:2c:
         a1:10:ad:6a:05:06:54:32:2d:78:55:a7:f6:68:17:f7:61:ab:
         f2:af:91:5d:6e:20:4e:78:bb:08:7d:9e:73:67:2f:0d:65:04:
         e5:80:02:dc:4a:7e:5b:9a:2a:a6:49:a4:cb:a8:b9:2e:ee:9a:
         be:92:61:e3:9b:cb:2f:09:a6:06:0f:ed:0d:7f:e8:83:c6:8b:
         ca:16:57:4c:36:3e:8b:26:de:ea:91:24:54:b9:06:a6:04:d3:
         4e:e5:fb:90:e2:58:e7:dd:02:39:0f:2a:b9:76:f9:66:5e:d5:
         e9:4a:8a:e6:2c:bc:40:a8:72:ec:a1:fd:32:b3:dc:84:1f:f1:
         d7:ff:3a:e6:f5:3c:47:dd:13:ea:ed:c4:74:b8:96:74:03:dd:
         3d:fc:e5:21:fb:90:22:a5:96:f1:0c:ff:0f:2b:3d:a9:07:88:
         fd:de:3c:9c:d7:40:fc:5b:31:b5:32:cf:87:b5:2e:42:45:47:
         ee:ed:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:19 2025 by rpki-client