Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa
File:                     f1389442-5028-3887-b4f0-43f58569208c.roa (raw, json)
Hash identifier:          vZmwS/PasJ/7XCCzl3ePkL2Mpz5G8qsJ9i90Z6DciUo=
Subject key identifier:   20:78:78:02:67:F2:B9:63:5C:53:31:B4:98:7C:DB:45:78:7C:D1:DF
Certificate issuer:       /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
Certificate serial:       010D0C9F432858486C2B1F2C22964DEFECEAE900
Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        66.45.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:1f:2c:22:96:4d:ef:ec:ea:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=941b2ffe-f269-4657-85df-16dc489cefc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:79:fb:4b:cb:96:60:02:86:d9:be:29:ee:
                    21:af:49:fa:2e:32:20:2e:13:bd:c0:eb:8e:61:64:
                    1a:83:d0:af:b7:15:cf:33:cf:fa:1c:0c:dc:80:92:
                    ed:2b:d1:21:88:81:e7:18:fe:0a:2d:84:e4:2e:97:
                    88:78:40:21:db:7f:29:be:1c:ea:f1:0b:62:cf:57:
                    69:09:93:79:03:6a:96:35:d4:50:57:b7:bf:43:37:
                    65:ba:d0:bc:30:58:54:22:ad:b1:67:98:c6:4d:05:
                    e0:b2:a6:17:2a:56:01:12:de:18:a7:11:6c:b3:aa:
                    1a:87:ae:21:2a:74:f3:f7:65:f9:ac:be:0e:2e:82:
                    5a:91:34:5f:3a:b3:57:38:29:80:b7:80:49:85:48:
                    c0:28:51:ff:b3:8e:14:2f:2b:b0:9c:96:61:bd:26:
                    64:9f:2d:30:91:b2:f2:f5:c5:2c:51:57:33:f4:f1:
                    60:65:45:59:09:26:00:2a:7c:e6:5b:3e:9a:93:9c:
                    eb:88:2c:2f:f2:dd:a8:a6:8c:7e:0e:f3:ad:ad:8b:
                    88:21:43:52:7b:82:c9:a3:f6:d5:97:50:43:9e:f6:
                    73:07:ba:0f:81:c6:f1:3a:59:24:01:3d:06:3f:c8:
                    c0:fc:dd:30:04:56:38:0e:e9:bd:36:9c:20:fd:e5:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:78:02:67:F2:B9:63:5C:53:31:B4:98:7C:DB:45:78:7C:D1:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/f1389442-5028-3887-b4f0-43f58569208c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl

            X509v3 Authority Key Identifier:
                keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ec:50:96:5a:ab:17:61:f3:cb:e9:44:c7:8c:bd:06:52:bb:
         db:1e:17:65:48:76:0c:a8:05:52:7f:58:5f:d1:3c:30:cb:30:
         27:4c:6e:54:86:03:14:62:ec:e6:2b:4e:ad:eb:1e:bc:f1:3f:
         62:8d:c4:99:14:d6:47:94:2f:89:80:aa:92:ed:22:a3:3d:37:
         9a:46:88:b9:fa:4e:58:b8:13:f2:b3:50:79:fe:e9:8e:62:3b:
         ec:48:b4:68:c5:1f:22:e9:08:91:36:53:44:f7:12:26:0e:4d:
         50:74:7e:02:cd:c5:ff:2f:53:ec:4e:f6:b3:d4:64:78:b0:ba:
         ef:bc:39:d7:37:51:e6:be:98:84:2a:c1:e1:89:86:3e:36:d0:
         34:42:11:6e:76:4b:c2:f9:e8:14:03:28:0f:18:f1:2c:88:18:
         63:f4:12:f4:d2:c9:e3:cf:67:11:5a:5d:b9:c8:78:93:4d:3c:
         eb:14:19:be:1b:0b:c9:0f:51:51:e4:0c:1b:45:ad:c7:0a:4d:
         b1:1f:14:d4:bc:e5:ce:06:0e:2a:4b:f1:69:43:17:98:d8:de:
         40:66:e0:31:da:0e:b6:60:38:81:a5:5f:6b:0a:c2:a5:97:1f:
         3a:9e:28:2c:1a:2d:ab:4a:a3:62:9f:15:ec:e7:b5:b1:03:f8:
         af:ac:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:07 2025 by rpki-client