Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/710b70f6-756a-34b8-bd1e-930ad53388ee.roa
File:                     710b70f6-756a-34b8-bd1e-930ad53388ee.roa (raw, json)
Hash identifier:          6Vjz1Pz16btr3X3guBc1Jmq0B8cNb0oc7cEnMG/AWsM=
Subject key identifier:   5B:C2:67:06:67:C8:85:4F:6D:C5:0F:CA:75:F9:D8:0B:A6:F1:D4:84
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858494B6403A16C73A01A36E26030
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/710b70f6-756a-34b8-bd1e-930ad53388ee.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     19031
IP address blocks:        66.115.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:03:a1:6c:73:a0:1a:36:e2:60:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=c1ff5bee-01a9-4ed6-a265-8c330a7b882e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:7b:62:6d:0e:17:4e:ff:b6:49:86:bf:cd:
                    ed:12:90:3e:e1:db:8e:f6:e1:17:a0:31:c8:11:36:
                    c8:47:f7:a1:2d:21:55:f5:30:9c:b9:77:84:a5:f0:
                    78:f6:8e:1d:c0:7f:6b:d7:72:d9:91:f8:c2:e9:d2:
                    20:ba:fe:b5:7d:8e:a7:02:03:50:f1:15:d2:b4:ee:
                    fa:d5:96:06:4a:bc:97:33:d2:e0:0d:c2:e6:fa:cf:
                    1c:5a:87:08:ff:40:de:33:d8:36:e7:6d:72:50:75:
                    61:40:07:da:f6:79:4e:fe:54:57:84:6e:84:3f:e7:
                    c7:5c:4b:ea:f4:31:86:2e:1b:6b:bd:88:63:97:29:
                    83:7f:5a:ba:29:dc:c3:9b:e3:61:73:78:3e:3e:fb:
                    be:95:7f:04:3a:4b:eb:9e:89:30:2d:39:77:d2:e5:
                    bb:ed:5b:ef:d9:c5:68:81:78:34:7e:c0:1a:b3:5c:
                    e2:64:57:e7:4e:c2:f7:9f:59:b1:9a:76:24:f5:18:
                    79:ba:a4:87:8d:2d:21:ac:c8:a7:4d:de:ee:86:72:
                    ff:9f:17:22:b0:7f:6a:81:65:e5:29:9e:7b:cd:64:
                    e4:c5:21:2f:eb:e4:90:b3:90:a8:dd:93:6c:18:68:
                    db:c1:a6:fd:81:8a:3f:f6:66:f5:32:cf:c2:2a:43:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C2:67:06:67:C8:85:4F:6D:C5:0F:CA:75:F9:D8:0B:A6:F1:D4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/710b70f6-756a-34b8-bd1e-930ad53388ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:3a:41:e9:f3:7b:92:08:b3:a9:2d:d3:4f:97:46:1b:2b:
         ad:0d:df:b4:76:83:f6:99:29:49:a7:d0:a2:85:16:83:ec:bf:
         8f:9c:96:18:9d:93:a4:1d:e5:a9:f8:4f:bc:f8:c6:22:98:73:
         fe:a9:33:3e:17:c0:cd:cc:26:56:ae:d1:1a:85:d7:77:c9:48:
         d1:01:78:57:dc:d7:8f:b8:9d:fb:97:ee:2a:1a:93:c0:11:c8:
         4e:03:38:1e:8d:bc:cd:84:5b:8d:73:0a:6a:62:26:e3:8f:6c:
         01:bf:dd:45:24:cb:40:68:1b:40:f8:ac:38:2b:b2:37:bc:f0:
         b9:11:18:aa:b5:3a:5f:8d:29:62:b1:3c:33:d1:a3:1e:a5:03:
         37:da:c9:76:61:60:e6:8e:fe:c4:6d:26:5b:22:3d:aa:72:dc:
         97:56:57:f5:72:f4:e6:88:e9:bc:76:5b:72:e2:21:e6:11:5f:
         26:94:b3:a7:3f:df:02:9e:d4:7d:8d:f2:0e:0c:14:f7:08:c7:
         98:ab:c1:02:73:fc:2b:7a:59:60:6a:bc:9f:9a:0b:c5:1b:e4:
         b7:cf:be:99:29:fe:b8:cc:9f:a5:a6:11:69:e6:d5:df:64:4a:
         e7:66:82:62:d5:f5:e4:c5:b9:c0:1e:37:dd:6e:1e:58:23:15:
         f2:38:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:34 2025 by rpki-client