Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf8c7b24-de15-33a7-8b39-b62e906c8082.roa
File:                     cf8c7b24-de15-33a7-8b39-b62e906c8082.roa (raw, json)
Hash identifier:          ysTDIB/V35Yar8qDlupJmJAJ83rSwgTUUIF3i5VsbgQ=
Subject key identifier:   01:9F:FB:63:D7:07:86:62:AE:F9:65:1A:2F:58:75:AB:F8:85:37:9E
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858486AC59CC449DCF4597504BE5B
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf8c7b24-de15-33a7-8b39-b62e906c8082.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     13576
IP address blocks:        66.115.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:9c:c4:49:dc:f4:59:75:04:be:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=143f53fb-c548-4952-b6fc-7b0031fc2378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:19:42:e4:fb:df:45:3e:ce:41:1d:7b:ee:
                    aa:e9:44:b1:11:4c:86:65:38:3f:d1:f4:f7:85:67:
                    2c:cb:23:6f:cb:04:22:bd:ce:fe:58:d9:c9:a0:f5:
                    1f:3d:99:9a:68:ce:cb:f4:8d:9a:9c:7a:b6:64:a8:
                    9f:ba:c4:fc:b9:3f:69:c4:b3:75:de:b6:13:6e:24:
                    91:6f:41:cd:aa:8e:9e:ce:df:1b:04:c7:3f:26:26:
                    c7:79:e1:07:10:30:56:0e:8a:37:6d:d7:54:b1:97:
                    1a:90:a7:4e:d3:e6:b2:56:52:2d:73:69:01:20:e9:
                    d5:4e:3c:96:df:61:ad:6d:40:72:21:eb:b6:a1:00:
                    93:f0:55:f8:60:51:5e:20:25:97:d5:0a:25:bf:9b:
                    ce:b7:d1:46:b5:98:44:eb:43:68:17:f0:4d:a1:a3:
                    a4:39:ff:94:d4:7c:45:fe:4c:3f:77:4a:7d:96:65:
                    47:32:21:ff:7f:c7:26:18:6b:00:6e:ca:ec:ee:32:
                    25:61:5b:b9:8b:8b:84:65:e5:a6:d7:89:f0:c6:ec:
                    14:b6:1c:2a:4a:ae:b2:e0:23:58:cd:6c:bc:cd:bf:
                    28:a5:9f:1c:a9:b6:c0:75:98:b3:e3:92:0d:ec:fc:
                    ff:0a:c4:54:d0:40:c0:7b:ea:6f:2c:70:0c:73:de:
                    00:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:FB:63:D7:07:86:62:AE:F9:65:1A:2F:58:75:AB:F8:85:37:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf8c7b24-de15-33a7-8b39-b62e906c8082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:89:11:5c:01:b4:26:60:e9:7d:53:60:09:47:9a:17:db:
         57:38:9a:1f:54:46:e6:73:43:30:47:28:09:00:b5:ce:0b:8d:
         ab:ed:5d:de:8f:f5:9b:8b:44:8b:d5:e7:38:4a:80:67:cc:13:
         e5:cd:e8:03:b3:d1:af:4d:9d:e7:c3:85:5b:6c:72:7c:47:e7:
         ac:06:f9:41:16:11:76:a7:91:a5:c2:8b:4c:46:43:26:46:b1:
         1e:93:4c:a3:28:0c:ad:cf:83:59:22:90:28:b2:3e:f3:fc:60:
         6e:3a:fa:30:f8:60:db:47:47:fd:1e:f8:58:45:5d:29:a5:4c:
         70:4a:a9:6e:81:d4:7c:d2:9b:d2:20:cf:64:9a:b7:a0:5f:8c:
         e8:86:3a:d2:a2:27:c9:db:5f:38:95:d7:43:f2:5e:a4:e3:b9:
         e3:65:37:59:67:95:44:10:7b:58:40:b8:f7:6a:73:02:3a:7a:
         49:14:1e:a8:d6:65:6e:ab:88:15:d1:f2:28:53:d3:b8:3f:07:
         bf:d8:e1:7b:9c:eb:26:c0:7b:0b:02:cc:34:90:4f:68:37:75:
         ae:4a:7e:e4:4b:4b:0d:9c:1d:17:bd:d6:4d:cb:78:f4:e4:55:
         47:38:c6:51:6f:33:8d:b9:f7:c2:ee:e3:b1:a0:ba:15:7f:d1:
         e7:cb:e4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:19 2025 by rpki-client