Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cd4f3b6b-ef42-390b-84eb-ef255855df54.roa
File:                     cd4f3b6b-ef42-390b-84eb-ef255855df54.roa (raw, json)
Hash identifier:          qQc/a6pq5gnj9bDWuYelr+w6/hcKRCJzoKVKD/QcRNo=
Subject key identifier:   47:06:59:AF:88:4D:A6:85:49:2C:E1:F9:6A:1B:87:5F:B8:5E:3B:71
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584693F00CC5C24A884510C33B80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cd4f3b6b-ef42-390b-84eb-ef255855df54.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:93:f0:0c:c5:c2:4a:88:45:10:c3:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=0f732e0c-e2f4-4e61-9fd3-44a67704c13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:c9:ea:2f:02:ae:10:65:7a:ad:18:04:9c:
                    bb:d5:18:6c:7e:09:1f:09:e6:ba:7c:58:fc:02:30:
                    bb:7c:9f:f4:7c:71:36:f1:58:c6:d8:e2:aa:02:77:
                    15:aa:a5:9f:79:d0:d2:bd:86:c3:d4:27:1d:02:4c:
                    14:a4:65:0c:ba:4f:ac:0b:75:98:ca:c7:33:1e:6e:
                    a4:cd:af:96:72:91:20:35:24:d3:53:64:c2:d3:db:
                    d0:de:61:8f:75:b4:e2:fd:54:c5:17:79:da:76:3e:
                    b1:5d:bc:13:31:dd:7e:81:b2:0d:46:1d:ef:d9:41:
                    9f:35:73:12:6b:7a:f2:11:fb:ee:0a:66:ee:39:96:
                    d7:f1:8d:7d:c0:fd:d4:6d:d6:6f:3b:5a:ec:1f:0d:
                    23:a2:dc:ac:71:05:be:42:56:e4:9d:58:be:9d:fe:
                    8f:52:b4:07:5a:57:3b:ad:74:de:35:ff:4e:b1:86:
                    f9:b2:3e:e8:64:c3:05:99:bb:71:e6:6a:98:93:a6:
                    54:1b:7a:23:da:46:65:1e:6c:95:c7:59:00:d6:a8:
                    0a:12:5a:c5:80:ad:c5:2a:92:a5:83:4a:90:fb:ae:
                    9e:a4:f8:8a:d7:9a:21:71:91:ba:e8:e2:f8:89:92:
                    61:bf:d4:a8:15:37:15:64:54:bf:17:7a:c2:76:29:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:06:59:AF:88:4D:A6:85:49:2C:E1:F9:6A:1B:87:5F:B8:5E:3B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cd4f3b6b-ef42-390b-84eb-ef255855df54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:6e:46:24:40:6b:e1:e2:92:0f:22:53:57:16:5b:56:88:
         4b:e8:03:f0:8d:6d:bd:37:cb:e0:98:0b:ad:0f:b4:84:57:50:
         72:39:f1:94:92:f9:74:0e:a0:b2:a8:4d:76:00:f8:cd:f5:00:
         74:69:55:87:37:3a:34:0d:83:a3:a9:c9:33:92:a2:39:5e:28:
         ba:41:de:ea:84:13:0a:62:4b:24:51:79:c3:f0:6c:5a:33:7f:
         1a:e6:26:39:59:e4:7a:50:7b:5d:7f:9a:79:2d:74:9d:ab:6d:
         a2:26:c7:57:09:70:54:0e:2d:64:a4:96:df:f1:99:a1:d2:8f:
         8a:e4:b8:59:f4:e0:96:4e:e0:d6:bf:a1:aa:48:60:34:95:52:
         dc:59:44:d6:d3:aa:75:0a:36:7c:d0:eb:68:ea:c5:1d:c1:84:
         70:25:a6:d5:7c:82:d2:29:e0:b8:b3:e3:2e:9b:81:42:af:d1:
         2b:53:3c:a5:3a:2d:46:58:5c:f9:83:2b:b6:e8:af:ac:86:ae:
         9b:4d:18:81:45:9c:84:b9:0c:c0:06:7b:ab:db:d9:a0:58:10:
         d6:f4:d5:51:ff:a3:4c:b9:16:f8:df:59:2a:09:68:b3:e6:8f:
         e8:4b:8b:ca:96:99:fe:be:39:ef:0d:ed:b6:fe:12:ad:2e:d1:
         81:c2:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:02:22 2025 by rpki-client