Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa
File:                     bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa (raw, json)
Hash identifier:          BO/XraoYBENelG0e3j6FiHLEoC7ikSJmMa43iD6BwJc=
Subject key identifier:   B8:AA:05:BE:8E:0E:78:9F:CC:F6:40:C1:63:B0:87:9B:2C:64:11:D4
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848BD20E418BFEF6B15A038C880
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa
Signing time:             Sat 01 Feb 2025 14:00:51 +0000
ROA not before:           Sat 01 Feb 2025 14:00:51 +0000
ROA not after:            Fri 02 May 2025 13:00:51 +0000
asID:                     1239
IP address blocks:        66.90.81.0/24 maxlen: 24
                          198.16.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bd:20:e4:18:bf:ef:6b:15:a0:38:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb  1 14:00:51 2025 GMT
            Not After : May  2 13:00:51 2025 GMT
        Subject: CN=9ab6b6dd-6044-4809-be1f-e4bcf5d5df9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:15:9a:48:e6:be:b9:50:0c:08:ec:c6:3f:
                    77:ac:3d:f5:a7:e0:83:de:85:18:b1:ae:b2:b2:37:
                    72:08:fa:b7:7f:a3:6c:98:06:0b:eb:61:ad:04:61:
                    50:f4:19:4a:c7:c7:b1:84:74:fc:0e:4a:63:27:c8:
                    a1:7f:40:00:9d:0d:7e:63:26:88:fc:86:31:0f:56:
                    6c:be:8a:81:52:e5:00:24:58:b4:97:eb:cd:b9:b5:
                    9b:48:d6:84:73:65:60:24:e7:44:95:53:95:37:92:
                    6b:54:4e:45:55:02:52:4f:de:09:2a:9b:0f:0a:5d:
                    1a:f7:2f:3e:2f:ee:91:51:f1:f0:c9:b0:43:74:b9:
                    fb:da:4c:fe:08:97:93:4b:4b:2b:17:6b:72:ed:53:
                    cb:2f:94:dc:4e:a3:4a:8f:42:52:d4:2a:aa:33:7b:
                    ea:0a:ba:f3:32:e8:ec:4f:a5:55:3e:4f:d8:90:12:
                    c9:a7:03:d8:b3:9a:01:18:16:e9:4b:7b:22:12:2f:
                    14:ac:01:62:59:0d:03:ab:14:fe:b5:74:3a:2d:d9:
                    03:35:cd:db:bf:61:09:a3:65:2b:a5:10:ca:aa:96:
                    8c:fb:70:98:b9:09:32:22:e8:9e:83:12:47:1f:40:
                    fa:a2:1d:f3:58:de:b7:8c:c6:29:07:07:1e:ae:e9:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AA:05:BE:8E:0E:78:9F:CC:F6:40:C1:63:B0:87:9B:2C:64:11:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bbfa98d7-c05a-30d7-b131-d5aceaaafff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.81.0/24
                  198.16.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:49:ec:76:c4:cc:53:2a:b9:00:92:f3:59:b2:14:89:5e:d0:
         85:ad:c9:5b:93:6f:1c:02:25:1f:64:e5:03:13:51:9a:31:b4:
         de:a2:6c:12:b9:48:0b:b4:d3:18:49:8a:93:27:ba:0c:e7:72:
         04:bd:70:01:92:d2:39:12:c3:db:da:f5:af:65:ed:07:ef:51:
         ac:0f:6a:4d:57:b0:6f:2d:05:c5:ec:74:b2:45:61:57:d3:7e:
         92:b7:9e:c3:2f:69:0a:38:80:e7:60:f9:51:f0:1e:7c:44:ed:
         f8:e4:4e:dd:91:9c:b2:12:32:68:76:a9:eb:fd:58:55:f3:67:
         29:b8:11:34:a1:95:33:77:ed:c5:ee:7a:e1:fe:96:40:ce:8b:
         e3:71:d0:81:5b:99:3c:b4:60:9f:bd:df:87:92:f2:40:8c:be:
         f6:88:ac:c0:fc:93:39:d8:4d:5f:35:60:93:51:fb:ff:bf:86:
         bb:bb:9e:14:77:c4:7d:f3:3c:b6:ca:69:ea:62:81:0d:05:c1:
         5e:09:de:53:75:b9:f9:03:7d:c6:6f:de:7a:01:21:19:8e:2e:
         6c:58:39:a3:ed:8b:bc:a8:a2:32:a4:6b:6b:d8:88:34:f2:48:
         19:bd:db:e7:a0:50:97:4a:72:37:37:e4:fd:fe:cf:60:bd:7f:
         3e:9b:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:49 2025 by rpki-client