Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa
File:                     8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa (raw, json)
Hash identifier:          qT6dGL6UBf2G5FQf4TZlWqv8T/RTJNzaSr28su1Q1k0=
Subject key identifier:   27:BE:2F:C3:5B:33:9D:B8:1B:C9:78:B7:FF:47:AA:EB:9F:B0:E7:92
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F432858494E2EAD18704EF1EDEBCDE900
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     36175
IP address blocks:        66.43.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:ad:18:70:4e:f1:ed:eb:cd:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=fe2fd9cf-2d8f-4a2e-a044-2a4460a78b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:dc:b9:9b:dc:fe:ee:6b:e3:de:28:81:54:
                    58:1b:25:16:ae:5e:6b:45:dd:32:4d:9c:1d:ac:3a:
                    ff:e9:bf:30:a9:c9:4b:58:b6:a3:16:68:7f:85:ed:
                    2f:a6:24:2c:68:66:48:0f:03:73:20:f2:4a:34:01:
                    a5:bb:24:b9:98:b4:8a:ba:61:ff:a2:8a:49:88:72:
                    a1:7a:b1:89:01:ce:de:34:d9:8e:53:a3:ed:90:e3:
                    3a:a4:d6:d4:ec:e7:59:ed:07:8d:ea:50:52:66:ba:
                    66:cd:17:40:bc:f5:c6:b7:38:63:c5:0b:b1:33:6a:
                    7c:31:c1:67:89:e9:6f:31:d4:20:a8:67:99:69:d4:
                    26:b3:d1:dc:a8:5b:69:ae:8c:46:72:db:ec:e2:ae:
                    50:c1:43:13:ce:05:e2:e3:13:08:17:5e:b6:59:51:
                    f1:41:ce:5c:82:f7:d0:45:a4:ba:cb:90:70:bf:27:
                    53:9d:c9:3e:63:02:2b:7a:5e:f1:df:60:12:86:ad:
                    6e:46:b2:77:4b:51:dd:76:ca:ab:2d:54:4e:77:ef:
                    6a:2a:f7:0d:02:89:20:38:41:4d:33:f8:d0:f1:b3:
                    38:3c:d3:ae:04:bd:57:18:fc:3b:d9:1b:93:15:c5:
                    b4:eb:1e:1d:db:a8:8d:e4:fa:c9:12:62:10:9a:0a:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BE:2F:C3:5B:33:9D:B8:1B:C9:78:B7:FF:47:AA:EB:9F:B0:E7:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:06:d6:f7:d6:6f:c4:06:3c:6b:2b:81:99:48:8c:14:a3:f3:
         d2:5c:04:d6:ad:5b:6b:cc:b1:1d:43:34:95:56:32:97:b1:17:
         0a:55:a3:47:8b:85:05:de:b5:94:0a:f9:b7:b3:c1:ff:bd:66:
         36:a0:d1:3f:62:b3:ae:98:bd:eb:a7:63:2a:25:ed:66:89:91:
         fe:7d:65:e9:49:b6:cf:29:d9:5f:cc:d9:c3:6e:ec:1f:79:ff:
         5c:60:94:32:ae:3c:b7:48:2b:eb:2f:4f:3a:65:ed:ad:83:9b:
         c4:26:9d:b8:ad:a8:78:ca:52:06:84:e2:5d:2e:b4:ce:8d:27:
         fd:4f:4e:6f:aa:25:c1:73:24:a2:bb:b9:38:60:6f:66:b0:08:
         d1:fb:e9:7e:e5:8d:bd:57:0b:24:0d:11:d8:c9:37:ee:2b:46:
         75:3b:9f:4c:7b:69:34:65:31:3f:c9:ce:bd:9a:37:4e:90:ef:
         c0:d7:8e:1f:b4:c0:8f:93:81:6c:81:94:fa:67:33:08:7f:e7:
         94:67:3a:94:90:d1:7c:bc:85:37:1c:11:b3:d3:cf:63:66:11:
         9f:c0:36:b2:fc:26:ce:f4:f0:45:27:d2:d4:64:0f:c1:47:74:
         69:5b:25:ed:75:79:70:98:9f:c8:b9:f7:c3:fa:2b:a9:59:a0:
         1f:f8:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:45:38 2025 by rpki-client