Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/e3f1b878-8e9e-3f35-b3e0-29482b914a32.roa
File:                     e3f1b878-8e9e-3f35-b3e0-29482b914a32.roa (raw, json)
Hash identifier:          +fETAF/BE7berVvVZzoWZPRGfIN2qRk9lkcIYyLZJzE=
Subject key identifier:   53:F9:68:8C:14:57:26:17:D3:DB:22:8D:AB:B8:2A:EB:BB:37:77:AD
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F432858494E2EA9FB87E07CF1195A6600
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/e3f1b878-8e9e-3f35-b3e0-29482b914a32.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     14233
IP address blocks:        66.43.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:a9:fb:87:e0:7c:f1:19:5a:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=494f12ac-04ff-4137-a115-b79272c00900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:5b:56:45:7f:37:cb:e1:cd:6c:00:cf:ec:
                    3e:13:1a:0f:a6:cf:ca:91:7e:77:9f:9a:ed:5b:80:
                    00:82:04:71:a2:14:af:c7:1f:e5:82:27:df:a9:86:
                    7b:9e:1a:11:bb:c8:92:63:93:82:24:7c:b8:13:bb:
                    b6:dc:97:58:ee:c7:11:b5:b5:9f:6f:60:e1:73:c2:
                    8b:e6:da:c6:83:d1:03:e9:a1:fc:5c:f1:8d:84:ae:
                    4c:de:45:3d:94:e4:01:1d:9a:f8:47:5a:4a:4d:97:
                    ec:45:0e:16:aa:90:b1:64:e5:b6:26:3a:17:74:36:
                    5f:38:53:37:3a:85:11:4d:f8:61:6c:fc:e1:10:8a:
                    df:44:d6:c0:d2:95:5d:da:54:73:cc:5e:41:d8:0d:
                    41:44:d0:d9:1b:61:8e:45:74:59:c4:38:28:70:2c:
                    a2:a6:19:50:61:55:2e:fc:a3:3d:09:77:ff:c9:1a:
                    ba:40:7a:2f:33:96:f5:77:4f:4b:78:e2:77:39:62:
                    bb:4f:ee:9a:ef:e0:dc:d3:62:0a:05:d2:e3:a7:c4:
                    89:76:6e:03:f2:e8:76:a0:0b:3e:b4:f9:df:2f:88:
                    29:1a:d8:90:4d:6f:75:2d:b0:f7:3b:63:8c:49:b4:
                    00:24:8b:f1:be:79:95:57:47:3d:a0:92:d3:40:e3:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F9:68:8C:14:57:26:17:D3:DB:22:8D:AB:B8:2A:EB:BB:37:77:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/e3f1b878-8e9e-3f35-b3e0-29482b914a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:8b:6a:05:1e:fa:35:d8:c0:2e:4c:c1:98:f2:c5:3c:51:4a:
         54:8d:f4:b4:ce:18:9e:9c:43:a0:da:01:5e:1d:18:15:2c:63:
         7f:9d:5f:0f:e2:57:e5:e7:53:25:92:7e:9e:84:6e:32:98:97:
         28:fc:92:41:43:71:95:bc:1f:41:97:36:50:55:45:f3:d6:87:
         ed:bb:2b:0d:43:9c:ba:9c:fc:03:83:10:36:47:eb:91:eb:b2:
         95:d4:d1:d7:a1:3c:d8:d4:0a:2e:81:d7:28:69:f5:81:8f:2d:
         ad:08:77:b2:21:fe:89:c0:54:83:61:64:0a:ad:70:c5:6b:d7:
         38:e8:4f:0e:bb:4c:0d:aa:73:41:78:9b:b4:03:10:41:e6:6e:
         fc:0d:3d:8c:7c:aa:4b:26:5f:01:c1:bc:af:bb:23:89:3c:40:
         c7:90:a7:ce:70:50:13:25:2b:04:18:e7:9d:24:a0:85:4f:0a:
         c1:27:5d:c5:95:27:a8:f1:ab:34:6d:9d:e5:d4:68:11:ca:a3:
         af:ab:35:64:cb:9c:33:93:90:17:61:d7:d8:6b:bd:85:6f:ba:
         4d:84:41:80:96:da:87:83:b2:3a:a3:d9:a6:52:d6:77:1b:e2:
         f8:85:65:2f:df:be:5e:71:c2:a0:7d:4f:2d:40:11:b7:44:4a:
         bd:b5:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:58:34 2025 by rpki-client