Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/cd97753d-ca6b-3444-9aed-99be8d939315.roa
File:                     cd97753d-ca6b-3444-9aed-99be8d939315.roa (raw, json)
Hash identifier:          mPkQkOPoj6NOGi/kEF8Y2hOtMmRTztlUh6C+MgUbbXA=
Subject key identifier:   94:B1:54:8D:A3:9F:3B:93:A8:89:98:82:A4:82:FD:61:AA:F8:C4:2E
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F432858498FFE0D4AD876B9722C829480
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/cd97753d-ca6b-3444-9aed-99be8d939315.roa
Signing time:             Fri 18 Apr 2025 02:46:18 +0000
ROA not before:           Fri 18 Apr 2025 02:46:18 +0000
ROA not after:            Thu 17 Jul 2025 02:46:18 +0000
asID:                     22351
IP address blocks:        66.205.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:fe:0d:4a:d8:76:b9:72:2c:82:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Apr 18 02:46:18 2025 GMT
            Not After : Jul 17 02:46:18 2025 GMT
        Subject: CN=840477b6-846d-4064-9417-53e73e213b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:e1:a7:b0:32:df:25:c6:dd:28:c9:df:2d:
                    1d:be:b1:af:ba:13:b7:1e:10:90:9c:80:88:1b:97:
                    53:5e:8a:45:7d:fa:73:0a:1a:f6:24:13:f1:ee:66:
                    23:c9:14:d0:18:17:48:0d:77:3f:12:7b:7d:98:5c:
                    78:8e:63:4e:63:58:cc:8e:f7:94:4c:9f:f2:8c:e9:
                    35:eb:0b:fb:85:70:6c:fc:8c:14:74:9b:90:79:8f:
                    90:82:5f:6d:10:ea:a1:f9:68:09:3d:9b:2f:59:38:
                    2f:83:a6:06:68:d5:f0:71:74:37:d0:10:c1:6e:04:
                    e2:bd:ac:3e:d5:1e:11:b6:c1:99:89:8c:80:a9:78:
                    ec:54:8e:37:2b:42:62:96:3e:a5:57:7d:27:7c:b2:
                    b5:76:4b:04:ec:0e:a2:20:c0:da:75:03:ab:86:53:
                    c1:66:31:e8:91:17:00:58:53:34:bd:e8:7d:22:55:
                    16:49:fa:ea:b4:f9:a1:d3:c3:44:e8:57:ba:99:c4:
                    8d:5b:55:aa:88:7a:a2:a2:5f:96:f5:9a:45:83:01:
                    14:0a:0a:33:61:0d:d6:47:2c:32:3e:c6:38:3e:aa:
                    ee:55:ee:71:a7:6c:36:a0:cd:05:8f:11:f2:4c:70:
                    c7:50:44:f0:00:0d:02:fd:e1:e8:27:f5:dc:ba:60:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:54:8D:A3:9F:3B:93:A8:89:98:82:A4:82:FD:61:AA:F8:C4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/cd97753d-ca6b-3444-9aed-99be8d939315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:26:a5:06:b6:d6:61:5a:20:c3:71:28:e8:60:e0:6d:02:
         21:12:d2:98:f9:48:57:c0:de:11:7a:77:fa:cc:b2:4d:61:91:
         f4:1a:a5:03:af:b1:a4:62:5d:2f:90:a9:80:ae:aa:62:c4:f9:
         2b:0c:5d:1c:e0:59:4d:48:8b:24:66:eb:f2:74:25:b1:3d:5b:
         3d:92:0d:10:5f:d8:4e:1c:56:8f:96:1e:05:86:b8:83:37:ab:
         e4:0e:86:79:d8:16:39:de:bf:0d:ff:1c:92:87:a5:23:4b:4a:
         23:64:85:80:f1:d9:76:ea:82:bb:2e:2e:2c:6c:49:c2:d4:6e:
         bd:f4:5d:99:60:78:79:8b:50:ba:9b:a1:42:99:79:0e:3f:4b:
         d1:5b:23:38:8e:a2:33:13:a2:82:58:4d:8c:3a:26:e9:6b:ff:
         40:2c:7b:e6:03:56:73:52:66:04:90:35:db:55:10:a2:53:45:
         3d:50:98:16:4a:1c:e7:7b:a8:a2:3c:47:01:0d:67:e8:3a:ba:
         b6:39:c7:99:4f:c4:4a:03:16:84:99:53:d4:9e:c6:10:1c:fc:
         19:85:1b:c6:0e:25:aa:f0:32:34:a8:a8:d7:db:1e:27:85:26:
         f6:ca:11:e5:40:43:ff:77:ec:6a:2d:f8:30:86:b3:16:ba:37:
         d6:3f:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:31 2025 by rpki-client