Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/82d9812c-3837-3030-b790-8c5bbea8e431.roa
File:                     82d9812c-3837-3030-b790-8c5bbea8e431.roa (raw, json)
Hash identifier:          zibOIzJriAzFXOb4MPE8HZhGrCdjuIQmcVgiMuG99+0=
Subject key identifier:   18:CF:63:AB:B9:9D:96:C0:86:4A:16:A4:1E:A6:43:BE:A1:A4:2C:C0
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F432858497DA4728A58716C2E65D22980
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/82d9812c-3837-3030-b790-8c5bbea8e431.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     54113
IP address blocks:        66.211.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:72:8a:58:71:6c:2e:65:d2:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ff8f9f0c-8505-4ce8-be05-64a1822b5e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:2c:69:70:c4:f9:15:1c:92:56:a3:4e:01:
                    5b:8c:54:be:d0:b9:d5:cc:0b:87:f8:7f:08:dd:8c:
                    91:8a:8d:e4:b8:77:61:48:70:b6:0a:a6:a3:83:ad:
                    99:9d:34:10:2a:c2:af:fd:54:6b:3c:ef:45:87:e8:
                    fe:93:5c:73:31:c9:d4:4a:7c:34:13:dd:ee:60:be:
                    ae:bf:e7:55:e4:e1:7b:c6:ba:e4:55:66:6d:22:10:
                    69:39:04:5b:d7:21:ff:72:93:b7:94:17:ba:1d:a3:
                    1d:8b:c1:df:07:a9:f9:2a:6f:b9:fd:9a:86:82:99:
                    01:10:a4:94:00:ff:8a:61:9b:2e:c8:da:4c:73:77:
                    dc:a9:0c:54:36:37:42:cd:05:db:63:73:ce:fa:a9:
                    b1:5b:40:99:0c:c6:e0:4a:1b:82:da:78:cc:d2:c6:
                    4a:85:e8:b2:04:d3:e6:c6:cb:30:66:c8:91:a7:ed:
                    44:1f:97:ce:8a:08:5b:3a:54:a8:d1:99:4b:7b:7f:
                    7d:72:9d:24:11:8d:d9:e2:6e:79:d7:fa:eb:4d:23:
                    da:9b:20:70:f8:30:89:4d:37:10:25:c9:a8:ec:5b:
                    e4:2a:0c:17:05:d2:74:58:a2:df:78:29:80:02:64:
                    1f:85:70:9e:ab:b4:73:97:6d:21:b1:4b:de:74:35:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CF:63:AB:B9:9D:96:C0:86:4A:16:A4:1E:A6:43:BE:A1:A4:2C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/82d9812c-3837-3030-b790-8c5bbea8e431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.211.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e1:0b:f4:73:f8:f0:70:e6:1d:3c:5a:b5:1f:63:86:f5:8c:
         35:c6:ac:cc:ad:8e:67:4c:11:bc:1f:b4:63:75:a3:05:fd:40:
         99:6f:f2:6b:c1:37:a4:26:83:03:2b:95:6d:46:9b:75:22:7d:
         74:31:4d:a6:02:04:af:68:05:f7:75:0b:11:9d:86:a8:a7:21:
         4d:d5:6e:58:a2:82:4c:b9:ce:45:57:2a:53:bb:3c:12:01:15:
         a0:11:8a:f1:ad:14:b7:40:18:11:71:e3:c9:df:4f:ba:0a:07:
         19:f4:62:dc:a6:29:0c:0b:07:88:87:d7:6f:bb:89:72:ed:d6:
         63:50:3a:0a:ab:f4:80:b4:b6:50:a3:7f:63:86:ec:f6:8f:67:
         5c:d3:99:3e:6d:30:f4:4f:76:e1:34:56:d2:68:51:af:95:36:
         4e:fd:09:11:88:3b:1f:59:16:2a:b7:4d:26:4c:7d:d5:6a:da:
         0e:36:65:c3:0f:3d:43:02:f4:b6:61:4c:5f:dc:09:32:fd:45:
         e9:46:ea:6c:3d:b6:31:71:1f:3d:81:1a:33:15:f6:7c:2c:ab:
         92:04:b5:f3:49:d7:10:87:65:df:cc:a3:32:ee:c2:be:e7:24:
         a7:37:55:4e:a4:51:92:25:41:f9:f3:e6:be:70:3d:c0:de:ec:
         08:93:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:21 2025 by rpki-client