Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa
File:                     fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa (raw, json)
Hash identifier:          e9rvjOXEnnLua94jmuzf2x1aWs9nzAE9WDJ7Dpl1X7Y=
Subject key identifier:   9B:4A:13:FF:ED:32:F5:2B:A8:A1:0D:B5:B1:8E:44:EE:8B:52:3C:B1
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285849A61F3AB8A0B4129594EAA640
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     35927
IP address blocks:        64.18.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3a:b8:a0:b4:12:95:94:ea:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=f9958a92-6d20-4c8e-9e91-8e01daba6e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:32:58:12:ee:bf:41:4a:3d:08:44:fe:75:
                    cf:16:57:be:60:ff:ad:91:78:1b:7c:b8:34:63:2c:
                    ed:ed:ec:4a:dc:c2:11:e1:53:73:8e:92:51:72:ec:
                    0e:b9:09:a3:20:29:e0:82:fe:26:78:e1:67:97:3c:
                    3f:30:6b:65:d2:c1:bd:fb:7e:6e:ef:ae:21:42:4f:
                    39:e3:95:b3:89:62:48:4d:4c:0d:c7:5a:a6:34:32:
                    ae:43:be:de:8d:03:44:ac:28:83:cd:cc:14:22:e6:
                    72:ac:98:0d:ff:02:87:7d:6a:ca:bf:95:3c:fc:36:
                    4d:60:1c:ae:74:23:01:9a:ac:6c:81:23:05:10:46:
                    6f:37:44:10:53:26:eb:a7:da:7a:ee:6b:14:01:e3:
                    f6:63:65:fb:a9:cf:f6:65:a2:18:8b:a6:5c:ae:fc:
                    1f:75:3d:c5:f9:1f:1e:71:70:23:a2:46:47:2b:99:
                    b0:b3:77:42:20:d6:15:d0:77:81:fb:7a:0a:37:c6:
                    1a:1d:95:cf:94:2a:1a:68:f4:21:7f:5f:28:93:c7:
                    33:08:e8:92:23:75:c0:0c:7d:c7:5c:74:05:6c:12:
                    79:82:d7:39:6b:7b:af:37:19:23:50:df:ae:3b:0c:
                    3c:ff:30:30:3c:e3:2e:a1:ef:95:80:ab:c6:e2:42:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:13:FF:ED:32:F5:2B:A8:A1:0D:B5:B1:8E:44:EE:8B:52:3C:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:34:0b:a8:7e:97:9a:67:6c:64:0e:15:23:87:d3:ea:6c:f8:
         d8:8a:7e:93:df:5f:ad:4d:08:22:6a:48:cb:c2:51:b0:b8:ae:
         83:c2:c6:5b:2e:57:e5:4e:cc:2b:d8:cb:88:d3:be:47:80:0f:
         de:a9:69:fc:1d:1a:0e:b7:d8:ce:05:8b:fa:46:bb:ff:fd:8a:
         5b:8a:45:5e:6b:20:ad:cb:0f:cd:db:d8:49:9c:c7:0a:e1:f8:
         b5:ee:d1:07:df:29:04:78:a3:c0:ee:20:a3:65:4a:1f:2a:e3:
         df:08:4f:63:0d:f1:37:77:e4:be:4f:a9:92:32:1c:0b:ff:e3:
         d0:9c:de:ef:71:cf:e9:e7:94:d9:bf:58:d9:2e:0b:6e:3c:46:
         b7:48:33:d7:d5:19:1b:f3:fd:ed:c6:9e:cc:75:42:40:55:a9:
         de:81:40:ac:13:4d:f0:48:da:64:aa:06:9c:3f:b8:cf:a7:12:
         ab:51:9e:12:1f:9f:4b:c4:d3:1c:0d:4c:ee:bd:f2:2f:03:ed:
         6e:47:61:e0:1c:9b:cd:54:fc:74:48:d6:2e:86:b4:02:d8:0a:
         1d:a3:9b:3f:44:3e:69:cd:e4:c4:11:53:94:23:b7:c0:ca:4f:
         ca:55:ec:23:b0:2d:6e:86:60:80:39:67:02:92:7f:87:16:0c:
         b5:cc:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:09:22 2025 by rpki-client