Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/325b3052-7863-3528-815f-58dccfb12c17.roa
File:                     325b3052-7863-3528-815f-58dccfb12c17.roa (raw, json)
Hash identifier:          LHW/DoXlyh+xIzet72RD33UVx2KIheHhq8cJV6S4srQ=
Subject key identifier:   AD:03:A0:8F:DB:3F:F7:93:FA:20:79:55:22:EE:FF:E0:1F:A1:C9:1B
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285849A089D3F2A12AF4C905A9E500
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/325b3052-7863-3528-815f-58dccfb12c17.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     931
IP address blocks:        66.118.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d3:f2:a1:2a:f4:c9:05:a9:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=9a2e2825-bc26-4641-934e-c712e003fc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:6d:20:a0:14:ef:31:ea:1b:5c:0c:27:ec:
                    55:d7:82:2d:18:9d:4f:1a:bd:fd:93:3f:e1:db:9e:
                    aa:f4:eb:8f:82:01:3f:db:ff:06:07:0b:4a:20:12:
                    17:1e:a9:5c:41:15:a4:29:6f:c6:54:88:54:57:93:
                    77:d8:1c:a9:f2:15:f0:f9:65:90:a0:fd:65:0f:9b:
                    e0:40:6b:6b:81:d7:3a:09:2a:83:07:1d:35:03:30:
                    20:80:16:a4:dc:44:a6:a3:ef:6b:a2:11:a5:1b:34:
                    15:05:b0:e1:7d:14:67:2d:9a:55:56:a7:7e:82:02:
                    72:30:de:96:52:a1:a8:7a:43:5f:bf:1c:97:d9:e5:
                    f9:8e:33:bb:ca:88:c2:9a:8c:d9:5d:b8:a5:bc:bb:
                    b2:6b:07:4f:be:99:d5:74:ac:76:0f:18:f2:41:db:
                    ac:dc:0c:2d:d8:ee:d1:7c:c3:a1:7f:32:28:97:a2:
                    75:a1:24:ce:43:7e:40:cc:62:0a:4f:72:78:84:00:
                    85:63:5b:d1:0d:d7:31:be:c4:13:8a:21:af:ae:82:
                    4f:28:f5:2d:2d:99:1f:8c:9c:9d:b8:fd:e4:b5:d9:
                    b7:36:e8:e6:dd:95:8c:63:e7:48:5d:4e:e5:fd:22:
                    d2:c4:08:68:23:9d:c2:0e:86:7c:74:35:bd:2b:6a:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:A0:8F:DB:3F:F7:93:FA:20:79:55:22:EE:FF:E0:1F:A1:C9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/325b3052-7863-3528-815f-58dccfb12c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:af:15:bf:7a:3f:ef:13:f6:ef:6b:df:f5:43:02:b5:7b:
         07:07:e2:bc:77:52:65:1d:70:07:ae:f4:34:2c:39:73:3e:72:
         43:49:aa:93:cb:fb:00:08:8b:c4:63:cc:d8:34:68:8e:4b:14:
         08:3e:4b:46:29:64:64:c2:e0:31:4b:7e:07:d0:ba:bf:5c:59:
         dd:54:69:30:14:d4:96:d3:b7:c4:ac:04:c6:48:19:0f:b2:1c:
         ef:8e:9a:a1:e6:35:6d:47:e1:a4:b2:7b:24:f5:83:f5:1c:8a:
         eb:c7:79:44:be:78:0c:bc:c3:d2:da:88:34:87:5f:d6:cc:25:
         7e:d4:40:79:ef:a5:62:41:ef:4b:7c:7b:d5:c5:0a:e0:d4:c6:
         f0:c0:04:f8:23:32:11:05:7b:b2:4a:cf:35:7a:f9:86:88:9c:
         64:53:4e:1e:1b:5d:37:96:09:70:c1:50:ba:2b:ef:12:88:cb:
         7c:4f:c1:d6:f0:14:98:14:33:78:4e:ab:6c:c3:a9:80:e9:c0:
         0b:99:fb:29:ed:9a:ce:85:96:14:ac:98:2c:13:5f:35:5d:e3:
         0c:4f:33:6a:8f:d3:0a:8c:8d:95:96:c5:34:20:42:66:f1:69:
         01:a4:f2:16:ce:82:18:8c:e7:06:f4:ea:74:9c:20:9c:9d:2c:
         27:e4:40:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:00 2025 by rpki-client