Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/0a3ee542-520e-3113-b582-acacd8e840f4.roa
File:                     0a3ee542-520e-3113-b582-acacd8e840f4.roa (raw, json)
Hash identifier:          WlzE43/Lgs/UvT0NCj7GNDmxLgs6Hj/8eAer4UOh+70=
Subject key identifier:   42:EF:59:2E:22:B9:5E:B6:48:9F:0F:36:15:67:1F:BA:8B:71:76:F4
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858499F249D8E1CC22F06DA5C8800
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/0a3ee542-520e-3113-b582-acacd8e840f4.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     33635
IP address blocks:        66.36.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9d:8e:1c:c2:2f:06:da:5c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=947f43ed-a9e9-46fd-9a28-4bece00b2435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:c3:14:dd:0e:2a:02:e8:34:b7:c2:c1:ba:
                    4c:43:59:72:b1:8f:2c:4b:87:6e:ae:17:63:e2:18:
                    73:7b:38:89:ee:24:0f:83:75:4c:53:b1:72:09:a2:
                    60:57:71:f2:9f:78:ad:a1:fa:6b:71:08:60:32:99:
                    05:b5:95:19:b8:40:d9:2e:8a:61:44:7c:8d:f6:cd:
                    d9:08:4f:91:67:45:3d:77:d6:e0:06:60:51:3b:35:
                    03:a0:93:48:0b:e8:c8:ed:db:e5:2e:22:54:74:0b:
                    d9:60:88:32:d7:c3:69:3f:80:96:8e:92:5e:a0:05:
                    77:63:37:89:c6:1c:2f:cc:b2:1c:53:ed:40:b4:cc:
                    fc:b5:a7:52:a0:6a:91:aa:f0:6e:90:6b:a1:d2:6e:
                    94:5d:c3:87:4b:6a:f2:ac:6f:9b:b5:73:06:cc:bb:
                    a4:76:d8:e8:64:d9:1f:ac:20:95:be:4f:94:6b:6f:
                    ba:c9:6e:1c:94:54:57:54:47:69:a9:41:b8:8a:83:
                    53:26:21:22:d6:7d:be:8b:66:4f:55:b9:f1:9c:be:
                    ce:7b:d6:90:2b:02:ae:0b:f2:50:37:2c:50:03:c7:
                    71:97:f2:be:d4:32:1b:bd:32:90:30:95:d8:40:7b:
                    fa:ca:ad:80:4b:b0:11:eb:18:95:9f:e8:b4:49:80:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:59:2E:22:B9:5E:B6:48:9F:0F:36:15:67:1F:BA:8B:71:76:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/0a3ee542-520e-3113-b582-acacd8e840f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:bc:c5:70:03:11:c7:ae:31:3c:e1:c1:57:80:1a:a4:29:
         f1:aa:97:b7:89:76:07:f6:8e:f2:b9:70:f6:e9:e0:e6:fc:bd:
         9c:7f:f1:11:13:3b:d6:87:00:db:61:4d:45:fe:90:a2:b5:5e:
         83:e3:f3:0e:a3:e9:22:be:ef:02:90:e5:18:67:7c:88:5c:8b:
         8e:5b:c4:ef:0d:45:3d:85:18:ff:b1:7f:f2:99:96:ff:37:99:
         d9:c3:d8:49:c9:fe:ab:55:22:e1:ae:ff:48:91:c8:56:ec:f0:
         1a:5d:e4:60:ed:81:31:87:c3:54:f2:22:78:9e:0d:69:94:e0:
         44:f3:00:02:b9:7e:56:08:06:49:96:08:3b:b7:1d:d4:bb:95:
         5f:ac:8e:39:2f:91:7f:d9:ec:d1:e8:3c:27:11:3e:d1:c8:08:
         b7:22:82:82:ea:ad:de:27:f3:0f:56:7d:3c:fd:9c:91:89:4e:
         ef:86:6a:ec:ad:c2:69:8c:44:25:07:a2:a5:26:f9:93:eb:ae:
         80:15:9a:0c:d2:da:7a:0f:a0:f3:62:1d:64:ad:b6:57:1d:ff:
         63:0e:74:98:19:44:24:ff:34:4e:fc:59:dc:9d:4b:62:5c:0c:
         56:3c:ae:0e:5c:af:c8:6e:8f:31:94:b8:c9:ce:c1:d8:bd:f3:
         15:db:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:56:00 2025 by rpki-client