Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/86de727b-71d6-3fa8-9776-fa4526fe6dae.roa
File:                     86de727b-71d6-3fa8-9776-fa4526fe6dae.roa (raw, json)
Hash identifier:          8tu3OpCvFIaVYJ5YeiF3QQnxGZVkP/ZpbQ/fVTXMN1Y=
Subject key identifier:   60:62:B6:E2:82:6D:F1:45:44:D1:DA:0C:26:22:6A:74:5D:39:68:24
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858499F249D5301CB2DC086DF3B40
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/86de727b-71d6-3fa8-9776-fa4526fe6dae.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     33635
IP address blocks:        66.36.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9d:53:01:cb:2d:c0:86:df:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=f1fa4058-c8b2-41c7-9b44-7e99bf7f9b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:bf:34:f4:eb:53:26:d1:2a:ee:d2:4c:52:
                    b7:60:94:42:59:1f:ee:b4:b3:4d:6b:b9:0a:4a:0b:
                    bf:9a:8a:9f:0c:7f:c2:84:b1:9d:2c:80:82:ad:a7:
                    84:33:1f:27:32:62:9d:59:91:e1:04:7a:6a:0f:ba:
                    79:be:d2:88:54:2e:b0:40:45:98:14:c6:a4:11:bc:
                    4f:1b:85:36:ed:4e:48:f7:b3:b2:af:9d:b3:3d:4e:
                    06:ae:f3:5c:8b:a6:34:45:a5:1f:44:48:e6:f2:5c:
                    fe:5f:da:2d:a9:a1:61:14:13:0e:0d:c3:a4:e1:ff:
                    b6:86:b9:dd:84:20:30:87:7c:6e:4f:97:9a:8d:28:
                    b4:1e:5c:d6:ef:75:d2:f7:66:95:f9:ac:30:be:86:
                    4c:45:84:2a:9e:f7:1f:6f:e1:ba:3b:77:24:9b:ab:
                    8c:3f:a8:82:14:4a:1d:25:c0:26:22:ba:71:13:ed:
                    3b:40:76:60:5a:77:82:39:a2:d3:ea:87:f3:96:36:
                    f5:e5:a7:51:42:37:d0:c4:90:23:25:9d:51:ea:8f:
                    7f:8c:33:66:b0:77:d0:bd:94:c4:a3:9d:87:2b:35:
                    1f:40:db:d7:fc:ed:41:75:28:d8:03:43:64:23:32:
                    79:be:30:9f:16:3b:74:e3:c2:77:8a:42:89:1f:e6:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:62:B6:E2:82:6D:F1:45:44:D1:DA:0C:26:22:6A:74:5D:39:68:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/86de727b-71d6-3fa8-9776-fa4526fe6dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:76:33:6a:ad:d4:36:be:ce:c7:f8:d2:67:8c:28:5a:ee:
         44:d1:c4:35:6b:d9:79:fb:ce:1f:41:e2:a9:78:0a:8c:d3:42:
         7d:8b:7f:d1:fb:1c:61:f6:63:1c:97:a4:02:4c:4d:b2:b6:52:
         a3:92:86:c7:43:92:06:12:ab:c8:27:0c:de:2f:ed:8f:4d:37:
         1b:14:2e:01:0c:7e:a1:04:9e:a2:d3:6a:c2:b1:da:1f:f3:80:
         db:d1:f8:98:37:f2:60:e1:bc:c5:8f:8b:9f:d7:bb:36:f7:b3:
         bd:cc:c5:a2:67:71:19:49:6b:b2:0c:0d:0e:06:69:37:03:e5:
         ee:f1:a9:ba:91:d1:70:a1:11:82:97:21:13:d6:ed:11:9a:8b:
         3d:b1:ec:a7:1a:db:e3:44:4b:de:0f:1a:e3:07:39:5b:c8:46:
         7f:fb:7e:74:33:e2:57:eb:58:df:ef:84:74:a1:6f:e7:68:02:
         c1:1b:dd:14:20:22:5a:78:e1:7d:b5:d0:4d:94:fe:0c:41:4b:
         b2:9e:fc:5c:64:ff:ca:47:87:9f:ad:84:dd:f3:a2:60:2a:a4:
         02:d4:94:73:3a:72:97:b7:81:f0:38:4e:21:1b:fb:bd:cd:57:
         3a:51:2b:42:83:1b:3f:5c:13:b3:1e:8e:fd:fa:8b:b9:41:4f:
         ae:19:c5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:52:31 2025 by rpki-client