Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa
File:                     0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa (raw, json)
Hash identifier:          MW7yOAQP68zuw3FeeXYA/DuO4pF9d+TTU4MB1DU+NNs=
Subject key identifier:   29:B8:CF:7B:55:03:94:0B:85:5A:9C:EE:82:F9:01:14:7F:79:58:9D
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F43285849D594EB19B9AE7EA604ABED80
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     396998
IP address blocks:        66.37.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:eb:19:b9:ae:7e:a6:04:ab:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=f042516a-5754-4eaf-bbba-12a947f07386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:de:88:80:1a:bc:d3:28:6f:c4:5f:7e:92:
                    92:af:4d:a4:0a:5f:1f:d3:1e:64:6c:c0:0c:a2:22:
                    5b:d1:f6:7c:f8:d2:00:92:ef:40:f0:13:41:8d:d5:
                    57:3b:4b:91:7a:62:91:2a:5f:5d:73:14:0d:76:89:
                    a5:ea:77:bc:19:06:bf:2f:64:94:75:ca:43:06:4b:
                    41:71:7e:bb:7f:a3:1c:cf:5c:c3:5b:fa:32:8c:d9:
                    13:c9:95:8a:8a:43:c7:1a:f0:01:0b:d0:76:76:26:
                    60:a9:88:7e:01:29:e1:94:91:9b:76:67:a9:b1:a2:
                    99:92:d2:35:77:16:6f:0a:34:18:47:0f:69:62:ed:
                    12:97:f7:12:ce:76:66:99:3a:a3:05:08:20:dc:0a:
                    0e:e2:d4:a2:e7:f6:62:2d:b9:00:e7:bb:7e:d5:08:
                    ee:b7:57:e4:af:ee:01:ff:dd:5a:08:2d:da:0d:8b:
                    8c:77:6b:86:a9:0f:14:ac:6b:06:35:f4:94:4b:40:
                    e3:95:76:89:10:d5:03:42:8a:b8:65:40:37:7e:16:
                    8a:b4:ae:0b:ca:5a:71:de:48:95:1d:c2:50:ef:0b:
                    f5:e3:7e:e8:dd:05:8e:34:1e:8e:3d:ec:67:b3:2f:
                    c6:13:f8:0f:cc:b1:cb:ff:50:9b:4b:85:34:25:29:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B8:CF:7B:55:03:94:0B:85:5A:9C:EE:82:F9:01:14:7F:79:58:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/0faa3cb7-4224-31cd-a2a3-c2532ee47086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:36:9c:bf:12:75:b9:6b:b1:9e:1e:a0:af:7a:93:30:59:
         bd:2c:40:e8:81:bc:4f:e7:64:04:6a:bc:cd:06:8b:8a:e9:34:
         1f:c2:74:36:78:5a:74:90:76:1b:ce:b3:b8:e3:78:cf:3b:67:
         8a:79:bf:ad:0d:26:4a:76:9a:11:eb:5d:3c:a3:04:4a:9a:7d:
         80:4f:8d:6d:23:81:98:b4:16:6f:71:bb:ad:4f:61:05:98:53:
         47:d1:38:e3:c8:71:c5:87:6e:bc:b6:33:6d:cf:7e:1c:5e:8f:
         7a:08:de:48:4a:4f:2a:b9:4c:7f:61:98:de:4f:7a:76:26:f2:
         3f:d7:ca:11:1e:1c:30:6f:54:0d:30:80:5b:63:39:51:05:40:
         60:62:b7:4a:d9:a0:f0:ec:f2:6e:75:39:d3:3d:f9:99:3b:2b:
         42:36:1d:b7:28:31:78:1f:06:5f:bc:4c:85:01:a8:e8:48:75:
         8a:0f:03:96:de:50:f3:c1:e1:bb:56:1f:59:29:2d:fb:b2:bb:
         7e:59:c7:5b:3e:93:81:b3:c6:7b:99:fd:25:3a:f2:ce:97:28:
         38:bf:f6:d8:f6:d0:12:25:32:50:9e:f9:bc:e2:25:49:79:d4:
         8d:79:3f:58:49:e1:e7:fd:31:af:9e:9e:c3:ca:c5:b3:01:c9:
         e3:0b:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:33:33 2025 by rpki-client