Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/1d939e16-2f4c-3cf5-afe4-ac30f6f461e0.roa
File:                     1d939e16-2f4c-3cf5-afe4-ac30f6f461e0.roa (raw, json)
Hash identifier:          Rb58HZ8HI+lmyy/acf91hEHprimk4vUNse93o1h1JDo=
Subject key identifier:   2E:64:9F:E0:8F:68:31:6F:68:BA:8F:E1:1E:B3:92:5C:9F:D5:43:CC
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F43285849B050D40F14EAB36287CA6E80
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/1d939e16-2f4c-3cf5-afe4-ac30f6f461e0.roa
Signing time:             Tue 29 Apr 2025 16:38:57 +0000
ROA not before:           Tue 29 Apr 2025 16:38:57 +0000
ROA not after:            Mon 28 Jul 2025 16:38:57 +0000
asID:                     16992
IP address blocks:        66.37.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b0:50:d4:0f:14:ea:b3:62:87:ca:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Apr 29 16:38:57 2025 GMT
            Not After : Jul 28 16:38:57 2025 GMT
        Subject: CN=0e6f74b1-3216-49af-acfb-e2ad7088fdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:3d:90:2c:3c:4a:4d:d5:54:77:1b:fa:0e:
                    ce:ec:8a:0c:9a:75:e3:24:04:02:00:68:8b:f7:dc:
                    50:3c:7c:35:4f:b8:50:57:d4:3d:32:25:4f:5d:4f:
                    65:b1:a9:96:0e:fb:6b:60:b9:6d:55:cc:b5:63:dc:
                    ca:2d:ce:7e:de:5f:5e:cc:d2:3f:f9:17:05:56:7f:
                    73:f0:62:a8:f8:38:5a:b9:3c:04:e2:71:4e:48:5e:
                    21:e9:12:76:25:78:c5:27:ab:53:46:dd:93:59:1a:
                    94:ba:af:8c:f3:06:35:09:61:cf:96:62:f2:f8:79:
                    28:5b:b0:5d:82:1e:37:e0:55:7c:03:df:14:ce:cd:
                    73:79:45:0b:0d:4a:af:9e:e7:23:54:f2:fe:c2:67:
                    50:bd:75:4c:f1:cb:dc:b0:bd:98:50:91:34:a1:19:
                    8d:38:dd:02:04:f2:7c:9f:c1:fb:b6:53:19:c9:15:
                    dc:90:33:17:4d:ec:0e:b9:53:96:39:a0:85:c9:25:
                    3c:0c:c6:e5:2d:1d:f2:12:29:cf:c5:c6:e8:2e:38:
                    8d:f7:55:6d:1c:f3:4b:f7:dd:f1:14:30:ec:cc:ca:
                    eb:de:18:2e:78:81:2c:09:ac:a8:b0:d9:c5:f4:f2:
                    c2:3b:dd:c0:6d:33:6a:be:76:f2:fa:e1:07:23:02:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:64:9F:E0:8F:68:31:6F:68:BA:8F:E1:1E:B3:92:5C:9F:D5:43:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/1d939e16-2f4c-3cf5-afe4-ac30f6f461e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a9:f8:66:cd:ca:b9:70:cd:4b:9e:61:bb:c7:8c:96:50:db:
         8b:bf:c1:ee:9b:1f:b6:17:68:73:17:08:5e:4c:ee:74:14:c4:
         ea:dc:ad:5d:4e:40:8e:63:97:5f:e4:6f:53:d8:3c:4a:f7:15:
         6b:4b:9f:09:50:79:8f:f0:dc:f5:c6:65:97:5d:6b:c0:d5:a4:
         9d:49:0d:b1:50:ee:5e:81:0b:5f:db:2b:d8:b1:2f:c5:af:7f:
         ad:f3:ec:fe:53:bc:13:d3:c9:fb:f5:87:22:dd:1a:e1:a6:dc:
         5e:fb:0e:ef:f2:d8:9e:57:77:2e:56:ae:85:7b:4e:53:bd:91:
         8b:c9:e1:5c:98:39:b4:0c:41:87:bb:ee:ea:93:3a:21:fb:2a:
         f2:1c:52:29:ae:bf:3b:17:14:8b:9e:d3:84:33:ee:d3:29:ea:
         97:05:c3:f5:ad:ed:11:66:4a:a3:89:bb:06:eb:b4:2b:85:be:
         55:80:1b:e2:92:e3:b3:8c:02:da:93:ef:dc:8c:61:d4:b4:8c:
         aa:8a:53:f1:2a:af:75:c9:f0:93:b2:29:45:76:a6:e6:67:3d:
         83:aa:a4:d1:66:6b:28:af:1c:36:a6:6c:c3:01:91:24:05:80:
         b0:1e:ed:62:ae:18:de:1c:33:e1:12:b4:5b:25:1b:ca:f4:a0:
         64:13:05:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:06 2025 by rpki-client