Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/8bcfa752-e4ff-3037-b0f2-5da95ba08512.roa
File:                     8bcfa752-e4ff-3037-b0f2-5da95ba08512.roa (raw, json)
Hash identifier:          hFN+Xs0AeNOAy7LRDC6iIUCboRPIoo09s17/7mX06S4=
Subject key identifier:   36:3E:D4:3F:2C:D0:8D:FB:F7:0A:2F:6D:60:F9:8B:4A:70:8E:B1:E6
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F43285849B051B3FCA286E9C665C19240
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/8bcfa752-e4ff-3037-b0f2-5da95ba08512.roa
Signing time:             Tue 29 Apr 2025 16:40:43 +0000
ROA not before:           Tue 29 Apr 2025 16:40:43 +0000
ROA not after:            Mon 28 Jul 2025 16:40:43 +0000
asID:                     16992
IP address blocks:        66.37.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b0:51:b3:fc:a2:86:e9:c6:65:c1:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Apr 29 16:40:43 2025 GMT
            Not After : Jul 28 16:40:43 2025 GMT
        Subject: CN=192051d1-bf93-45a5-b17f-c2d052dc8fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:7e:b6:28:4b:26:1c:04:6e:71:57:2a:7d:
                    b6:62:8b:14:06:aa:ab:16:4a:f7:12:90:51:98:3b:
                    89:83:72:e7:26:0c:27:3e:82:f8:63:4e:81:17:dd:
                    5a:56:91:c1:3a:ed:66:cd:6f:9d:22:25:4e:9b:a1:
                    59:40:aa:a8:7b:e2:38:fe:32:fc:c3:4c:0d:a8:fa:
                    90:61:a2:1b:13:cb:23:f0:90:99:87:40:26:6a:a2:
                    f4:26:a6:d3:e3:3d:db:cc:0e:8c:df:02:07:dc:da:
                    79:e4:fb:7f:45:2f:64:32:c8:60:59:25:12:ce:c5:
                    93:d7:51:2c:a8:1c:6e:db:f2:6e:05:94:dd:13:cf:
                    e3:f3:db:c4:ab:6e:b3:0a:16:4a:ec:6f:6c:9b:74:
                    29:c4:fa:81:26:50:6d:b8:20:0f:80:1a:50:fa:91:
                    10:25:69:18:b3:b7:b5:49:64:0b:61:2f:5f:26:76:
                    13:8a:9d:ba:59:e4:b6:1e:2e:80:5f:59:3b:1c:e9:
                    67:97:18:e6:be:8b:1c:86:3c:6b:6f:3e:2f:ff:08:
                    43:2e:38:10:14:90:c9:43:c6:b7:4a:90:1f:95:3d:
                    22:48:7e:20:ec:16:04:ce:5b:0f:c2:95:5b:00:d8:
                    44:c7:75:03:9c:65:c1:bd:91:77:d7:dc:4d:77:cb:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3E:D4:3F:2C:D0:8D:FB:F7:0A:2F:6D:60:F9:8B:4A:70:8E:B1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/8bcfa752-e4ff-3037-b0f2-5da95ba08512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:b4:22:7a:b1:33:2d:af:ad:8a:14:8d:12:00:79:18:25:
         0d:d0:8a:4f:4c:f1:60:eb:f7:d1:60:18:bf:97:58:77:6b:cf:
         5d:f1:d9:f4:8d:5c:9e:54:32:8c:3a:14:14:92:ff:64:bb:a6:
         54:ad:e4:9e:f3:97:51:60:02:7a:54:bf:84:a8:45:ab:a5:a9:
         50:06:d9:e3:b3:52:af:d7:9c:22:1a:85:9d:67:32:d7:c5:1c:
         75:9c:29:43:3e:33:f7:6e:56:c6:8c:87:dd:ef:9d:83:63:d2:
         3c:c2:22:b8:e8:e9:09:09:b8:1c:ef:52:82:a9:a4:e5:0b:c2:
         5a:06:77:5e:08:3b:c3:f5:4d:08:69:c7:89:f8:34:5f:66:32:
         cf:7f:0c:19:97:34:bf:a6:e5:cd:c5:17:2b:41:ad:f5:87:eb:
         ea:83:06:bc:31:7c:f4:2c:e5:df:d6:28:8c:22:56:fc:15:02:
         28:36:33:cd:44:61:3d:c1:8f:56:7f:a1:79:85:b3:11:9f:05:
         fc:c1:68:a0:30:b4:b9:8d:fd:54:81:77:44:20:70:f8:4a:06:
         6a:e5:a0:80:4f:02:54:0f:e9:6d:b7:b2:5f:3d:0b:8f:35:d0:
         fb:be:b4:62:5f:6c:be:30:f9:89:4c:21:c1:c4:46:87:a6:8e:
         b0:08:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:59:02 2025 by rpki-client