Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/69d94c14-5526-3778-ac02-8d4082fbfbbe.roa
File:                     69d94c14-5526-3778-ac02-8d4082fbfbbe.roa (raw, json)
Hash identifier:          jf/I0zE+ScssIOyGaKs8sLjnf4gVY6pbxg+rg7maP6M=
Subject key identifier:   61:E1:23:56:0E:70:B6:50:84:24:27:1C:D9:39:2E:46:F0:4D:7C:99
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858499AF48ED0F8DCC383A2EC0860
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/69d94c14-5526-3778-ac02-8d4082fbfbbe.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     394437
IP address blocks:        66.249.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8e:d0:f8:dc:c3:83:a2:ec:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=d47870e0-cdb6-4528-963f-29980e803122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:c8:2d:05:62:d4:77:53:42:d3:20:60:dd:
                    fd:ff:22:da:9f:89:dc:88:44:de:a5:6c:10:3d:9b:
                    97:9f:e5:9a:f7:b1:61:5e:51:e8:d2:b8:ab:c9:2d:
                    d1:ef:8d:e4:80:1b:6e:03:12:da:f6:b8:2e:8c:6e:
                    11:a7:e0:ec:bc:c2:10:9e:4e:99:8c:7b:a0:e1:2b:
                    0e:dc:ad:44:46:fd:3d:32:8c:1a:1f:83:78:80:f1:
                    f6:46:5d:3c:80:c0:db:a6:44:ba:0c:c3:e7:45:57:
                    dd:55:5c:0b:98:b0:b6:ad:73:7c:9e:c8:22:b0:54:
                    ba:62:83:ba:56:76:8f:33:09:70:1c:bd:5c:09:8f:
                    01:5c:fd:a1:6e:76:04:c7:86:10:f2:bd:46:7b:78:
                    03:b8:73:02:12:80:8f:a3:a7:c9:72:bd:ff:e5:44:
                    82:8a:a6:65:20:d3:5d:75:35:53:e1:b1:2c:88:5a:
                    d5:03:7d:75:55:eb:55:cc:a1:69:a7:7e:80:9b:b4:
                    84:81:c9:d0:86:fe:a2:05:12:95:5f:76:2c:dd:81:
                    c0:59:88:4a:99:1c:43:56:af:7b:e9:a5:f8:43:3d:
                    c7:45:8a:a3:a4:3d:dc:9f:d6:a0:7f:b7:7e:16:36:
                    38:07:0b:75:13:3e:18:84:c8:5f:f8:59:c2:83:e8:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E1:23:56:0E:70:B6:50:84:24:27:1C:D9:39:2E:46:F0:4D:7C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/69d94c14-5526-3778-ac02-8d4082fbfbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:f9:5d:88:2d:80:62:63:6e:68:0e:cd:f0:4c:3d:1e:5f:
         3e:1a:60:2b:11:76:b4:3b:96:13:1f:4d:8a:a9:87:06:60:65:
         49:58:f0:24:d6:84:8b:26:01:7e:16:4e:cd:90:05:10:33:95:
         dc:33:1b:3b:09:5c:15:f5:94:d7:25:b0:4c:c2:d9:09:b2:81:
         e8:98:40:be:b7:93:03:36:72:8b:77:d7:39:5d:7d:20:33:d2:
         74:b0:fa:42:94:8a:11:48:c6:dc:d4:c2:c0:e6:b7:14:7d:72:
         d0:bf:68:87:6f:67:7d:17:26:95:cb:7f:38:5b:49:6c:9c:c5:
         d6:7e:42:27:8c:52:98:c0:8a:a4:c5:bb:95:e8:10:89:6d:b1:
         91:4e:b6:8f:fe:db:8f:e2:3a:b3:b4:f5:a9:71:38:8f:b4:22:
         88:28:55:3c:cc:bf:29:b8:57:18:cd:ef:45:66:3f:67:1d:a9:
         7a:dc:e8:c0:9d:d4:5c:eb:f4:0d:7b:17:1d:3e:48:47:e8:b1:
         7a:1c:67:ad:a8:8a:a6:6b:3d:1d:cd:77:b4:f2:a6:50:84:c5:
         fb:c0:14:bc:44:cc:70:18:7e:c0:d4:3c:9b:1a:0f:28:96:48:
         89:7f:49:80:09:66:fa:46:45:6a:5f:87:31:d3:21:a0:e6:42:
         89:aa:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:07:27 2025 by rpki-client