Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa
File:                     4d94651f-74dd-36ba-996a-ca1e133d2794.roa (raw, json)
Hash identifier:          xMPE74+Pbc9CW7EB5YaQ25Srbyo7BtmaFu96U/Vsq9o=
Subject key identifier:   EA:9B:AD:13:7F:1C:47:DB:FA:F0:C5:52:A2:F4:ED:7D:58:FD:8E:02
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F43285849E7BA88046258BACDD1A77980
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        208.66.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:88:04:62:58:ba:cd:d1:a7:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=597f9f7c-d97c-4d01-9efa-baee5b1dd6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:c7:17:9f:b1:9c:9a:5c:67:16:69:7c:e0:
                    e9:2e:90:ca:2c:c8:ac:d8:47:b9:ec:04:ae:66:94:
                    77:fc:b6:aa:1e:7c:e5:c5:bd:8d:66:13:31:4f:80:
                    9f:b9:fd:9c:a6:c2:73:da:b1:0e:96:05:ee:8b:5b:
                    01:8b:3f:82:8a:19:3c:66:7e:f2:f4:0d:c4:d0:34:
                    1d:4a:7e:1f:d6:fb:7a:2a:51:64:c9:31:82:83:84:
                    d5:9d:e2:6d:97:31:09:40:7c:f0:90:1b:c4:5f:e4:
                    b4:5c:e3:83:d3:39:9f:8a:31:16:f2:9f:1a:0c:e2:
                    59:54:24:b2:31:0b:f6:ef:8b:fa:30:6f:2e:ea:7e:
                    7b:0e:53:e1:d0:6c:d5:14:e7:62:44:ba:8f:b5:81:
                    39:c3:a7:d1:37:03:ff:58:e4:29:cc:30:36:27:c9:
                    c3:ca:2a:92:43:43:a0:9c:6d:88:4a:71:9a:36:53:
                    ef:03:d2:6f:7f:9a:b2:5e:c6:b1:8f:df:0f:74:3f:
                    b7:50:c1:e5:24:19:98:f5:5a:6f:8e:da:38:6f:68:
                    2c:92:7a:2b:70:6d:21:58:9c:02:9b:8b:c2:fc:d2:
                    12:63:5e:62:81:5e:c5:13:70:e9:21:00:c2:75:e9:
                    f3:50:e9:6b:0a:00:fd:25:fe:30:75:ab:1b:e1:fe:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:AD:13:7F:1C:47:DB:FA:F0:C5:52:A2:F4:ED:7D:58:FD:8E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:7a:83:a2:1b:4a:10:6a:e1:34:37:18:0e:a6:93:26:6c:
         38:5e:5a:15:23:19:87:ab:eb:d9:54:0a:42:f0:2d:e3:92:38:
         ea:b1:27:58:fc:7f:2a:62:19:9e:7b:c0:2c:2c:76:9c:e1:75:
         98:1c:57:56:0b:31:67:3f:68:de:9b:6b:00:2b:d2:d7:bf:ce:
         61:a4:76:ef:6e:b6:52:bb:f8:20:d7:2b:56:f0:02:f2:b2:51:
         ec:a4:d4:a7:26:00:12:7a:a6:8c:dd:e4:61:f3:e2:0c:af:e8:
         b8:a4:79:9d:2c:80:17:b6:79:37:10:69:ff:38:14:90:de:4f:
         ff:26:38:31:99:7b:57:f3:e8:94:6f:1d:ea:7c:a5:22:ca:78:
         b6:99:62:f9:80:b7:26:18:1b:2f:80:a4:5a:78:e1:ae:ae:32:
         40:18:bd:89:c9:83:1c:a7:c9:99:ec:eb:b5:bc:7b:0a:a6:3e:
         1b:29:d2:3d:54:d1:10:6f:2f:8f:23:b7:7c:01:bf:4d:07:d7:
         e4:e2:c7:bb:fe:ab:b0:02:f0:2e:50:ad:b3:67:00:d6:fb:cb:
         60:2b:3d:ee:9e:a6:86:1f:99:30:5e:04:09:c6:83:3b:cf:1d:
         6c:91:fc:90:e8:56:8d:d7:86:c2:16:e0:b0:f1:fc:f9:2f:09:
         72:c9:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:10:38 2025 by rpki-client