Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa
File:                     ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa (raw, json)
Hash identifier:          yvUDKRtdXuLxe/+jC2n0X/Pntbh63zlcp5XChfBpJu0=
Subject key identifier:   87:9E:F5:5D:26:66:5D:1B:FC:4D:7B:CC:36:91:20:44:40:BD:90:26
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285849D85F9DEB2A0378E0AD6114C0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     6312
IP address blocks:        66.115.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9d:eb:2a:03:78:e0:ad:61:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=9e5c423e-cf0f-451b-9fc5-98aeb1043023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:31:2b:62:0e:92:15:8a:8c:4e:59:82:a0:0a:
                    ae:e4:c6:f3:3c:a1:82:c0:3f:8f:ed:05:25:4c:a6:
                    42:dd:05:b1:01:78:ef:c3:16:b1:6f:98:bb:d3:bf:
                    e8:90:13:12:30:b1:f8:d3:6b:d2:44:02:f5:76:3d:
                    77:8a:39:d3:e5:81:05:2f:78:b5:50:41:13:99:98:
                    21:29:30:09:b9:11:4f:bb:96:2b:48:1b:63:a0:94:
                    72:e9:de:dd:4b:fa:db:a7:c3:5f:06:97:cc:18:e1:
                    6b:f4:42:72:37:87:f7:5f:79:3a:11:3c:2b:f6:7e:
                    6b:f5:85:fa:1b:51:48:bd:4b:28:25:84:d3:ed:59:
                    8c:0b:cc:c9:09:0e:23:f3:b6:b7:0e:01:2c:fd:49:
                    36:d5:e8:24:cc:02:80:75:06:38:0d:68:ce:45:55:
                    b2:33:09:c8:f2:5f:5b:16:9a:9f:00:12:6d:ea:15:
                    8b:36:5e:6f:55:53:25:36:2e:33:a9:d0:47:d7:d4:
                    74:19:bc:b8:f8:dd:1b:4f:c1:d3:e6:35:b2:e5:fe:
                    96:38:0c:a9:64:26:af:02:1f:bd:a5:2e:2c:94:da:
                    cb:48:1d:2c:3f:82:0b:88:35:4b:0e:81:da:33:6f:
                    48:5d:94:fe:29:85:de:6a:98:1b:13:13:f3:8b:d2:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9E:F5:5D:26:66:5D:1B:FC:4D:7B:CC:36:91:20:44:40:BD:90:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:99:e9:d7:75:39:93:2d:a1:bf:bb:c2:ac:90:c7:df:69:60:
         24:e0:ce:4c:82:8a:51:b4:53:ff:bb:14:48:0c:b0:64:a5:06:
         3e:c1:40:63:91:2f:6b:2e:c2:9c:de:8a:50:b9:ee:df:05:04:
         58:0f:f7:c8:5a:f3:5c:d3:86:24:76:eb:ab:4d:39:07:ac:fe:
         ba:ae:38:dd:4d:7d:a1:9b:6a:d5:d9:bb:47:e2:18:d6:66:f6:
         b8:f7:2f:68:5b:bb:bf:62:86:23:f1:5c:59:e1:f0:84:e6:ee:
         ef:83:0d:df:22:87:21:91:6f:58:ec:88:30:15:ff:28:41:da:
         94:7f:08:b8:32:17:88:88:5d:09:ed:ea:0a:3d:1c:76:e6:10:
         b1:c5:79:37:7b:3b:12:e5:c4:e1:84:72:97:18:e9:16:0e:67:
         d3:5b:31:00:64:d9:99:e5:be:28:8f:ca:2c:41:36:c8:47:2b:
         12:6f:a8:0b:1e:9d:ad:62:47:29:49:d0:78:e7:c8:40:2f:d8:
         07:85:54:1c:49:ac:15:52:01:fa:4a:50:56:46:a8:94:bf:72:
         88:b0:f9:15:2c:e7:4a:4f:7a:06:1c:e9:41:0b:f3:c3:c8:53:
         42:03:34:db:95:19:88:45:3a:6e:ed:f9:fb:95:26:6a:52:9d:
         53:5b:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:08:11 2025 by rpki-client