Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c472520-1409-3e88-9155-6e246e995f7a.roa
File:                     6c472520-1409-3e88-9155-6e246e995f7a.roa (raw, json)
Hash identifier:          oOhJRaRzTx1At6/AeG0DAhpuWGvPHsHkVH+9TNI4T0s=
Subject key identifier:   CF:04:4C:05:FA:6A:E5:19:53:74:C0:B9:EB:C6:43:72:61:04:BC:BF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A784E14AFAFF684342392280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c472520-1409-3e88-9155-6e246e995f7a.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        66.102.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:e1:4a:fa:ff:68:43:42:39:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=8f52253d-a5e9-4f4d-8cb9-3cdaabc9e5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:b7:eb:52:cf:2d:d1:28:e7:68:d1:34:f2:
                    f2:62:5c:ad:4c:98:73:fe:79:30:c3:7f:fd:cc:28:
                    3a:2a:64:80:6b:d3:b8:70:3a:16:1a:0e:2c:0f:63:
                    ef:a7:e1:e7:b2:8b:8e:0b:42:a6:21:11:13:31:96:
                    aa:58:42:10:fb:b2:dc:92:5c:eb:ad:95:f6:a8:29:
                    e0:cc:64:5b:67:81:73:7b:ea:a8:35:e7:ee:21:2c:
                    cc:ed:86:21:22:33:83:26:03:a4:1f:a7:94:c5:3c:
                    5f:66:ec:a2:8a:67:4b:d5:70:ad:a4:0a:12:38:25:
                    7a:42:04:52:8a:de:26:51:c3:00:6a:42:5e:d8:aa:
                    a2:64:ee:21:63:84:f9:97:ad:2d:ee:9f:8f:31:3d:
                    fc:35:0c:94:7a:53:3c:dd:f7:8e:aa:9f:6f:f0:9e:
                    d4:f3:a3:9c:b5:0e:b7:d6:66:37:a0:ab:ec:51:b5:
                    c6:c0:a3:58:51:7b:d2:45:a3:4e:9b:51:46:38:c8:
                    6a:d3:6a:f0:4a:87:af:a2:7d:27:b6:82:b6:fa:af:
                    8d:91:2b:ec:a4:72:d2:4e:ab:d6:94:09:e4:a1:dc:
                    62:77:52:bf:12:40:ca:42:90:0e:02:8b:e0:a0:f1:
                    9c:db:b2:70:61:39:1e:84:1c:5c:16:1b:20:5e:9c:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:04:4C:05:FA:6A:E5:19:53:74:C0:B9:EB:C6:43:72:61:04:BC:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c472520-1409-3e88-9155-6e246e995f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:4e:61:c7:13:03:7e:76:4b:96:95:e5:fb:21:6c:a2:e8:
         8a:0e:5e:ff:34:53:cf:7f:6c:96:27:f3:1c:0e:8a:05:45:32:
         c0:7c:6b:ae:1b:84:ca:59:84:0a:bf:fc:c0:61:12:b0:29:14:
         27:37:63:0c:35:10:7f:bb:9e:9b:8a:81:91:99:3a:98:55:97:
         f4:15:c5:71:1f:a0:f7:2f:ba:9b:ef:97:ef:33:db:de:71:93:
         c8:2e:42:6d:68:d5:ff:b9:da:d9:f7:ff:8e:d1:77:eb:0a:02:
         5a:3b:ca:c6:2b:73:57:31:74:e5:66:11:f3:d0:1d:d1:c2:1e:
         86:4f:0e:01:e8:6f:e2:d7:2f:a9:af:4c:68:0f:59:13:33:bc:
         55:aa:46:56:61:08:6c:cc:e1:2b:db:c4:ca:79:5e:fd:ac:04:
         a4:fe:6e:a1:16:31:2c:f6:d5:ce:c2:15:63:fc:60:d6:59:2a:
         54:fe:dc:59:07:2a:4d:aa:e0:f3:8f:3a:fa:3f:1b:81:3e:cb:
         7d:03:31:3e:36:65:39:31:17:9e:af:53:27:d7:f4:6a:46:73:
         b4:a5:eb:65:1c:87:3c:54:c1:af:5b:2b:fd:b0:04:9c:2f:69:
         20:8f:a7:3b:17:07:65:c3:74:ff:64:97:98:ef:73:ef:14:36:
         47:d9:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:53 2025 by rpki-client