Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa
File:                     7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa (raw, json)
Hash identifier:          vwclul0z5WZl/nVx2A8P7NzITh96Kk30oAGB7id15Ek=
Subject key identifier:   D0:66:08:DE:BB:76:4B:19:AB:F3:B1:62:6E:04:7A:58:FD:AF:4E:91
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F43285849C4140A6073A2582F716A8C00
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa
Signing time:             Tue 06 May 2025 18:32:38 +0000
ROA not before:           Tue 06 May 2025 18:32:38 +0000
ROA not after:            Mon 04 Aug 2025 18:32:38 +0000
asID:                     22351
IP address blocks:        66.205.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:14:0a:60:73:a2:58:2f:71:6a:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: May  6 18:32:38 2025 GMT
            Not After : Aug  4 18:32:38 2025 GMT
        Subject: CN=2a3e09b0-8353-452b-85dd-70cff31ca9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:96:e6:83:ac:1d:f0:7f:ef:41:29:6c:26:
                    30:1e:fd:34:25:f7:e8:63:92:f8:d8:6a:57:bd:47:
                    46:a4:a7:a2:7d:90:9a:45:14:fc:fd:51:91:da:f6:
                    2f:02:e9:ad:97:16:1c:67:03:4e:ae:2d:f2:fe:b1:
                    a2:77:90:d1:00:bd:22:9b:63:ef:a1:26:b0:c8:04:
                    e8:ac:38:10:b0:e4:af:ca:b8:b3:b2:34:4a:67:57:
                    c2:86:99:6d:50:1f:ce:a1:d0:6b:62:bb:de:78:84:
                    67:d4:11:a9:a7:9f:f6:5f:98:db:1d:6f:54:11:81:
                    f0:b0:99:88:2d:16:98:e0:12:bb:6d:10:35:19:4d:
                    f5:e2:da:2a:1c:46:e7:a3:a0:37:b1:41:ec:d1:c3:
                    07:e0:8d:c1:fb:95:a8:d7:a3:78:1e:45:95:ee:02:
                    8b:21:99:32:29:bc:34:38:e9:e8:e3:c2:ae:fc:49:
                    a0:25:5c:58:68:38:fe:61:55:22:f0:1d:b4:80:be:
                    92:a9:48:b4:d2:67:86:e5:98:94:48:a9:f7:13:e1:
                    49:06:cb:83:ba:92:90:b0:7e:67:aa:f6:f0:ed:49:
                    16:94:23:26:27:65:ab:0a:37:6d:7c:54:91:ea:97:
                    20:29:3d:58:d4:4c:09:67:e5:97:8e:e1:dc:91:71:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:66:08:DE:BB:76:4B:19:AB:F3:B1:62:6E:04:7A:58:FD:AF:4E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/7f1c26e4-1d16-332f-9b1d-ce6deac527c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:f4:a2:c4:34:c7:92:0a:17:1f:6e:8e:25:cf:28:13:5d:
         4f:38:b3:2c:c3:77:a3:f3:4a:e2:c0:f9:be:27:22:85:db:9a:
         96:dd:1c:8a:b2:6d:07:f9:5c:7c:47:3d:ff:5a:65:a7:aa:8d:
         2a:d7:e8:86:44:fb:f6:a4:a8:87:bc:d8:5b:92:59:d5:f0:b0:
         f6:36:33:5f:13:a4:68:5e:1e:18:3c:45:f1:32:72:43:bc:02:
         17:9e:48:17:3e:ea:f9:60:95:94:d5:96:ef:fd:7f:ee:15:ee:
         42:1e:93:0b:bb:8f:bf:1d:15:b4:71:66:25:36:33:6a:2f:01:
         61:3c:88:57:77:8a:e2:a4:bc:01:29:ad:dd:16:ac:ed:1d:e6:
         d3:76:93:38:72:79:3f:24:ae:ce:d5:65:8c:bf:dc:dc:1b:ed:
         07:03:e5:56:b1:7c:5e:0a:92:f2:8b:e1:56:22:c6:ca:cd:9c:
         b5:5f:3b:55:ff:bb:fb:ac:4f:73:d5:71:07:12:88:1f:1c:f4:
         a3:0f:8b:6d:d0:e6:b8:a8:bd:05:51:ce:b5:c1:76:c6:2c:6b:
         c7:80:b5:f4:5d:a7:e9:15:d3:c4:3a:4d:f9:d7:bd:6a:bc:0d:
         7b:c2:01:3f:01:27:6e:bf:88:38:e6:03:b7:08:a4:9d:0a:19:
         dd:5e:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:38:28 2025 by rpki-client