Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa
File:                     11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa (raw, json)
Hash identifier:          A1Mk+DCtAA1jyJ/q509TjASc3laeoWRGBOUC6aXd36I=
Subject key identifier:   5D:0E:FB:4D:D9:36:67:8E:F4:DC:7A:C6:35:33:EA:AC:7E:64:FE:9C
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858499F249D9C35ED02FACFC5C200
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     33635
IP address blocks:        66.36.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9d:9c:35:ed:02:fa:cf:c5:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=e57ba80a-3053-49c5-950e-61cf1317b61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:8d:f0:6f:4c:10:db:ed:c0:b4:86:a5:a2:
                    d8:b9:e7:61:4e:62:9e:75:d9:b7:3c:4b:39:a9:44:
                    9b:4c:a3:ae:4e:b4:66:78:31:a1:73:b4:85:c1:ef:
                    28:3b:f9:f9:95:10:12:5c:03:85:bc:72:54:7d:a3:
                    74:1b:0c:35:7d:32:c8:f4:69:a0:ff:85:c9:6b:bc:
                    c3:bd:ff:bb:f0:b8:ca:30:b6:a5:d3:94:69:bf:fb:
                    63:d3:04:37:0e:85:f2:81:3a:dc:1d:5e:71:ca:67:
                    02:a5:bc:f1:43:9f:a7:56:66:5d:e5:c3:d6:df:63:
                    94:98:57:1b:c1:68:35:ed:4b:cc:1a:e4:ec:3f:e1:
                    76:14:bc:c8:ac:e0:10:5f:06:0d:f9:e3:55:24:e8:
                    34:fb:18:f9:35:ce:f0:7d:35:15:84:8c:9d:5f:9c:
                    49:fd:35:8a:f0:ec:eb:51:ac:a8:2d:a4:74:98:aa:
                    16:44:d0:8a:de:00:b6:43:97:55:ed:53:c2:b3:94:
                    c4:8f:a7:b4:c1:0f:8c:5b:80:2a:01:37:01:52:27:
                    e3:6c:bc:22:5d:79:10:31:6c:4b:04:6e:04:36:74:
                    15:78:56:d9:d1:84:14:9c:39:62:f1:00:fe:e1:d6:
                    dc:7d:a1:b1:c9:a4:a7:f0:03:3d:56:b6:f4:d6:86:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0E:FB:4D:D9:36:67:8E:F4:DC:7A:C6:35:33:EA:AC:7E:64:FE:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/11a1c7a0-393b-3a6b-8f1f-3f8d9e781da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ca:32:55:46:02:03:09:8a:a0:9b:29:36:1a:9e:76:c7:fd:
         2c:ae:64:a5:4a:d6:52:51:2e:19:17:df:72:48:02:5d:97:c8:
         9b:61:2e:6a:54:8e:5b:0b:b2:d4:b8:d7:b1:5f:da:bf:a8:8c:
         ac:a3:06:4a:4b:ce:43:a1:ae:b8:4f:73:54:31:b1:2d:7e:44:
         83:d6:06:ef:2b:f2:ff:40:23:3f:d9:a0:da:68:1f:b8:27:7c:
         6f:c2:83:f6:f9:5f:30:3a:1d:eb:45:bd:2f:82:ad:32:27:6c:
         fe:04:1d:59:e1:e0:ec:89:17:12:6f:e5:b7:49:ee:06:19:71:
         f7:d6:7a:16:6e:4a:5c:3b:5b:1a:06:9e:04:ca:9a:c8:6a:45:
         75:04:b9:dc:f7:57:1d:81:6d:e0:37:fa:db:4d:f3:05:36:1a:
         28:d0:6d:4b:27:c1:1b:c5:b7:5a:5b:aa:e6:84:b9:37:6f:4f:
         51:08:cd:4b:bf:cf:31:a6:f7:0a:fc:3d:e7:a3:c3:ce:2e:0e:
         9e:82:8c:1c:39:84:ad:aa:2a:83:f9:23:12:78:b4:38:1c:4f:
         2b:91:00:04:d5:f3:7b:24:7c:68:6b:dc:f6:5c:1e:74:3d:a7:
         2d:89:f1:90:3e:05:ad:c1:bd:74:6c:48:e5:02:f9:ff:d0:b0:
         a4:42:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:12:49 2025 by rpki-client