Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1032453b-7376-3199-bcd1-c34b83c85468.roa
File:                     1032453b-7376-3199-bcd1-c34b83c85468.roa (raw, json)
Hash identifier:          wI/S94zkUH2GM3dqLT9UaPPfg4UbUHDDAJaxk7+/fhk=
Subject key identifier:   C1:C9:3E:9B:1A:76:36:19:9D:88:7D:7E:EC:83:A0:DA:07:CB:7F:0A
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858499AF48F235EE842DC1F3A7ED0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1032453b-7376-3199-bcd1-c34b83c85468.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     394437
IP address blocks:        66.249.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8f:23:5e:e8:42:dc:1f:3a:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=73454b57-b4c7-491c-8b45-8e9a4b474ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:6f:24:e2:90:b5:77:8a:ae:37:90:7b:08:
                    8a:0f:d8:e5:a9:d0:25:58:a6:84:65:1c:67:96:be:
                    c9:ea:53:e2:3e:9d:d1:cd:5f:40:91:18:03:bd:0a:
                    f3:6f:58:7a:d9:07:19:51:5d:42:ac:3a:d7:25:97:
                    b1:bb:da:03:60:ce:ab:46:0c:cc:7d:86:5e:46:cc:
                    6d:f5:ef:61:05:6a:ea:ce:9b:46:2b:ad:3c:85:38:
                    de:5b:cc:15:cf:b9:c2:9a:04:1e:fe:25:75:05:6e:
                    5c:5b:52:e6:39:b6:79:b9:a9:8b:5c:4a:a8:65:e0:
                    16:cd:c7:0f:63:a1:4f:e2:0e:cf:fd:16:cb:95:14:
                    b9:8b:5e:a4:4e:db:88:19:f9:cf:88:b8:22:51:41:
                    7f:82:c7:84:28:76:1d:f4:d3:14:bd:00:8c:28:e1:
                    63:29:eb:19:2b:b4:3c:03:45:7d:80:cc:7c:5c:c2:
                    63:c3:13:57:22:bc:31:d2:d9:41:5f:fc:58:51:63:
                    a2:69:c4:41:86:86:d0:cc:9f:f3:40:33:3a:14:b5:
                    e6:30:80:78:61:28:ff:d3:2d:9e:d7:a9:b4:7b:67:
                    e1:fd:30:0c:15:0e:66:24:59:0d:62:2d:e5:73:72:
                    c4:28:e1:bf:78:76:4f:50:7e:24:4d:01:9a:fb:55:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:3E:9B:1A:76:36:19:9D:88:7D:7E:EC:83:A0:DA:07:CB:7F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1032453b-7376-3199-bcd1-c34b83c85468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:60:65:f3:0d:38:96:84:c8:78:36:a3:b5:c5:00:f9:6e:ad:
         54:2a:69:4b:8c:35:97:c6:df:d0:18:50:39:4f:da:87:9f:19:
         a9:36:ee:1b:b2:41:ae:17:f2:f4:ec:d2:55:14:2d:74:0f:57:
         82:18:c5:09:7c:d2:de:e7:df:92:ea:fd:78:4c:47:36:c3:fe:
         a8:f6:96:a7:50:dd:33:ef:0d:0a:cc:89:c9:a1:aa:95:9d:07:
         42:57:92:2f:ee:d3:de:53:ce:07:ad:ed:d7:83:42:93:7f:63:
         30:52:63:fa:d7:6d:6a:cf:b3:90:f8:b7:b1:5e:90:c6:27:82:
         e2:c5:3d:af:42:48:2c:cd:96:a0:17:f5:c6:78:af:af:a0:ae:
         7c:c6:b8:b3:fe:0f:ac:de:17:f4:88:9b:ca:37:ad:a9:32:98:
         ab:e7:e9:39:85:74:42:eb:9f:27:04:73:33:72:35:60:1d:8e:
         16:60:ff:38:ff:e6:7b:80:02:f0:63:16:59:99:c3:fc:7b:4c:
         a3:92:f2:cf:0e:09:54:ed:3c:55:26:95:43:be:31:70:3f:27:
         63:9b:7b:b8:5a:30:19:2e:c1:f5:45:2c:53:6c:db:f6:93:8b:
         3f:d9:b1:90:24:23:3f:3f:cd:55:80:ca:da:24:8a:69:b6:06:
         e7:a1:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:34:15 2025 by rpki-client