Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa
File:                     86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa (raw, json)
Hash identifier:          NAtgKjQ4OgV29BQs9gGyL7SnpPhxEWWNMpohR10lE5M=
Subject key identifier:   3F:E7:8C:BE:29:C1:3D:DC:F9:5A:BE:A5:7B:6E:04:7B:4E:1C:D0:FC
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F43285849C0A4CE1FCDE45F63B4D75680
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     62945
IP address blocks:        66.244.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ce:1f:cd:e4:5f:63:b4:d7:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=1c3d7a4d-26e6-404d-9d25-636cd4f03b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:b3:82:f7:55:3f:fb:9a:62:5d:d9:3a:1f:
                    f9:89:19:51:b2:8b:9a:7f:a9:c9:e5:2f:63:16:fe:
                    8d:7b:a6:70:5b:c5:aa:b4:26:d6:38:9d:44:ac:71:
                    3d:cc:08:73:66:ad:0b:94:8b:28:fe:aa:b3:e1:a7:
                    f8:41:a0:5a:93:69:1b:b0:9c:02:fa:9d:a1:8e:58:
                    7e:e9:00:d9:a2:ea:ea:c3:10:59:68:0f:fe:fb:5d:
                    8c:26:dd:ea:97:22:86:dc:fc:73:1c:87:49:74:0f:
                    f2:de:2d:e6:b2:11:a0:47:f9:51:71:c0:b2:a7:3e:
                    36:5b:dc:19:0b:7b:25:b2:fa:0b:12:ca:dc:91:8f:
                    c1:e0:f8:33:82:c0:fd:e5:f3:32:24:7d:3c:3e:6b:
                    85:a7:bb:9d:7b:e9:cc:e4:b6:10:44:e4:ce:53:15:
                    96:d6:fb:82:e5:fc:e3:74:ad:8c:bc:4c:99:48:c7:
                    9a:16:83:d0:e4:cb:37:3f:48:e3:71:21:3b:84:75:
                    02:07:e9:4a:b4:fc:6a:1f:b3:63:9b:f6:d1:8c:83:
                    24:53:7e:fa:82:ea:6b:0c:02:35:70:39:a8:3e:2e:
                    cc:e4:47:52:ad:62:e2:78:eb:43:ec:ab:f0:01:cb:
                    87:11:14:26:0a:dc:8e:6a:b1:91:1b:e4:a3:ac:19:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E7:8C:BE:29:C1:3D:DC:F9:5A:BE:A5:7B:6E:04:7B:4E:1C:D0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/86806cdc-9fdc-3b77-935d-bb7a0ea5f458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:47:2b:f9:35:e2:af:cd:3d:39:89:03:77:43:76:b9:a5:
         a5:c7:d8:a9:d6:af:8e:65:3c:a3:be:93:00:97:1c:4d:55:6f:
         d8:36:56:ae:2b:60:2d:80:39:14:c5:80:1f:be:39:fb:d3:93:
         90:03:1f:9f:3f:46:d7:f1:82:9e:c6:2f:fc:9a:e0:e0:40:8c:
         7e:cc:e3:1c:a8:d5:9c:7c:7c:e4:fc:60:8a:b3:df:a8:ff:99:
         97:3b:a4:80:70:94:37:b9:b6:9a:31:57:c7:94:67:7a:e1:96:
         50:fd:4e:58:e6:a6:83:cf:25:f8:24:f9:2c:be:a6:ec:72:59:
         87:ce:1a:d9:7a:f5:f5:9c:d8:7a:9a:30:6f:dc:e0:a0:0e:64:
         5d:49:72:70:89:e9:c7:f6:5e:fa:33:93:dc:1f:e4:b2:39:f1:
         3e:61:b8:98:cb:65:c0:6a:92:9d:9c:78:f8:d7:87:3b:11:2a:
         d3:20:3d:7b:ad:d7:12:dd:37:c9:aa:a8:24:19:58:18:a9:16:
         58:6a:d4:b8:a9:96:65:48:da:1c:00:68:fb:80:ea:39:bf:ed:
         99:61:dd:3a:ab:dc:50:a3:41:03:b3:da:e7:40:78:df:35:07:
         64:f6:58:55:d5:86:f8:32:33:2b:e6:00:f8:96:3e:a4:83:ae:
         1c:c4:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:14:16 2025 by rpki-client