Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa
File:                     860f6f79-fac8-315e-beb5-5809ef42de80.roa (raw, json)
Hash identifier:          58qSOFnvv05TkROg32YWt5uAfaPMtjONei+4FbQf5o8=
Subject key identifier:   4B:ED:4E:C2:3E:4A:CE:44:07:98:2F:AF:85:E0:96:FE:D3:65:4B:79
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858499D843C682D52A334A937AEC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa
Signing time:             Tue 22 Apr 2025 23:02:10 +0000
ROA not before:           Tue 22 Apr 2025 23:02:10 +0000
ROA not after:            Mon 21 Jul 2025 23:02:10 +0000
asID:                     30058
IP address blocks:        66.90.106.0/24 maxlen: 24
                          67.159.11.0/24 maxlen: 24
                          2001:49f0:d0e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:84:3c:68:2d:52:a3:34:a9:37:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 22 23:02:10 2025 GMT
            Not After : Jul 21 23:02:10 2025 GMT
        Subject: CN=9a5b17ae-5095-46fe-b835-6a8fbd7a025b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:7d:c8:31:3d:30:a2:e4:83:ce:53:3d:8b:
                    b0:a5:49:ef:a9:24:41:85:0f:8e:53:39:b9:52:ce:
                    6a:6d:ba:99:1a:63:bc:9f:e3:6b:27:9e:2d:d7:7d:
                    fa:ac:1a:41:60:fb:a8:a2:ef:95:c7:71:4a:66:9e:
                    8e:d9:2c:db:02:5f:8a:ed:46:50:e1:fa:d2:88:a3:
                    a8:4a:86:68:e1:0b:43:bd:e9:45:c5:03:f4:6c:da:
                    32:88:e9:e2:e0:3b:ec:4a:be:ba:5b:06:d8:61:8e:
                    2a:ad:64:9b:d2:2a:4f:d3:f2:8c:4c:60:2a:88:ad:
                    2c:3d:45:e3:ba:aa:3d:0e:4f:e1:2c:fd:15:e2:48:
                    ee:b7:7f:ff:0e:5a:43:5c:6f:d6:fa:ca:ef:73:2b:
                    ef:8c:42:86:c9:b5:79:c1:55:94:c0:c7:d9:fa:04:
                    d0:4f:14:1e:df:91:96:9e:f6:0a:8f:f5:a5:25:d4:
                    de:1f:19:82:42:8e:68:42:4c:91:6a:8a:32:33:15:
                    33:57:75:23:bb:0a:97:67:d2:d9:f8:f4:1d:77:ce:
                    2f:1f:b1:e0:ec:f7:73:b0:ff:d3:48:18:5d:6f:f7:
                    3d:dc:da:4d:0a:d1:bc:c0:8d:3e:2f:1b:2f:ac:c7:
                    e3:06:c1:52:0d:dc:66:4c:d9:a7:ab:13:dd:a7:b9:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:4E:C2:3E:4A:CE:44:07:98:2F:AF:85:E0:96:FE:D3:65:4B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.106.0/24
                  67.159.11.0/24
                IPv6:
                  2001:49f0:d0e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:4d:57:58:9d:c8:ff:ba:6d:2a:16:2b:98:25:dc:19:4e:c6:
         c1:0c:ed:12:88:74:5b:53:74:9a:a3:51:f9:48:4b:5e:3b:fb:
         ed:16:91:29:2b:fe:55:93:ef:d4:da:ee:21:e9:4a:d6:0e:e0:
         94:99:a8:cf:03:1a:5b:22:ef:28:5f:40:39:a3:dc:90:b8:da:
         e5:4d:1a:b4:d3:57:d1:67:0c:0f:5b:95:09:0c:b6:f7:ba:73:
         cb:50:e3:f1:47:e1:0d:e0:2f:ca:b4:c5:3c:bb:45:c8:d1:0c:
         36:df:42:16:88:9f:03:18:2c:40:3e:04:30:a8:18:b3:4b:88:
         26:3d:70:ac:cd:39:79:e6:0b:a4:2c:62:6b:2f:cb:8d:57:95:
         77:f0:06:a6:18:0f:a5:42:9b:78:82:1a:b8:42:c9:92:a7:44:
         eb:a6:16:1d:9c:6b:94:85:63:47:38:27:92:62:16:b9:9a:c2:
         06:5e:4b:e1:f2:e8:bc:09:3a:9e:3f:04:49:43:24:3c:75:97:
         85:c3:b0:29:b6:39:86:a6:02:44:c1:17:a1:53:28:b8:3c:35:
         fa:fe:f0:46:49:70:e5:61:c8:57:1d:b9:57:14:19:0c:08:ea:
         92:81:94:f9:51:07:ee:11:aa:41:67:46:31:e4:26:7a:3a:06:
         b3:74:3d:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 11 00:37:07 2025 by rpki-client