Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa
File:                     4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa (raw, json)
Hash identifier:          GTZ/U1CQroIm7Pd2YBajoJWOvtYnTu4iD4KSLO4wc0o=
Subject key identifier:   07:F9:FE:83:76:70:45:27:92:42:A8:E4:37:D7:5D:42:1D:27:D2:91
Certificate issuer:       /CN=6957121d-8962-482d-982c-d123ff337caa
Certificate serial:       010D0C9F4328584894A5E6F8419976087C27DB3C
Authority key identifier: ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        66.54.73.0/24 maxlen: 24
                          66.54.74.0/24 maxlen: 24
                          66.54.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e6:f8:41:99:76:08:7c:27:db:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6957121d-8962-482d-982c-d123ff337caa
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=ac0704dd-f0c9-4cc8-bd5e-bb5e39fb6c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:03:43:eb:16:59:be:09:be:99:08:fb:d0:
                    b8:52:30:2f:a3:b7:31:74:48:1c:d3:db:69:ec:2f:
                    86:01:ee:ca:2b:35:25:2b:20:30:c2:bc:d9:1f:2a:
                    6f:a7:73:ce:a0:5d:a2:28:40:07:de:3b:2f:ef:b4:
                    56:61:8a:d3:9c:68:75:c3:25:5d:12:37:71:02:0a:
                    60:02:6b:24:f6:ee:17:95:6e:42:3a:8c:1c:1b:ef:
                    89:12:33:b6:d3:e0:69:5f:f6:6c:6b:2b:b5:4a:70:
                    9c:2f:1f:6f:08:da:b1:2f:6e:47:61:a9:04:ce:cf:
                    c0:87:3e:e6:79:a5:ab:43:23:86:57:1a:9d:bc:59:
                    d8:8e:d5:2f:46:2f:6c:3c:e5:bd:b6:39:39:c2:62:
                    87:bc:dd:d8:d0:be:19:cb:28:ec:03:a4:37:ad:ea:
                    23:76:86:2e:6a:dc:4c:f3:da:5f:64:4e:e7:4c:40:
                    64:c3:1a:1a:63:bc:1b:61:f2:bf:fc:f2:ed:fa:8c:
                    68:6f:c1:64:27:78:b3:fc:73:fd:b1:a5:0a:e3:a7:
                    90:73:44:85:61:a3:d2:00:8c:ec:d3:59:cc:6d:19:
                    f7:51:1e:20:08:b7:c3:f9:06:75:ac:b7:6d:69:a9:
                    b7:f8:90:dd:f7:08:52:0a:eb:1d:df:b7:ac:8a:2d:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F9:FE:83:76:70:45:27:92:42:A8:E4:37:D7:5D:42:1D:27:D2:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/4b3dfca5-1d7d-39fc-b59b-b96c99607808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa/6957121d-8962-482d-982c-d123ff337caa.crl

            X509v3 Authority Key Identifier:
                keyid:ED:0E:1A:64:1D:03:68:5E:2B:34:E3:53:24:1E:E2:92:82:E3:E5:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6957121d-8962-482d-982c-d123ff337caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.73.0-66.54.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c0:68:ef:ab:6c:51:b0:e4:74:9d:fb:e5:35:27:28:74:10:
         2a:d8:01:02:34:c6:64:e0:1e:10:2e:fb:f9:99:0b:8e:dd:23:
         aa:a8:c2:1e:b0:6f:d6:85:0c:5a:11:e1:60:e2:aa:7c:6b:84:
         cb:80:01:98:d6:27:98:36:48:4a:c8:d7:43:5d:a7:f4:53:5f:
         84:17:3f:ed:de:fd:bd:fd:af:87:fd:50:a3:48:0b:6b:89:e7:
         fe:8c:79:73:18:26:94:79:a3:b6:11:73:bd:65:e7:88:21:3d:
         9e:72:7a:db:64:f6:0c:b2:b2:ad:14:7b:cd:6f:42:55:ee:21:
         f9:ac:44:d3:ac:93:b2:64:ad:d9:bf:03:38:60:87:33:89:0a:
         72:8e:1a:25:1b:7c:0c:19:7f:2e:fe:43:2e:42:35:de:f0:46:
         f1:8c:71:29:cb:02:a7:a6:cb:a4:a2:f1:25:d5:e1:b4:9f:dd:
         f4:d2:4b:bf:ae:f0:92:74:01:05:a8:5b:c4:87:34:cb:ef:d4:
         de:0e:c9:6a:ea:c6:73:63:9e:8e:15:84:ab:38:15:0a:fb:a9:
         75:39:64:59:00:f4:bb:99:95:fc:e6:f4:40:c3:06:37:11:c7:
         40:c1:2f:01:eb:b6:dc:27:d8:b5:be:15:5a:87:b7:ff:aa:c8:
         fe:bc:f8:b4
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEiUpeb4QZl2CHwn2zwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk1NzEyMWQtODk2Mi00ODJkLTk4MmMtZDEyM2ZmMzM3
Y2FhMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
YWMwNzA0ZGQtZjBjOS00Y2M4LWJkNWUtYmI1ZTM5ZmI2YzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+sDQ+sWWb4JvpkI+9C4UjAvo7cxdEgc09tp
7C+GAe7KKzUlKyAwwrzZHypvp3POoF2iKEAH3jsv77RWYYrTnGh1wyVdEjdxAgpg
Amsk9u4XlW5COowcG++JEjO20+BpX/Zsayu1SnCcLx9vCNqxL25HYakEzs/Ahz7m
eaWrQyOGVxqdvFnYjtUvRi9sPOW9tjk5wmKHvN3Y0L4ZyyjsA6Q3reojdoYuatxM
89pfZE7nTEBkwxoaY7wbYfK//PLt+oxob8FkJ3iz/HP9saUK46eQc0SFYaPSAIzs
01nMbRn3UR4gCLfD+QZ1rLdtaam3+JDd9whSCusd37esii3GrQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFAf5/oN2cEUnkkKo5DfXXUIdJ9KRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82OTU3
MTIxZC04OTYyLTQ4MmQtOTgyYy1kMTIzZmYzMzdjYWEvNGIzZGZjYTUtMWQ3ZC0z
OWZjLWI1OWItYjk2Yzk5NjA3ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjk1NzEyMWQtODk2Mi00ODJkLTk4
MmMtZDEyM2ZmMzM3Y2FhLzY5NTcxMjFkLTg5NjItNDgyZC05ODJjLWQxMjNmZjMz
N2NhYS5jcmwwHwYDVR0jBBgwFoAU7Q4aZB0DaF4rNONTJB7ikoLj5WwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82OTU3MTIxZC04OTYyLTQ4MmQtOTgyYy1kMTIz
ZmYzMzdjYWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABCNkkD
BAJCNkgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAqcBo76tsUbDkdJ375TUnKHQQKtgBAjTGZOAeEC77+ZkL
jt0jqqjCHrBv1oUMWhHhYOKqfGuEy4ABmNYnmDZISsjXQ12n9FNfhBc/7d79vf2v
h/1Qo0gLa4nn/ox5cxgmlHmjthFzvWXniCE9nnJ622T2DLKyrRR7zW9CVe4h+axE
06yTsmSt2b8DOGCHM4kKco4aJRt8DBl/Lv5DLkI13vBG8YxxKcsCp6bLpKLxJdXh
tJ/d9NJLv67wknQBBahbxIc0y+/U3g7JaurGc2OejhWEqzgVCvupdTlkWQD0u5mV
/Ob0QMMGNxHHQMEvAeu23CfYtb4VWoe3/6rI/rz4tA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:35 2025 by rpki-client