Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/f7006826-2bf1-3819-80d8-926248c131f1.roa
File:                     f7006826-2bf1-3819-80d8-926248c131f1.roa (raw, json)
Hash identifier:          G4BT0vdP1GFgVi1w5ZWdsb8uWqXPa6ee9431Ig033EE=
Subject key identifier:   89:23:C4:84:C8:85:BB:5C:A6:90:88:72:29:16:F5:19:BA:51:89:86
Certificate issuer:       /CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
Certificate serial:       010D0C9F432858489340AE50422A4A23C9F2D800
Authority key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/f7006826-2bf1-3819-80d8-926248c131f1.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     23368
IP address blocks:        199.66.76.0/24 maxlen: 24
                          199.66.77.0/24 maxlen: 24
                          199.66.78.0/24 maxlen: 24
                          199.66.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:ae:50:42:2a:4a:23:c9:f2:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=4b1f6748-05ae-4187-980d-798bcdf11f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:b5:92:24:ef:a9:53:04:4b:ab:12:e8:6d:
                    3a:3d:23:4b:88:f0:95:ce:c4:23:75:1f:2c:c4:bd:
                    c7:08:d6:f5:ed:ef:f4:3a:d7:4a:c8:59:83:ec:7c:
                    bf:03:62:85:71:d9:2c:8b:99:2b:56:7c:9f:c1:fd:
                    7d:e2:a5:4b:ae:89:61:2d:bd:b4:ed:b3:1c:2b:47:
                    45:28:2b:45:5f:d5:98:d0:6f:e5:91:22:5e:43:c2:
                    d2:24:5b:94:44:9e:d8:ae:5a:fe:95:cf:6c:45:00:
                    e7:46:ca:9d:bf:b0:25:eb:2a:ee:d1:52:c7:e8:b9:
                    fc:81:1d:38:45:5c:e1:b7:e2:e3:9a:3f:c5:e7:8b:
                    2f:7d:a8:82:a0:7f:e5:e4:61:ad:34:31:df:1b:7a:
                    b0:63:c9:18:35:20:79:ac:34:fe:ed:e4:08:ac:9b:
                    17:3d:7e:3e:c3:0e:47:ba:37:32:0c:52:a7:e8:e6:
                    1d:40:d4:86:0d:84:57:b8:64:3e:59:35:e6:ad:e2:
                    8a:92:18:4c:39:b3:eb:53:90:9d:fb:76:e8:ee:f7:
                    36:48:4e:2f:d3:f9:76:4d:5a:0a:f3:8d:aa:b4:3c:
                    51:54:bd:c3:63:4c:eb:79:1e:c6:c5:38:bd:c8:dc:
                    c7:88:f3:a4:4a:2a:46:4d:a2:94:a2:a6:23:7f:39:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:23:C4:84:C8:85:BB:5C:A6:90:88:72:29:16:F5:19:BA:51:89:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/f7006826-2bf1-3819-80d8-926248c131f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl

            X509v3 Authority Key Identifier:
                keyid:10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:28:a2:7b:18:dd:52:eb:47:27:3a:37:a4:7a:b6:e0:44:c8:
         76:9e:17:20:94:b2:e0:d7:7f:b1:f0:5c:67:32:6a:91:f6:2c:
         85:bc:57:3a:38:48:32:22:c9:dc:53:8f:2d:05:2e:01:83:67:
         0c:0c:90:77:45:91:90:14:b0:69:80:ba:c3:84:13:5a:bd:f0:
         e4:17:2b:e1:68:20:b2:7f:21:34:c3:b0:18:42:9b:3d:be:27:
         50:57:33:b6:98:3b:89:e1:98:07:a3:c1:d9:31:1a:77:e2:9e:
         7f:7d:7f:40:47:bc:57:80:84:d2:15:e5:8d:33:2b:b4:35:47:
         68:43:f8:73:41:16:72:b3:0c:ef:66:1c:bc:5e:ed:41:14:cf:
         4d:4a:66:1c:62:07:55:d8:8e:ec:ca:9f:e9:af:4e:4c:db:be:
         c7:f0:5c:0f:98:91:9b:a3:53:ba:57:6a:d0:c1:84:8f:43:37:
         8c:dc:74:52:24:ed:6e:a4:97:e8:6b:eb:e7:40:c1:10:bd:15:
         ce:c5:47:dc:2a:9b:e2:0f:5d:da:0a:98:35:d8:21:2c:0a:f5:
         b0:09:5b:a3:dd:e8:aa:bf:a6:6e:02:d5:a8:26:a5:48:4c:31:
         db:ec:b3:63:8c:62:96:2d:4a:5d:e4:7d:55:34:9c:31:70:00:
         e2:08:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:10 2025 by rpki-client