Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/777c3cef-b055-3694-ab36-1584e7f99523.roa
File:                     777c3cef-b055-3694-ab36-1584e7f99523.roa (raw, json)
Hash identifier:          W2Xg8QbgQXqZrZeUVkLfukOVPa/dzoUMwbhJXTC7xBA=
Subject key identifier:   96:27:17:F0:93:F8:44:1F:18:83:0E:F5:A0:4E:44:75:8A:F5:0A:8E
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849088178C6F61CCE88E90EE840
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/777c3cef-b055-3694-ab36-1584e7f99523.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11693
IP address blocks:        66.216.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:78:c6:f6:1c:ce:88:e9:0e:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=20c847d4-691c-44c5-a6d1-a5e92fe3fffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:05:4b:ae:b9:96:94:ee:62:cf:a0:95:e6:
                    f0:2c:f6:c4:e6:03:4b:ea:6b:a0:8e:da:4c:7f:e1:
                    2d:bb:3a:a0:40:54:71:a5:63:6d:a9:20:65:c2:b1:
                    8b:9f:b7:70:46:51:19:12:d8:9e:7b:ac:f0:c7:4d:
                    83:27:fa:17:5a:49:f2:ba:a2:d3:22:c0:ed:13:b8:
                    51:b1:3f:92:c6:94:8e:dd:3a:20:33:56:12:ab:ae:
                    06:b0:2b:b7:27:23:37:2d:83:f6:83:5e:5a:70:32:
                    e7:cf:eb:a2:a9:28:53:79:9a:29:90:6a:fe:d6:eb:
                    ae:98:aa:b4:94:0f:5e:e2:b0:5a:56:63:66:06:4d:
                    4a:36:41:bf:63:02:5e:5b:92:3d:61:56:7b:2b:af:
                    42:82:c7:12:2e:a6:dd:e1:4c:0f:46:9f:ce:d5:80:
                    52:2d:ec:91:94:8e:8e:fc:6d:a4:b9:00:7d:e7:93:
                    fb:35:fc:0b:7d:0b:f8:33:01:ef:a0:a3:ce:df:be:
                    db:97:36:b5:15:73:02:bd:74:20:dd:bd:49:08:f3:
                    39:a0:27:8c:fd:ef:96:61:a2:a6:67:f3:5e:39:2a:
                    39:ce:ba:89:58:94:d4:df:5e:00:63:c2:47:fd:71:
                    be:33:f5:05:55:3a:96:69:66:15:ca:ef:fb:89:7d:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:17:F0:93:F8:44:1F:18:83:0E:F5:A0:4E:44:75:8A:F5:0A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/777c3cef-b055-3694-ab36-1584e7f99523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:cc:71:a1:0c:f1:1d:09:f0:08:74:22:a3:7c:2f:17:86:
         23:bf:43:8c:d3:7e:cc:4c:c1:8c:27:4f:74:2b:a0:72:41:36:
         55:74:dd:05:6a:2c:4c:da:07:79:55:ba:cb:4c:ca:36:4e:bd:
         97:72:43:64:72:db:73:c8:31:d9:76:f0:50:1e:49:a6:c1:bd:
         21:7a:e4:10:c2:0f:b7:15:02:df:73:eb:81:04:46:95:4e:20:
         39:8f:f7:23:b2:a6:f9:a4:14:bd:c9:9c:4a:4a:9b:8f:57:99:
         7c:c0:e8:73:e4:31:12:dd:e0:bb:09:90:29:d5:6d:c0:9e:0c:
         e8:35:40:6e:f4:aa:5d:c3:7f:67:f2:63:64:93:b8:d3:62:ae:
         5c:d9:a7:88:21:8c:e8:fe:1b:fe:cf:17:26:0d:90:7a:e0:5b:
         cb:70:1e:ba:a5:d6:de:62:60:7d:6f:46:61:2f:78:d2:22:c8:
         77:5f:d8:9e:93:f2:71:32:e3:43:37:3f:6e:c5:b2:61:2f:bd:
         d8:69:6a:69:05:aa:41:00:21:5f:bf:30:f1:09:15:71:ce:be:
         c9:f6:bb:2f:1a:33:fa:37:06:7c:dd:55:51:45:10:9d:fc:61:
         1e:03:54:88:ab:29:8e:1d:9d:17:d9:77:64:17:27:4f:16:b6:
         d3:69:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:18 2025 by rpki-client