Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/732ebb50-bdab-3f6d-ab91-6d17560de409.roa
File:                     732ebb50-bdab-3f6d-ab91-6d17560de409.roa (raw, json)
Hash identifier:          4QUGwtoE0w3lvoVorjwAkDWIU11yQlUKR7b5cZc7914=
Subject key identifier:   86:2A:B6:AA:2D:C3:B9:C9:07:CA:85:A6:6C:4D:07:71:A5:C8:2D:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584893BA04868F4E40A643FF0A40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/732ebb50-bdab-3f6d-ab91-6d17560de409.roa
Signing time:             Fri 17 Jan 2025 18:05:31 +0000
ROA not before:           Fri 17 Jan 2025 18:05:31 +0000
ROA not after:            Thu 17 Apr 2025 17:05:31 +0000
asID:                     401605
IP address blocks:        66.78.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:ba:04:86:8f:4e:40:a6:43:ff:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 17 18:05:31 2025 GMT
            Not After : Apr 17 17:05:31 2025 GMT
        Subject: CN=e96f73ec-02a6-426b-b6e7-932c5b8ac8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:57:17:25:70:1a:02:08:39:d5:98:de:f8:
                    92:11:9d:49:63:a0:45:83:65:1b:2f:ec:00:aa:47:
                    16:10:d8:d9:b2:24:80:65:d1:1d:fc:34:13:82:49:
                    ad:32:4f:8e:6c:b1:8d:33:0a:71:68:74:79:0d:24:
                    9f:bc:6b:dc:17:37:be:53:12:1f:9d:3f:ca:10:7e:
                    57:76:23:5e:ff:f6:b1:dd:ad:df:cb:59:da:f9:1f:
                    0f:1b:10:f3:d8:8c:2a:2f:f7:69:06:26:06:2a:00:
                    25:6a:47:fa:a6:82:f5:20:36:03:89:e9:47:93:4b:
                    1e:d3:c5:51:16:36:8c:e4:bf:81:1f:63:9b:4a:0a:
                    aa:c2:82:5a:99:d3:a0:29:43:f1:94:61:d4:21:29:
                    a0:de:74:57:d0:b3:78:1a:d1:83:28:77:5a:fa:eb:
                    e9:d2:3a:20:5e:05:ba:4a:f1:58:29:0f:94:95:2a:
                    f9:b8:c6:c1:4c:2b:50:08:e7:a4:a2:62:84:56:ca:
                    bd:e9:bd:e6:80:0b:eb:db:e6:b3:81:f1:4c:ee:85:
                    8e:07:d2:35:e5:1d:c6:96:1c:57:f8:97:ca:25:6e:
                    f4:5d:4a:ec:d6:82:1b:a0:e1:94:5d:ea:71:78:31:
                    34:2e:83:a2:3c:36:c9:48:3d:d3:84:6d:bc:ef:de:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:B6:AA:2D:C3:B9:C9:07:CA:85:A6:6C:4D:07:71:A5:C8:2D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/732ebb50-bdab-3f6d-ab91-6d17560de409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:f1:01:a7:1f:34:65:57:b5:4a:e9:ce:71:36:7b:70:d6:
         00:6f:11:61:6c:be:91:7c:91:44:64:c2:5d:c6:89:5d:ba:5f:
         2e:a1:32:1a:bf:49:ce:1a:ec:0e:c6:5a:41:3d:6d:4b:24:52:
         79:ad:ad:ce:86:82:b4:65:76:3d:c5:a2:33:c4:13:de:c8:0f:
         cf:24:96:4f:60:90:b7:58:c7:87:76:ac:59:06:9f:82:44:00:
         06:66:f7:15:8c:bd:83:fb:52:24:3e:a6:36:50:45:10:8e:8f:
         22:80:65:52:d0:c0:f0:bc:05:3e:dc:c8:56:fb:35:60:3e:40:
         ad:ee:ca:57:43:3c:3a:8f:ab:f7:19:ba:f7:79:df:5f:96:e5:
         d1:93:f9:94:ac:54:91:5f:2a:d0:0e:01:73:c6:70:7c:a6:eb:
         0c:a8:47:94:87:be:d0:f9:29:93:0e:93:70:9d:95:33:3f:d7:
         e2:93:54:cb:89:77:12:ed:cf:be:af:23:7d:1e:7f:31:70:df:
         83:9b:10:e5:de:75:b6:ba:97:16:2f:e8:08:c7:1f:cd:ef:2b:
         57:9f:95:5f:be:5c:19:64:1b:d7:64:73:e5:14:81:c7:d0:ca:
         be:ad:ef:1a:1a:42:86:29:75:c5:4b:f3:11:df:a7:2e:a4:cb:
         d7:c1:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:02:04 2025 by rpki-client