Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa
File:                     0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa (raw, json)
Hash identifier:          HbL1pjO7JnSdRMdAqbbxVdh6Um1JH89Z/kzu/r2LAuk=
Subject key identifier:   13:7B:62:8E:B1:2A:30:B7:34:48:BB:66:A3:5B:C6:8A:49:96:61:79
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB51FACA554C9B262B7D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     203
IP address blocks:        66.54.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:51:fa:ca:55:4c:9b:26:2b:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=8c0396dd-87d9-415b-8c8d-2afb65dba42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:77:96:3d:93:ad:f8:7f:97:4c:33:87:b4:
                    2c:29:18:c0:2e:03:11:80:f4:db:fc:2d:c5:a7:05:
                    0d:c5:21:17:92:7e:20:56:69:94:e2:e0:b7:9b:29:
                    93:f2:63:f5:c2:5b:c5:13:61:c8:e0:6f:60:4d:b9:
                    d8:1f:f4:4f:be:c3:0d:9e:65:24:24:2e:75:1e:78:
                    c2:c5:ec:8c:64:e4:a4:c7:b2:17:40:a0:f0:16:3e:
                    cb:b2:c1:4e:8b:03:e0:8e:27:24:f2:86:a5:5c:f9:
                    14:23:a2:e9:be:c1:1e:99:6f:15:3f:d0:f0:7b:ea:
                    b9:e1:1e:c0:88:36:07:ee:ed:f8:f2:50:54:bf:d0:
                    90:77:e9:59:fc:f2:6c:e9:3f:63:40:33:ab:36:c6:
                    dc:47:aa:18:c4:33:ac:f1:4b:6f:9f:3d:5c:2b:1e:
                    aa:fa:01:09:e3:24:6a:ef:95:52:0f:5e:4b:00:cd:
                    bb:ca:31:5d:17:72:83:3c:10:29:c1:c1:4e:ef:3d:
                    24:58:8b:3e:c7:75:88:50:a3:c6:4a:3d:f0:5b:ed:
                    fe:8b:7d:35:cd:3c:8c:21:89:a2:b8:67:71:b4:cd:
                    62:8e:64:c6:5d:b9:20:b2:7b:16:21:da:86:1f:bc:
                    62:c0:12:c5:e3:de:4c:62:85:3c:bc:fb:94:df:51:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:62:8E:B1:2A:30:B7:34:48:BB:66:A3:5B:C6:8A:49:96:61:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e0bab63-bd26-3ee4-9047-3c3ff36cff2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:34:80:16:a8:79:c9:4e:1d:15:74:77:ed:03:23:4b:aa:
         3a:5b:9c:3a:98:f8:25:9a:bf:d7:48:ac:d3:15:3e:2e:f8:eb:
         8a:9c:4a:d9:ed:0a:41:00:80:f7:5f:e5:7f:07:64:99:9f:47:
         0a:ab:65:89:ea:e6:23:83:6b:db:19:f1:0a:91:9b:6d:8f:b0:
         f1:c1:36:29:ec:1a:14:4b:ab:d8:f3:cd:f4:92:a8:cb:42:27:
         3f:c3:6d:72:b1:68:69:0d:90:83:9b:b2:ba:1d:44:e7:1a:e3:
         55:63:22:30:c1:cb:7e:b9:85:14:41:82:39:3d:57:b5:a9:cf:
         6b:ae:e6:ac:24:55:3e:53:9b:00:f3:fa:fc:67:db:6d:49:a5:
         63:e6:f8:94:07:be:b7:2e:9d:89:95:4b:66:ab:05:5e:fc:d3:
         a0:aa:9f:64:ca:8b:a8:74:0a:d4:fe:24:e5:b0:23:0e:03:07:
         7e:f3:19:6b:0b:6a:bb:34:61:6b:7a:0c:37:9a:14:98:f6:80:
         1d:7e:9f:07:6c:cc:69:c2:31:68:74:0b:98:37:1f:15:08:0d:
         89:d1:2d:70:9d:e4:88:67:bd:a7:b2:eb:82:b7:97:e8:92:5f:
         03:a0:19:5e:c5:ff:5f:a3:5f:b0:ec:87:c9:28:f2:cd:42:c8:
         41:40:28:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1H6ylVMmyYrfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk
OGMwMzk2ZGQtODdkOS00MTViLThjOGQtMmFmYjY1ZGJhNDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q93lj2Trfh/l0wzh7QsKRjALgMRgPTb/C3F
pwUNxSEXkn4gVmmU4uC3mymT8mP1wlvFE2HI4G9gTbnYH/RPvsMNnmUkJC51HnjC
xeyMZOSkx7IXQKDwFj7LssFOiwPgjick8oalXPkUI6LpvsEemW8VP9Dwe+q54R7A
iDYH7u348lBUv9CQd+lZ/PJs6T9jQDOrNsbcR6oYxDOs8Utvnz1cKx6q+gEJ4yRq
75VSD15LAM27yjFdF3KDPBApwcFO7z0kWIs+x3WIUKPGSj3wW+3+i301zTyMIYmi
uGdxtM1ijmTGXbkgsnsWIdqGH7xiwBLF495MYoU8vPuU31GcUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBN7Yo6xKjC3NEi7ZqNbxopJlmF5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGUwYmFiNjMtYmQyNi0z
ZWU0LTkwNDctM2MzZmYzNmNmZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGfNIAWqHnJTh0VdHftAyNLqjpbnDqY+CWav9dIrNMVPi7464qcStnt
CkEAgPdf5X8HZJmfRwqrZYnq5iODa9sZ8QqRm22PsPHBNinsGhRLq9jzzfSSqMtC
Jz/DbXKxaGkNkIObsrodROca41VjIjDBy365hRRBgjk9V7Wpz2uu5qwkVT5TmwDz
+vxn221JpWPm+JQHvrcunYmVS2arBV7806Cqn2TKi6h0CtT+JOWwIw4DB37zGWsL
ars0YWt6DDeaFJj2gB1+nwdszGnCMWh0C5g3HxUIDYnRLXCd5Ihnvaey64K3l+iS
XwOgGV7F/1+jX7Dsh8ko8s1CyEFAKP4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:21 2025 by rpki-client