Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa
File:                     3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa (raw, json)
Hash identifier:          Mw3aAr17d+mD4bhBMkwWHEghgxSBCbqY5b5/RQmPyYc=
Subject key identifier:   C6:BF:BB:36:0E:E1:7B:32:06:DF:66:05:B1:39:E0:6B:6A:40:68:B5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB52CE2CFF0949CFCB33D0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        66.54.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:52:ce:2c:ff:09:49:cf:cb:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=da6adff4-85a2-4c4c-8824-f68636cae516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dd:6c:49:75:7e:4c:ff:3f:cd:42:23:3f:61:
                    f8:9c:a4:3b:71:0f:48:db:1c:d2:6e:e0:88:38:d4:
                    36:67:84:97:4b:63:fd:86:d4:eb:f3:03:74:07:1a:
                    b7:73:fc:7b:d5:0e:bc:6f:69:2a:be:31:83:6b:2f:
                    e2:b7:66:65:9e:54:ce:15:31:2d:c8:37:88:25:ee:
                    5c:2f:cd:3d:31:2f:19:63:45:ae:83:a3:30:92:26:
                    72:cc:b4:8c:33:3a:bc:82:74:3d:bf:17:50:6c:dc:
                    4a:44:fc:60:8f:a5:c9:8e:af:07:05:07:47:de:0c:
                    72:04:c4:dc:f7:32:2c:61:7b:1a:dc:ab:ad:e0:3f:
                    04:f9:a2:b7:1d:f8:c9:ae:93:a9:32:33:62:7a:11:
                    da:ff:c3:0b:2d:16:f9:90:25:46:f1:6d:f3:a8:6d:
                    00:ca:b8:ec:06:69:cf:64:92:07:07:09:4e:7d:68:
                    29:c7:50:5b:d8:f8:71:af:62:1c:d1:a5:4d:44:c5:
                    c9:b0:bb:56:47:4c:f8:38:62:71:b6:b6:28:eb:a0:
                    22:32:eb:ac:e6:9c:c2:98:28:32:77:f9:72:aa:f7:
                    fc:7e:1e:b7:3e:85:55:94:1f:54:aa:aa:08:6c:6f:
                    62:fe:cf:ee:9c:b2:be:e5:55:5f:8c:3e:69:21:0c:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BF:BB:36:0E:E1:7B:32:06:DF:66:05:B1:39:E0:6B:6A:40:68:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:42:cc:e0:19:04:93:63:92:7d:c3:39:49:15:67:57:ce:50:
         3f:df:a6:04:61:9c:60:c6:91:4b:2f:1c:42:22:6c:99:c0:6f:
         b8:64:3f:54:8d:bd:9a:8c:a6:06:25:fe:83:8a:28:9a:27:a0:
         1c:bb:d4:68:1d:7a:d4:58:45:24:0c:fa:ae:5e:9d:3e:db:3e:
         05:23:6f:0c:55:ea:ad:f2:b4:e0:06:69:76:6f:df:50:13:96:
         ba:48:12:bf:de:6b:68:2a:ef:26:42:f0:7c:0c:09:e8:8f:1a:
         17:cd:1f:ac:72:63:09:e3:14:6c:44:7b:d7:d2:a7:04:9a:69:
         41:70:1c:68:3a:6a:c2:62:d7:35:d1:6d:cb:d2:b3:29:b6:71:
         f6:27:0f:5c:85:18:7e:9b:24:f6:d1:2e:83:a5:ae:6d:b8:0c:
         fc:9b:28:16:db:56:a4:57:ee:f7:fa:70:1f:e0:12:f3:c7:80:
         28:85:a8:fd:b4:21:2b:c7:e6:c8:d7:89:c2:d1:7e:c8:e0:fd:
         dd:e7:6e:f3:b9:39:4c:ea:ba:07:a2:b7:ba:f2:66:d1:f9:ae:
         9d:48:b0:2f:17:78:c8:51:3c:e5:cd:60:58:d8:7d:2d:17:c6:
         df:d6:50:b6:81:54:fc:76:b1:c8:5b:00:2f:21:17:42:65:71:
         89:8f:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:57 2025 by rpki-client