Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa
File:                     9b2c6c8c-5808-3e93-99c4-ca1823759356.roa (raw, json)
Hash identifier:          tW0JTIF2yKV5pXi0HSA/UK7UFNoSOBHv0QIg5h/f+vA=
Subject key identifier:   6E:1D:B3:5F:2D:31:41:B3:81:30:11:F1:3D:3F:E3:79:AE:B9:4F:DC
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285848B35B69ED9306F88536453D80
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     10430
IP address blocks:        66.96.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:69:ed:93:06:f8:85:36:45:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=717ccca5-ac03-4fb4-9049-09d458adcb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:bf:28:86:db:4a:7f:84:e1:87:da:bb:6f:
                    09:41:f3:4e:c0:70:25:e3:98:d4:8f:9d:bc:c3:b6:
                    5a:5b:fc:1e:e2:53:8f:8b:4b:1f:54:c2:77:51:f0:
                    fc:d9:48:60:6d:6e:8e:12:56:9c:32:67:31:7b:b8:
                    6a:0c:4d:06:48:ee:6f:3e:19:cb:94:84:a6:40:cd:
                    b4:08:72:18:0e:7c:e9:02:66:3b:88:85:79:2f:2a:
                    90:f3:b8:d0:fb:1e:20:de:00:1a:10:ae:2d:04:d4:
                    be:b7:d1:56:c4:b4:9f:ac:12:73:3d:57:20:47:ed:
                    11:5a:99:50:d8:d2:68:99:a5:a2:9a:a9:f9:75:30:
                    6f:9b:ce:0a:ba:bc:57:c9:28:2f:70:9f:d7:13:a8:
                    e7:ee:2c:3b:3a:01:23:00:c7:c4:cd:d4:c2:6b:97:
                    93:ee:bc:62:79:d0:cb:7d:78:87:40:37:0a:aa:f6:
                    08:e4:6b:77:39:6b:5b:a3:2c:08:b6:44:63:ee:29:
                    d2:bf:cc:4e:6a:3e:64:7f:3e:68:5e:e4:cf:9a:96:
                    15:34:29:d5:b7:9d:23:2f:b5:a6:47:dd:cb:2b:ce:
                    6d:1d:a3:65:8e:9f:8c:f6:3f:00:31:88:c6:fa:d4:
                    82:80:fc:d9:bb:72:cd:1b:23:30:c1:fa:6a:7c:41:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1D:B3:5F:2D:31:41:B3:81:30:11:F1:3D:3F:E3:79:AE:B9:4F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/9b2c6c8c-5808-3e93-99c4-ca1823759356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c8:b6:e7:fa:66:d0:fb:59:8a:a8:75:6b:96:58:f0:1c:58:
         0c:17:7f:36:27:32:7b:da:ad:e2:1d:72:68:66:4b:72:ed:37:
         59:4e:23:b0:1b:29:a5:07:14:1a:bd:82:ac:af:5a:01:d2:ba:
         30:cd:4c:cc:a2:92:c7:ae:9b:6e:54:ed:78:b3:b8:ea:4e:2e:
         61:c6:2e:2a:3b:37:da:1d:3f:6f:ff:c5:09:7b:70:4c:2c:43:
         a6:12:c1:07:5b:3e:d9:c6:88:7f:b4:81:4b:b9:92:f1:8a:d8:
         a0:7d:94:77:1d:ef:d2:19:b0:eb:6b:ac:d9:3b:42:21:26:d6:
         9b:8a:21:69:29:81:3f:58:33:66:43:fb:7e:e0:a1:05:e6:4e:
         dd:0e:91:77:7c:55:2e:4b:7e:f0:fb:b6:2c:40:2a:1f:94:6f:
         08:e5:a4:ad:be:53:e7:1c:37:2f:42:12:9a:39:b0:08:87:f3:
         5d:f3:fe:1d:99:fa:be:a7:77:8f:6e:18:eb:1b:fe:7d:de:22:
         c3:cf:c8:31:03:44:3f:51:23:0e:d1:47:d2:3e:e1:a1:b6:08:
         e9:c7:b1:c3:1f:95:36:37:9b:e5:27:2a:21:39:d9:f4:49:cb:
         bd:09:e8:05:38:db:17:40:90:04:f0:f8:ca:d9:7c:3b:75:b9:
         22:fd:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:26 2025 by rpki-client