Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa
File:                     32646d93-b5db-3d3a-b676-ea3a461808bf.roa (raw, json)
Hash identifier:          BzfGXM/rVouVvbP4/Zf9l4ezPanBSpc6wDD9pgL/iK0=
Subject key identifier:   9D:2B:63:04:AF:81:1C:F3:8D:2D:BE:E2:39:C2:16:00:43:95:8F:96
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F43285848B6261C8A69AF2C633379EE00
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     393387
IP address blocks:        66.113.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1c:8a:69:af:2c:63:33:79:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=e6776f21-daa7-4f3c-955a-69baeb7a133a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:27:91:e7:ed:31:44:28:92:ca:46:7d:6d:
                    c7:48:9c:26:f7:73:88:d8:03:0e:c8:92:01:5f:81:
                    f6:25:c5:ed:20:e9:fc:83:26:24:ff:29:0b:81:6f:
                    ee:d7:4b:97:4d:c1:15:53:7f:42:91:e3:cb:5b:cb:
                    14:db:c4:8c:c8:3c:b3:6b:aa:f1:50:f5:cd:2b:f6:
                    e7:88:c5:30:81:4f:49:a1:4c:70:55:22:b0:41:fb:
                    3d:a4:3c:06:5a:e7:a5:da:bf:65:56:da:c4:c6:eb:
                    db:13:40:3a:9a:e5:9e:7d:73:2b:c7:1d:ad:91:7f:
                    7b:2b:bc:4b:ee:81:a9:a1:0b:67:8e:9a:db:10:c1:
                    db:9e:c6:57:82:e0:7b:c2:52:34:32:97:f6:34:5b:
                    3f:a0:87:ab:85:1a:ee:77:34:83:92:a2:2b:0f:3e:
                    7e:6d:15:d2:d5:11:8d:a1:a7:52:7d:3d:ce:7d:d0:
                    4e:45:47:8b:5f:4a:ce:6c:0f:ce:5d:66:d8:38:17:
                    9a:34:86:fd:fa:11:09:a4:dc:18:9b:bd:04:ff:18:
                    c5:88:ac:dc:ed:bc:aa:01:cf:09:d7:78:34:0e:94:
                    87:34:46:ef:3c:e2:64:74:a2:04:45:ce:1c:83:a0:
                    12:d6:70:91:de:e7:67:ab:10:ed:71:43:ef:2d:35:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:63:04:AF:81:1C:F3:8D:2D:BE:E2:39:C2:16:00:43:95:8F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:76:bf:c5:c9:00:6c:8b:ba:9f:99:a4:26:24:2b:04:f0:a4:
         8c:93:6f:ab:a8:b6:d1:26:5a:39:20:fc:5e:af:65:c2:3c:bd:
         d0:7f:6e:d8:b6:44:8c:34:8b:a7:4e:93:1e:8e:11:58:e5:f0:
         4f:19:31:ab:cc:e5:8e:49:a4:99:72:05:d3:6a:f3:6c:b8:1f:
         29:6c:76:cd:d0:1d:c6:73:89:02:e6:7b:35:8c:29:78:81:5a:
         20:8f:27:10:c8:ad:0a:45:b4:12:10:84:e1:b0:a8:7d:12:da:
         f3:f1:bf:99:68:2c:98:48:e3:6e:60:00:18:73:c7:5d:6f:b0:
         85:1f:ac:6f:e7:39:cc:da:1f:31:5a:83:d1:af:a1:cf:75:00:
         f1:0e:aa:ca:d6:35:86:3c:c5:d3:60:9d:c6:ff:47:8f:b5:1a:
         cd:b8:7d:2b:8e:0f:6f:b0:5b:93:a6:34:69:4c:2a:07:2c:eb:
         79:96:89:91:48:68:19:a4:0b:e0:e9:fe:d5:49:42:20:fe:15:
         7c:a4:9f:64:88:63:9a:5d:29:28:7c:81:ee:b4:08:fe:86:7f:
         09:84:68:a2:12:a4:92:47:d8:49:50:a4:54:48:97:36:fa:8c:
         8c:02:ea:8b:d6:17:28:09:94:4c:bf:c6:71:11:54:ec:42:98:
         00:09:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:14 2025 by rpki-client