Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/77620239-3aec-3c32-b816-ad525d971898.roa
File:                     77620239-3aec-3c32-b816-ad525d971898.roa (raw, json)
Hash identifier:          /UNw2qolMLmxghz62FjcNPmXX8ogStkJiDj+aRH3tjQ=
Subject key identifier:   BF:9E:85:4C:4A:DE:48:93:94:B4:4E:DC:CA:21:92:51:BC:35:2A:45
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584734C8842983161B0E7E8E9C80
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/77620239-3aec-3c32-b816-ad525d971898.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     53340
IP address blocks:        66.113.97.0/24 maxlen: 24
                          66.113.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:84:29:83:16:1b:0e:7e:8e:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=7324f66d-cbf2-4b2e-840a-29a88bcb18b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:74:17:a8:9d:d5:a8:8d:49:93:3f:b9:3f:
                    fc:38:27:1d:89:65:d2:19:14:31:f1:d8:2c:75:cf:
                    ee:39:06:c3:83:93:b0:ba:34:19:a8:87:87:bd:65:
                    fc:6c:3c:04:8c:ad:18:e2:a3:13:f7:04:d4:0c:22:
                    41:72:9e:24:5c:78:f2:82:74:fc:23:7a:0d:38:6e:
                    b6:b4:1e:c7:45:ed:8d:35:18:dc:af:3d:7b:5c:2e:
                    72:d5:ef:e3:9f:8a:44:3b:c3:ac:27:4d:7b:e1:09:
                    0d:84:12:24:07:4e:86:67:3e:94:b3:f8:1e:35:1c:
                    a8:f8:1d:fc:ef:eb:e9:b3:66:4e:9f:d7:43:f0:87:
                    68:b2:68:e6:3f:1e:0d:59:9d:73:1f:c9:3d:4d:01:
                    97:c8:66:1a:89:bf:9f:16:76:82:b4:8a:06:81:63:
                    b3:b6:21:6d:47:33:47:63:b4:b7:11:78:f1:86:a2:
                    f4:31:6c:cf:2d:09:e5:59:1e:fa:2c:16:01:6c:f9:
                    8c:6f:8f:26:62:fb:7c:ce:48:f3:d6:2a:36:0b:c6:
                    2a:e2:48:10:4f:60:d5:c8:7e:91:20:eb:2d:30:bc:
                    3d:51:38:66:d7:95:88:14:cd:c2:70:37:05:9f:c5:
                    d0:10:8f:c8:76:7a:a3:a1:58:9a:5f:0b:c3:77:29:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:85:4C:4A:DE:48:93:94:B4:4E:DC:CA:21:92:51:BC:35:2A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/77620239-3aec-3c32-b816-ad525d971898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.97.0/24
                  66.113.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:67:82:77:80:46:a8:e7:9e:f2:6d:ec:c1:63:2f:86:b7:
         ee:a4:5e:48:40:91:ed:4c:ad:cb:c4:4a:33:23:70:d5:47:74:
         cf:7a:ca:34:bd:d8:5d:ae:00:39:f1:db:2c:fb:72:e7:af:ea:
         d6:63:78:d5:34:e7:2f:13:1c:07:09:d6:4a:ff:8e:cf:2d:0a:
         e0:2e:30:45:b4:c8:22:a8:42:2b:6f:90:ad:02:8b:dd:52:9d:
         0a:cc:e7:6f:3a:35:5f:ee:49:ec:52:4f:73:0b:55:8f:7d:86:
         95:4e:3d:54:2b:37:3b:75:12:e4:80:a2:d8:e8:97:63:fa:39:
         c0:ad:7d:20:11:27:d3:67:a7:9e:5e:43:01:3c:22:65:4b:4f:
         cb:3a:cf:df:17:15:e5:c8:e3:8a:0f:47:e2:5d:8f:5e:13:ac:
         8c:60:b4:74:f5:c1:3b:4f:be:1e:b8:91:fc:42:b6:38:36:d2:
         25:c9:bf:9f:52:e6:66:26:c6:7c:4c:96:1f:1e:a0:14:11:e6:
         51:81:af:8c:ac:82:3f:2e:f5:9c:92:09:88:00:a2:4c:2b:f1:
         b9:fb:32:e0:b6:3d:98:0d:a0:9e:ae:c4:f1:fa:73:d5:da:aa:
         2e:1d:55:74:a4:54:13:d9:dc:2d:33:48:ab:d6:8d:24:a4:c0:
         20:99:15:c2
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEc0yIQpgxYbDn6OnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz
YzE2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
NzMyNGY2NmQtY2JmMi00YjJlLTg0MGEtMjlhODhiY2IxOGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKF0F6id1aiNSZM/uT/8OCcdiWXSGRQx8dgs
dc/uOQbDg5OwujQZqIeHvWX8bDwEjK0Y4qMT9wTUDCJBcp4kXHjygnT8I3oNOG62
tB7HRe2NNRjcrz17XC5y1e/jn4pEO8OsJ0174QkNhBIkB06GZz6Us/geNRyo+B38
7+vps2ZOn9dD8IdosmjmPx4NWZ1zH8k9TQGXyGYaib+fFnaCtIoGgWOztiFtRzNH
Y7S3EXjxhqL0MWzPLQnlWR76LBYBbPmMb48mYvt8zkjz1io2C8Yq4kgQT2DVyH6R
IOstMLw9UThm15WIFM3CcDcFn8XQEI/IdnqjoViaXwvDdynejwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL+ehUxK3kiTlLRO3MohklG8NSpFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz
ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvNzc2MjAyMzktM2FlYy0z
YzMyLWI4MTYtYWQ1MjVkOTcxODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3
MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz
M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2
ZTY3MzNjMTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQnFhAwQA
QnFpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEBLZ4J3gEao557ybezBYy+Gt+6kXkhAke1MrcvESjMjcNVH
dM96yjS92F2uADnx2yz7cuev6tZjeNU05y8THAcJ1kr/js8tCuAuMEW0yCKoQitv
kK0Ci91SnQrM5286NV/uSexST3MLVY99hpVOPVQrNzt1EuSAotjol2P6OcCtfSAR
J9Nnp55eQwE8ImVLT8s6z98XFeXI44oPR+Jdj14TrIxgtHT1wTtPvh64kfxCtjg2
0iXJv59S5mYmxnxMlh8eoBQR5lGBr4ysgj8u9ZySCYgAokwr8bn7MuC2PZgNoJ6u
xPH6c9Xaqi4dVXSkVBPZ3C0zSKvWjSSkwCCZFcI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org