Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/77620239-3aec-3c32-b816-ad525d971898.roa
File:                     77620239-3aec-3c32-b816-ad525d971898.roa (raw, json)
Hash identifier:          xS8ITy3Lz+8hVgv5H8cCO78Z/dKjGa2jo6fC79kHPYQ=
Subject key identifier:   65:F1:F0:3D:E6:7F:98:E9:7F:B1:12:71:D9:38:72:EA:79:AE:62:57
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584574B31759C06EA8E95054C180
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/77620239-3aec-3c32-b816-ad525d971898.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     53340
IP address blocks:        66.113.105.0/24 maxlen: 24
                          66.113.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:17:59:c0:6e:a8:e9:50:54:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=21b18a85-29d4-4625-88cd-b31a38b4b1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:89:5c:96:35:b3:29:50:2f:7d:17:2c:6c:
                    8f:1f:6e:c7:ea:69:17:9f:ed:76:1f:99:52:19:db:
                    52:4e:80:09:85:22:6d:1b:d3:f1:7d:37:ba:0a:a9:
                    f2:4a:0d:ad:ed:a2:32:df:f7:9e:26:cf:ec:16:84:
                    79:84:1a:f2:cd:ff:01:b9:d6:b7:ab:c5:c0:86:b2:
                    af:37:fd:77:cc:52:eb:4d:3b:e8:62:ca:ae:70:23:
                    1a:fd:44:ea:4c:1b:a1:d7:fa:99:32:93:b0:9e:96:
                    7e:6b:d8:07:c2:a6:5d:77:a7:1b:22:f2:44:dc:36:
                    63:46:e8:4c:35:f8:f4:49:48:80:95:b5:5b:9d:2f:
                    26:7c:2d:90:53:91:41:e9:3b:7e:dc:dd:88:8c:b0:
                    2f:55:4b:73:6b:09:d9:0a:64:db:69:ca:03:72:50:
                    c3:ad:53:c3:9a:c6:3d:db:74:04:ab:ad:c7:2b:b7:
                    ae:28:18:fe:b9:2a:4d:75:e4:09:0f:28:70:85:aa:
                    9b:29:7b:40:27:97:a0:f9:99:5d:87:9d:b6:31:b1:
                    7d:1a:1b:3c:e3:ca:fb:2e:1f:e8:24:41:e5:00:bf:
                    1a:74:d5:b1:7e:c5:80:59:c1:a2:32:25:ea:21:b4:
                    9e:04:c4:ac:93:c1:13:0d:48:45:96:6c:68:05:8d:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F1:F0:3D:E6:7F:98:E9:7F:B1:12:71:D9:38:72:EA:79:AE:62:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/77620239-3aec-3c32-b816-ad525d971898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.97.0/24
                  66.113.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:40:a4:df:5b:be:39:e8:6c:d6:94:df:04:2b:89:74:52:
         95:1c:65:65:d1:28:d9:61:a3:df:c7:a4:73:10:57:11:bc:a0:
         a0:dd:74:ee:d4:50:f7:c6:56:32:0b:82:c2:cd:fe:ba:95:e6:
         9e:ba:58:43:4d:6b:c3:53:17:62:e2:1a:d4:95:34:aa:69:38:
         68:ae:bf:49:a1:19:6b:ff:51:7d:a5:29:94:a2:76:d6:2d:90:
         bb:12:a9:6a:1c:e4:0a:d7:e8:b3:99:16:f4:4e:66:2b:81:c4:
         8d:c3:50:d9:12:35:19:8c:e1:25:c3:78:aa:46:05:44:af:09:
         80:7c:5a:1e:06:e8:4d:80:fa:2d:0e:fe:f4:88:23:f6:df:ce:
         b8:8a:56:24:52:10:9a:82:7e:73:08:c2:a8:f3:08:8b:65:98:
         c3:c1:f0:7e:64:69:9f:70:4c:35:a6:3c:49:94:bc:0c:0a:a6:
         91:85:a1:60:03:47:5a:a4:66:5c:1f:90:57:5d:31:df:c0:dc:
         38:e5:11:90:dc:d6:71:a8:96:d9:9f:d8:59:b5:5c:48:78:a1:
         02:00:8c:d3:52:ea:ed:85:f2:6c:9c:e8:d9:9d:ca:ae:a5:40:
         8d:57:f3:09:06:6e:95:53:1c:4c:c5:6e:28:69:80:fa:02:46:
         78:86:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:16:55 2024 by rpki-client on console-ams.rpki-client.org