Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa
File:                     3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa (raw, json)
Hash identifier:          G32L97IQD56HKiz0K3qMfEKwSUqEnUKAqrxuHUfy8SU=
Subject key identifier:   4D:7F:C8:C4:9C:A5:43:FB:F8:F5:75:64:AC:75:4C:64:F5:43:C6:3F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858496484499EDA49868FA4293B90
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     174
IP address blocks:        66.90.100.0/24 maxlen: 24
                          66.90.103.0/24 maxlen: 24
                          67.159.10.0/24 maxlen: 24
                          198.16.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:49:9e:da:49:86:8f:a4:29:3b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=36386f2c-274c-4128-802b-a907d110bc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:67:76:74:56:2d:45:98:2f:1c:be:af:12:
                    d5:92:77:ee:9d:6b:cd:92:3f:c9:b0:7c:ab:18:ba:
                    6e:39:e2:6c:1e:14:3e:8a:6e:63:ab:9b:1f:4e:7f:
                    84:2a:17:20:ad:2d:a5:c1:da:1a:45:35:f4:9a:95:
                    08:73:d8:97:14:a7:63:ff:b7:a4:94:fb:57:52:11:
                    ec:66:36:7e:e9:96:d5:06:e1:98:9e:58:81:75:c6:
                    c7:1a:4c:7d:45:06:6b:40:99:9a:2c:e3:a0:5d:0c:
                    e3:24:7f:04:2f:4f:b8:98:36:1a:e7:04:e4:05:53:
                    6c:9a:13:1e:e0:0d:70:c6:63:88:08:01:d3:b9:b5:
                    11:b2:04:43:6c:bd:7c:2d:48:00:61:de:90:e9:39:
                    ea:07:6f:a0:c9:79:7b:fe:29:84:2a:20:be:ae:da:
                    d2:f0:6b:f3:3a:8a:51:76:ad:4c:2c:c3:50:47:36:
                    12:e0:3a:1f:65:ab:9f:3e:bc:bd:e7:3b:c5:2d:6a:
                    a4:b8:85:f5:e8:fa:35:49:2b:2b:21:57:e6:7d:dc:
                    b3:77:3f:14:6c:a3:1c:52:dd:c4:85:f1:ec:7c:31:
                    31:92:ec:df:62:fc:40:07:99:06:92:6f:45:d9:6a:
                    ba:61:b1:6d:5c:63:b8:e4:8b:ee:17:3c:a0:c8:c6:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7F:C8:C4:9C:A5:43:FB:F8:F5:75:64:AC:75:4C:64:F5:43:C6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.100.0/24
                  66.90.103.0/24
                  67.159.10.0/24
                  198.16.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:8d:e8:ed:6f:84:78:4d:8b:68:d6:06:2a:c1:a3:04:2b:e2:
         8d:50:7b:39:5e:5d:82:04:8e:0f:c9:d1:d3:af:41:03:f5:74:
         1f:4b:8a:47:58:32:59:78:19:c5:7a:45:48:b6:19:c4:c4:2e:
         82:df:28:47:81:8c:ed:fd:e0:5c:91:82:5d:4b:76:54:3a:e1:
         a9:ba:b0:59:59:54:10:64:0b:39:9f:8c:6d:cc:2d:dd:6a:4a:
         55:18:1d:4a:da:0e:25:3c:d7:0b:81:62:af:40:a8:a8:8f:3e:
         a8:06:c1:9e:20:73:f6:c8:c1:ab:d7:ca:b9:4b:e4:1b:2b:61:
         dc:b5:e3:5e:05:cc:f8:4a:4e:fb:36:17:3b:7d:ec:81:12:b8:
         1f:df:c2:45:16:19:bf:98:c7:c0:30:e0:63:b7:c4:54:cf:17:
         a0:83:cc:79:dc:9f:44:3b:54:d3:f5:ec:f8:ee:b0:96:5d:4c:
         c8:0a:d6:f2:d2:4b:05:5a:c0:70:ea:5f:cb:d2:8e:6f:4d:a2:
         21:40:e8:2d:05:ff:3c:93:35:ed:b0:5e:d8:10:77:56:50:20:
         75:05:a0:87:9c:d0:f3:77:a2:c9:50:fd:3b:be:4d:a9:46:1a:
         d7:9d:88:73:bd:c8:4c:d7:e4:bd:29:fc:7d:e3:2f:98:c1:67:
         60:ae:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:51 2025 by rpki-client