Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa
File:                     d33868cc-aaa1-37b3-b510-97181288e62a.roa (raw, json)
Hash identifier:          fgPgRRPqs4UknjEJalIAGKFVGbp1DdssCuORU0O/8UQ=
Subject key identifier:   60:E2:D0:57:BC:04:E2:FB:A7:94:53:EB:2F:E2:85:11:F9:A4:EF:25
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858499D303F59A8D8882CAC1E0880
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa
Signing time:             Tue 22 Apr 2025 20:12:57 +0000
ROA not before:           Tue 22 Apr 2025 20:12:57 +0000
ROA not after:            Mon 21 Jul 2025 20:12:57 +0000
asID:                     8100
IP address blocks:        66.232.101.0/24 maxlen: 24
                          66.232.102.0/24 maxlen: 24
                          66.232.103.0/24 maxlen: 24
                          66.232.109.0/24 maxlen: 24
                          66.232.113.0/24 maxlen: 24
                          66.232.116.0/24 maxlen: 24
                          66.232.117.0/24 maxlen: 24
                          66.232.120.0/24 maxlen: 24
                          66.232.121.0/24 maxlen: 24
                          66.232.122.0/24 maxlen: 24
                          66.232.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:30:3f:59:a8:d8:88:2c:ac:1e:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr 22 20:12:57 2025 GMT
            Not After : Jul 21 20:12:57 2025 GMT
        Subject: CN=da48ba41-abcf-4c92-bd08-c7324b1f054c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:13:15:61:70:20:77:19:55:55:32:2f:a1:
                    21:01:71:94:89:4a:f1:4e:06:a3:b6:4b:fa:5a:0b:
                    6e:8c:44:65:16:c6:c5:14:fb:fd:b3:00:8a:c6:e7:
                    19:31:64:a8:ea:da:5a:ef:89:d4:59:f5:81:8d:09:
                    7d:36:ae:33:07:8d:5f:10:ef:c7:e4:a4:92:5b:8c:
                    30:68:69:c0:d4:ab:48:15:8f:da:85:a2:98:3b:cf:
                    1f:4f:27:b5:64:35:77:49:54:54:07:08:18:65:57:
                    8a:46:b7:b1:ad:fd:7c:15:be:b4:52:bd:4d:3c:c3:
                    2f:d3:e2:65:dd:56:2f:69:24:8f:7e:f2:30:7d:cb:
                    bd:a5:a2:f1:77:47:b8:65:8d:46:20:b6:18:ba:ff:
                    f6:05:be:fc:62:48:bc:62:7c:ab:b9:f2:cc:62:45:
                    21:da:a4:a8:ae:6c:2e:4d:c1:c6:be:fc:08:45:cc:
                    4b:f9:d9:a3:90:72:00:ff:52:f1:ca:17:b8:0c:3f:
                    70:58:cf:ba:d0:d2:b5:1f:ce:73:94:4f:eb:db:25:
                    8e:44:6a:34:8c:a2:54:83:fc:84:bd:09:f9:95:48:
                    c1:90:e0:6d:f9:ed:bb:e5:4e:ea:e5:3d:49:c7:72:
                    f8:ee:e3:65:53:03:cc:0b:c3:df:12:61:09:3d:f7:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E2:D0:57:BC:04:E2:FB:A7:94:53:EB:2F:E2:85:11:F9:A4:EF:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.101.0-66.232.103.255
                  66.232.109.0/24
                  66.232.113.0/24
                  66.232.116.0/23
                  66.232.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:f6:dc:61:e6:a8:24:1a:5f:0c:69:93:d1:ff:d9:76:78:
         e3:72:9e:fe:4d:07:eb:ca:19:62:c0:53:ec:a8:ea:7d:f1:a9:
         49:9e:a4:aa:92:a9:51:34:d9:4d:fd:5e:4c:56:67:f9:21:38:
         d5:1c:d0:58:f1:b3:66:c3:5e:85:dc:8f:fe:8d:de:9e:b1:51:
         8f:8b:a2:41:79:2c:e3:45:ef:11:3e:c5:fb:1d:2f:a1:ce:85:
         d3:26:06:73:74:c7:11:d2:d0:76:3e:8e:bb:5e:4b:50:46:29:
         fe:5a:57:f4:61:50:86:92:7a:f7:38:39:c6:d1:ae:8a:b6:d4:
         ab:49:f3:8d:b5:98:2d:21:64:30:4d:f6:42:18:87:ca:eb:04:
         6e:64:2f:24:1c:36:48:df:d7:22:d2:c3:d6:94:f2:52:4e:aa:
         9a:be:78:25:62:02:31:4f:f0:ed:6a:cc:25:44:8c:95:ca:fe:
         b8:59:71:aa:b1:14:c8:75:c1:39:c9:66:8e:b0:c6:b5:d7:c6:
         42:a6:0e:90:ff:99:92:80:0e:0c:9b:72:71:b9:17:fb:7d:35:
         ae:d4:d4:d5:8e:46:0e:75:d4:a1:4e:e2:f5:57:11:4a:4a:4f:
         f8:33:37:6b:ea:07:a5:70:f6:37:21:2f:98:0f:68:87:94:3d:
         ec:cd:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:03 2025 by rpki-client