Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eff7dc4b-d729-3487-81f8-7402746c4cc9.roa
File:                     eff7dc4b-d729-3487-81f8-7402746c4cc9.roa (raw, json)
Hash identifier:          VYtAxq1YEaQjHNU+j1T+2sRV0HQ/6E5rpyn4n5gTcj0=
Subject key identifier:   50:54:B7:F9:54:03:39:0C:20:7F:3A:88:7D:D7:7B:18:C6:7D:EC:DA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A3460E87D4FE9E9D58201C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eff7dc4b-d729-3487-81f8-7402746c4cc9.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3356
IP address blocks:        66.54.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:60:e8:7d:4f:e9:e9:d5:82:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=66eb65af-b04b-4204-b624-3eb295e31022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:19:41:05:e5:e9:82:18:17:9f:c7:f4:51:
                    99:00:82:c3:ca:d0:2e:ec:a1:fe:6e:e4:23:6a:dc:
                    cc:ec:3c:06:a1:2b:2b:1b:21:d3:97:15:2b:05:ee:
                    ba:bc:60:4b:7c:7e:2c:e7:89:2d:c9:e8:7a:a4:5a:
                    78:91:af:30:90:93:f9:07:c8:cd:38:88:2c:c8:34:
                    72:89:64:5a:d0:74:3c:46:26:f6:a3:19:28:5e:b0:
                    67:30:37:4c:83:a1:76:33:7e:8d:ac:b9:f0:c9:7b:
                    64:da:cc:ce:16:97:64:25:ee:ea:c2:14:f7:16:e3:
                    75:d2:73:1b:04:96:e7:46:90:ea:20:77:a9:eb:e2:
                    95:45:f5:a9:24:0b:2f:83:33:a6:d9:83:55:7a:24:
                    1f:60:b6:24:fa:a0:34:25:ca:3a:60:bf:aa:4d:28:
                    2a:9a:6e:65:47:9f:57:46:47:4b:e0:e7:75:4d:06:
                    5e:e4:32:3c:a8:a8:ba:62:4f:4f:33:02:42:6d:9a:
                    a1:53:29:05:42:50:7c:63:c1:0f:cc:6e:79:34:01:
                    a5:f9:62:ec:63:f2:2e:92:39:65:23:77:76:b3:0a:
                    51:78:99:18:a0:b2:27:42:3e:06:b4:e9:e4:c9:7f:
                    ab:6e:af:eb:bb:6b:f9:28:26:65:73:46:32:71:ce:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:54:B7:F9:54:03:39:0C:20:7F:3A:88:7D:D7:7B:18:C6:7D:EC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eff7dc4b-d729-3487-81f8-7402746c4cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:4d:30:56:88:b5:5c:17:f7:fe:b6:c9:08:38:b9:10:bf:
         29:83:39:2a:db:d2:e7:55:55:49:62:20:57:76:7a:be:76:68:
         f4:0a:2e:7b:a2:e1:06:20:57:5d:39:3a:07:f4:15:c4:6d:57:
         01:25:55:93:96:bd:19:29:5c:84:74:3c:b0:ca:4d:59:f1:9e:
         99:98:5b:ab:fb:13:a5:2e:4a:4b:bf:97:83:49:5c:9a:81:ae:
         13:a6:0e:b4:b5:de:6f:c3:8f:83:d6:8f:cb:77:3c:69:f9:df:
         6d:43:a4:0a:5b:5d:e0:a8:28:36:1b:6b:92:ff:ef:38:85:25:
         93:61:e9:95:8e:33:1b:81:cb:c0:c8:3c:fe:01:8a:29:8a:d2:
         29:d9:45:e0:51:ef:3f:bc:f8:09:77:f0:d8:15:c4:a3:e0:9a:
         17:a1:f8:ce:b9:d9:06:b4:82:d6:f9:d8:79:d6:e6:d7:92:94:
         a1:d2:9a:74:70:bb:86:0c:59:70:c1:53:d7:dd:fe:2f:ea:f0:
         8e:ab:e1:a9:61:37:e3:b8:c1:f9:b8:3e:2f:03:d4:ff:96:c5:
         3c:b4:bd:e0:a3:91:a4:7c:50:e9:e4:6a:75:1d:9d:35:ee:71:
         51:7e:22:e0:8f:b0:a6:20:cb:79:76:d2:34:3b:6f:c8:79:22:
         04:5d:5a:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGDofU/p6dWCAcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk
NjZlYjY1YWYtYjA0Yi00MjA0LWI2MjQtM2ViMjk1ZTMxMDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQUZQQXl6YIYF5/H9FGZAILDytAu7KH+buQj
atzM7DwGoSsrGyHTlxUrBe66vGBLfH4s54ktyeh6pFp4ka8wkJP5B8jNOIgsyDRy
iWRa0HQ8Rib2oxkoXrBnMDdMg6F2M36NrLnwyXtk2szOFpdkJe7qwhT3FuN10nMb
BJbnRpDqIHep6+KVRfWpJAsvgzOm2YNVeiQfYLYk+qA0Jco6YL+qTSgqmm5lR59X
RkdL4Od1TQZe5DI8qKi6Yk9PMwJCbZqhUykFQlB8Y8EPzG55NAGl+WLsY/Iukjll
I3d2swpReJkYoLInQj4GtOnkyX+rbq/ru2v5KCZlc0Yycc5JXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBUt/lUAzkMIH86iH3XexjGfezaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWZmN2RjNGItZDcyOS0z
NDg3LTgxZjgtNzQwMjc0NmM0Y2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjY8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAID5TTBWiLVcF/f+tskIOLkQvymDOSrb0udVVUliIFd2er52aPQKLnui
4QYgV105Ogf0FcRtVwElVZOWvRkpXIR0PLDKTVnxnpmYW6v7E6UuSku/l4NJXJqB
rhOmDrS13m/Dj4PWj8t3PGn5321DpApbXeCoKDYba5L/7ziFJZNh6ZWOMxuBy8DI
PP4BiimK0inZReBR7z+8+Al38NgVxKPgmheh+M652Qa0gtb52HnW5teSlKHSmnRw
u4YMWXDBU9fd/i/q8I6r4alhN+O4wfm4Pi8D1P+WxTy0veCjkaR8UOnkanUdnTXu
cVF+IuCPsKYgy3l20jQ7b8h5IgRdWoA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:46 2025 by rpki-client