Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8815689d-8653-31e7-a5d3-d77139c0621d.roa
File:                     8815689d-8653-31e7-a5d3-d77139c0621d.roa (raw, json)
Hash identifier:          Ir+p2ugvrUJTOXULjT6b8goBupSgcCT8K8QX5DNKgKg=
Subject key identifier:   C8:1A:46:16:E5:34:04:AE:5E:92:F4:95:17:6E:57:24:AC:9E:2D:3A
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584589A328A00C4BC0E885B30800
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8815689d-8653-31e7-a5d3-d77139c0621d.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     36007
IP address blocks:        66.55.70.0/24 maxlen: 24
                          66.55.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:28:a0:0c:4b:c0:e8:85:b3:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=c330c2fd-892f-45cf-a764-22abc41534e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:c0:b6:48:0e:46:3b:40:4b:9b:8e:62:76:
                    02:5f:36:13:df:e2:e4:62:d4:8e:0d:7a:23:56:2c:
                    9d:10:b7:bf:ce:02:73:64:13:8b:9c:b8:0d:86:77:
                    70:33:36:a9:75:3c:78:36:a1:ab:a6:3e:69:8f:ca:
                    20:ae:e6:bc:71:b6:59:47:9c:19:2e:8f:a2:91:20:
                    f4:3f:31:03:8a:57:7c:ed:7f:22:03:f3:a4:a9:4b:
                    58:5a:14:42:2b:8a:02:f5:34:42:9a:d2:66:ac:c7:
                    db:0a:99:45:85:51:f5:ca:2c:d5:cf:20:9e:43:b2:
                    85:e5:1d:24:d2:e2:b2:16:b3:d7:13:a8:a0:29:07:
                    20:3e:08:62:54:11:f0:be:e3:e1:e3:f0:b8:b6:4d:
                    ec:f8:7b:0e:30:c8:b5:a6:38:fb:7e:1e:a6:ae:3a:
                    7c:03:8b:08:bb:de:d6:74:8a:6f:26:a1:2b:5d:bc:
                    b1:84:d1:3b:11:f4:99:6e:fb:bd:70:8f:94:70:ed:
                    b7:5b:99:5f:64:22:fe:d1:ba:07:33:5e:a8:6d:cc:
                    26:85:a9:57:aa:eb:b8:0b:f5:a3:9d:5a:ae:b6:00:
                    e6:f4:4c:76:6e:d8:6f:5b:a5:42:6d:7c:a5:b6:6a:
                    d9:c7:f8:42:95:f9:40:aa:a7:d6:50:6c:36:cc:1f:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:46:16:E5:34:04:AE:5E:92:F4:95:17:6E:57:24:AC:9E:2D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8815689d-8653-31e7-a5d3-d77139c0621d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:a1:c0:d7:ef:ae:d3:b3:a3:91:f5:86:fc:4d:6e:55:41:
         40:19:97:62:01:09:44:9e:4b:10:b9:a2:07:95:d4:ca:cb:19:
         6d:89:91:a0:be:1f:74:ed:30:c0:ca:3d:9b:a0:07:d1:f7:7e:
         c0:15:14:25:e0:49:19:1a:82:8e:e6:d6:ae:39:4a:9e:b4:c7:
         c0:20:94:f2:07:81:dd:7f:93:a3:3c:41:e7:f4:7f:60:9b:05:
         94:7a:84:e9:bb:24:93:ed:e1:74:b6:3c:09:85:a7:af:30:3e:
         c5:0a:11:bc:96:3d:7a:03:05:ce:3a:f2:40:82:27:3d:64:41:
         7f:07:05:cc:e2:9c:75:77:53:d0:3c:4b:a3:62:03:2d:11:f8:
         4a:1f:d3:0b:37:1b:19:d7:34:7b:49:20:bd:9e:1f:91:59:49:
         bf:0b:53:37:4b:b7:2e:fd:6f:9e:6f:e2:78:e0:68:8f:ec:17:
         a2:49:93:4b:e1:28:70:02:79:3e:6a:67:7a:20:c2:9f:ca:db:
         d6:c2:f8:b5:a2:07:36:ea:8e:37:55:4c:3d:ec:8b:24:32:9c:
         e5:f5:97:cf:03:96:4d:39:33:c2:f3:b1:be:2c:7f:03:bd:fd:
         9e:7a:52:58:4c:bf:fa:a4:3f:68:3d:90:c6:5e:83:5d:11:ad:
         64:a6:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:42:13 2024 by rpki-client on console-ams.rpki-client.org