Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a20827d-f061-3f14-ba24-a4c39255cf44.roa
File:                     9a20827d-f061-3f14-ba24-a4c39255cf44.roa (raw, json)
Hash identifier:          87DFrCMlTAJADU81uk0mgCKRfFd0Li+Z9lAN3Y0w5/w=
Subject key identifier:   08:D8:D1:BA:85:77:84:EE:0A:02:91:1F:42:A8:EF:58:4E:A5:EA:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049CBA1100DB011D6D1FAA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a20827d-f061-3f14-ba24-a4c39255cf44.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22258
IP address blocks:        75.66.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:cb:a1:10:0d:b0:11:d6:d1:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=01a7eb69-4c0d-44b5-8c92-f78299a15c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:63:8e:24:f1:75:bb:10:ae:ef:59:8a:dd:
                    c1:0b:19:59:c1:b9:a1:dd:06:cf:f7:60:7b:61:e5:
                    67:fa:12:9c:e6:f8:c0:42:55:76:bd:72:45:87:00:
                    2d:e7:03:c6:8e:da:01:a7:e0:dd:0c:c3:1b:c4:78:
                    b3:35:65:a7:e4:9a:d1:ad:85:f5:f9:47:71:04:c3:
                    b6:da:70:9b:b0:13:07:97:55:33:a7:1b:8d:5b:70:
                    c3:bd:20:4e:68:69:bf:3a:63:e0:a9:d8:28:44:2f:
                    18:e3:81:08:9d:77:42:43:aa:e9:fb:d0:68:bc:9e:
                    ee:2e:7d:44:d2:c3:f4:4e:75:9a:45:96:46:4d:d8:
                    3d:32:88:e0:be:64:95:5c:cf:22:eb:68:b9:3a:c6:
                    49:7d:41:0d:e2:0b:38:19:ce:0f:86:ea:34:e6:b8:
                    cd:0b:06:74:91:cb:3d:ce:c5:af:d8:55:80:75:43:
                    4b:98:e6:9b:d8:84:60:5e:50:e7:5d:97:61:c1:da:
                    7e:ac:8f:f0:22:21:5e:c0:9c:04:8f:4b:4a:90:fc:
                    f3:51:7a:c3:45:f2:a3:45:7c:eb:c9:b4:8e:e1:fb:
                    96:53:6f:da:72:eb:b5:a3:a1:c3:97:36:bc:f6:0f:
                    5a:71:48:56:b9:6f:b2:00:e6:7b:36:79:c8:3d:96:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D8:D1:BA:85:77:84:EE:0A:02:91:1F:42:A8:EF:58:4E:A5:EA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a20827d-f061-3f14-ba24-a4c39255cf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:18:b9:ef:15:ec:47:28:95:e0:30:b7:b8:ae:75:65:68:2f:
         10:f0:f0:ce:72:08:eb:fe:b3:38:6d:13:ca:20:a3:56:b9:02:
         f9:05:86:a3:93:a5:94:4d:25:bf:2b:c2:9b:a5:d0:95:13:07:
         47:88:1b:e4:20:40:83:72:de:0f:1d:63:56:2d:22:2e:78:a4:
         3a:46:2e:80:f7:a8:53:f3:cc:ea:a4:0c:9f:1f:06:ea:47:1c:
         dc:6d:3c:6d:70:16:14:6f:b2:5c:ca:bb:d9:9f:6a:b3:b8:45:
         15:cf:2c:df:56:1d:7f:15:ed:15:94:2b:00:a5:7f:7b:3b:58:
         64:81:59:af:bc:8e:24:37:97:b1:07:f7:19:c8:18:d7:03:62:
         ac:56:5d:bd:34:cb:cf:22:fe:d7:8b:82:78:b4:6c:5e:e3:55:
         03:a8:34:52:a7:ee:04:e0:eb:b7:18:a9:26:15:65:4f:bb:cf:
         07:cf:38:22:7c:cc:f5:43:c2:fb:73:fc:82:06:9d:69:7f:eb:
         64:04:a1:eb:8c:53:d0:4f:fe:0f:ac:1f:74:77:90:bb:48:34:
         3c:92:41:a6:df:97:cb:06:ab:8f:24:b9:7f:f1:e6:f8:d2:28:
         fc:22:7f:80:f4:42:7e:c6:de:b6:af:ea:2c:c1:a3:13:4f:d1:
         bc:78:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:43:20 2024 by rpki-client on console-fra.rpki-client.org