Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa
File:                     a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa (raw, json)
Hash identifier:          m0rNy6dSxHbKYJlzqp9inkxiQikKhJXD8fBHDvc+O7s=
Subject key identifier:   16:BA:9A:95:B3:04:BA:40:F3:36:C6:56:CC:1A:F4:24:B6:AB:E2:CD
Certificate issuer:       /CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74
Certificate serial:       010D0C9F43285845C9D8D4B24262BA2AE3B25A00
Authority key identifier: 64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa
Signing time:             Tue 07 May 2024 01:00:25 +0000
ROA not before:           Tue 07 May 2024 01:00:25 +0000
ROA not after:            Mon 05 Aug 2024 01:00:25 +0000
asID:                     14409
IP address blocks:        199.66.136.0/24 maxlen: 24
                          199.66.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c9:d8:d4:b2:42:62:ba:2a:e3:b2:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74
        Validity
            Not Before: May  7 01:00:25 2024 GMT
            Not After : Aug  5 01:00:25 2024 GMT
        Subject: CN=de72a5ca-6664-48ff-b26f-3f584aa86fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:7e:20:fa:c0:05:43:1d:6b:c0:e2:b7:2f:
                    0e:67:69:a6:ad:e1:d6:f6:2b:e0:08:b5:2a:76:91:
                    c0:7c:d7:23:d8:06:59:cd:50:a9:12:c0:13:57:88:
                    a7:1e:9b:f5:73:62:3a:5f:04:21:f6:12:0b:d8:ea:
                    dc:4d:ae:93:e0:15:38:58:ac:ce:d1:12:7e:57:56:
                    58:e2:5c:e2:7a:f2:aa:d6:01:11:94:9a:9f:64:5b:
                    c2:f7:4d:b5:c7:09:59:4f:d1:c0:93:07:91:7c:8d:
                    7a:30:02:90:f0:bb:2c:41:7d:03:f5:87:d3:d3:54:
                    b8:02:24:6c:0e:f3:93:83:a7:fb:85:8a:83:61:ed:
                    1e:9f:5c:37:d4:e6:d8:d7:13:3b:bc:44:d6:e4:3e:
                    05:5c:8f:fd:46:68:ff:db:ff:f6:c1:c7:0e:29:40:
                    eb:f9:63:11:6e:30:47:33:14:50:dc:e2:17:1e:56:
                    bc:93:f9:b6:bb:df:86:79:5b:99:90:33:37:72:ee:
                    d5:ed:10:cd:bd:f9:d2:61:99:d7:41:7e:c1:7a:93:
                    47:ce:8d:e2:44:35:2f:1c:0d:d7:10:cb:a0:24:86:
                    34:b5:cb:4e:ab:1c:6d:13:d1:e4:f4:10:b5:59:63:
                    64:48:a6:54:a9:ea:f5:48:4e:16:72:84:d1:67:88:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BA:9A:95:B3:04:BA:40:F3:36:C6:56:CC:1A:F4:24:B6:AB:E2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/a0a48667-8cd7-33b4-838c-a3e6c12f76c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.crl

            X509v3 Authority Key Identifier:
                keyid:64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:9d:c7:69:32:76:04:a1:ac:6d:a3:97:24:4f:92:ed:72:
         a4:c0:9d:56:b1:fe:ad:85:cc:87:29:19:e4:55:5f:4d:93:db:
         69:6e:71:e4:b7:97:35:77:27:d3:99:cc:a5:35:c3:18:6d:98:
         4b:35:9a:1c:a5:7a:48:9b:a3:d7:27:95:62:e1:bd:c3:06:7c:
         cb:30:ca:c4:4f:d0:7b:f1:ed:65:52:46:8e:fd:c5:20:55:1a:
         06:fe:3d:c1:da:c0:79:cd:48:6d:44:6d:15:5c:29:ce:48:36:
         00:8f:2b:0c:7f:48:e4:8e:43:54:b6:e5:b3:c7:f2:c1:8a:e7:
         05:40:a2:0f:6f:24:a3:6b:6f:3c:bf:26:ce:7c:45:ad:50:0f:
         90:d3:ea:5d:03:97:29:97:04:49:ce:7f:6f:98:e1:25:98:02:
         5f:82:e1:5d:9f:61:3a:87:90:ef:e8:14:aa:4a:9a:f5:f9:7b:
         81:95:c9:e1:1d:dc:a1:06:4d:2a:46:6b:74:0f:1e:b7:5e:91:
         8b:e7:4b:ff:50:5b:82:fc:2b:19:15:de:7d:c8:a3:ac:48:51:
         d0:6b:05:45:70:14:0a:92:b2:51:29:9c:66:5e:b5:8f:a9:bb:
         b9:30:64:1f:ff:7a:37:f6:e2:dd:fc:fd:62:89:93:0c:c6:b9:
         20:48:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:00:16 2024 by rpki-client on console-fra.rpki-client.org