Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17d45983-e869-3dca-b256-155c89ad899f.roa
File:                     17d45983-e869-3dca-b256-155c89ad899f.roa (raw, json)
Hash identifier:          R/YaimgwFVMMxGOLHTvTESaZEp9KmSqbKeN1V35vKSU=
Subject key identifier:   01:35:16:CC:CD:C6:80:5F:58:C4:4B:02:73:F1:BD:92:7D:54:4C:13
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553333A3649A76ED9F69CB400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17d45983-e869-3dca-b256-155c89ad899f.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     26914
IP address blocks:        66.32.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:3a:36:49:a7:6e:d9:f6:9c:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=29e4b2f0-4411-4b16-ae3f-b9406d99e230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d6:cd:c5:4c:84:c4:6e:a1:4e:46:32:05:2e:
                    74:41:31:69:b2:a8:fc:bc:3e:83:d1:a3:1d:05:b0:
                    50:03:74:8a:36:19:b9:d5:52:a0:e2:2f:c7:e4:e2:
                    18:4f:7f:b9:9f:51:5b:4d:f9:73:1f:69:eb:54:b2:
                    f7:03:a7:d1:09:5a:8c:17:0d:4c:77:b1:9f:fb:30:
                    5a:15:f5:06:a8:2e:ba:03:fb:c8:15:9c:56:5c:cc:
                    4e:c1:ca:e5:c7:6d:18:c4:73:50:d4:46:a0:65:d2:
                    1a:5a:92:ae:aa:45:63:6f:8a:5d:92:6a:57:3a:4f:
                    68:f5:43:a5:10:e8:d3:6b:07:6b:48:de:dd:3b:9f:
                    29:83:79:1b:64:a2:1c:2b:0b:15:0d:f9:85:d0:8b:
                    1d:d8:32:39:65:94:ad:7f:3f:0d:29:aa:8b:7e:8f:
                    5c:74:7e:8a:bd:a9:15:29:d9:11:f5:1d:53:ba:cf:
                    95:e5:af:e8:c9:40:d3:27:48:e7:b9:ec:15:5c:d4:
                    7e:47:e1:cb:19:2a:30:6b:ee:c7:2e:9b:72:c5:e9:
                    fa:f0:5a:55:b2:44:28:58:f3:19:e5:6c:53:11:c3:
                    25:2a:fa:f4:3f:01:6a:6f:d9:8a:90:85:19:a4:b2:
                    71:9a:8b:b4:38:c6:61:bd:cf:40:7c:af:fc:b0:ce:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:16:CC:CD:C6:80:5F:58:C4:4B:02:73:F1:BD:92:7D:54:4C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17d45983-e869-3dca-b256-155c89ad899f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.32.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:20:db:ba:33:72:9c:ee:1d:4b:39:d3:eb:29:2e:ca:77:
         19:d4:11:26:29:36:74:0b:41:ef:e2:32:74:91:f7:45:5a:87:
         7f:58:7f:aa:50:a1:60:a2:23:a3:0f:a0:76:ab:2f:34:70:d4:
         b0:c9:4e:a4:78:4e:ca:25:f9:01:1b:cd:4c:c9:b1:07:08:36:
         32:69:c9:4b:60:79:ab:af:ac:a1:76:45:1d:76:59:ba:6b:b8:
         e7:47:dd:7b:f7:4c:07:ec:7a:3c:2d:e5:c4:d7:e4:47:35:e3:
         95:38:72:38:4f:f7:23:72:3f:ee:08:b1:78:ef:b3:fd:23:4f:
         31:65:a7:45:75:96:91:43:8f:bc:78:67:f4:56:5f:46:cb:86:
         87:b9:bb:59:0a:4c:94:71:ef:9d:cb:ae:76:73:12:38:1c:0a:
         8b:f9:1f:69:a4:e3:35:35:d0:73:03:4b:70:92:81:e4:80:10:
         66:a0:46:f6:11:a3:09:11:b1:19:bb:00:4a:66:9c:de:f9:5b:
         34:69:76:87:b3:d1:9c:1e:d9:00:9c:15:41:a0:c5:ae:29:e9:
         1a:17:e9:24:86:0e:ae:7e:28:bf:ee:97:29:89:a9:c3:c8:b2:
         c9:56:05:51:b1:7a:26:d3:e5:83:6c:4a:95:b8:a5:ef:ae:a8:
         56:3a:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:57:29 2024 by rpki-client on console-fra.rpki-client.org