Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c462b8c9-d741-376a-8e7c-9acd25d70057.roa
File:                     c462b8c9-d741-376a-8e7c-9acd25d70057.roa (raw, json)
Hash identifier:          O3L0UgyLtdbKUHyLD9aSPPzuPX1IUm8it7jkDs6x8QA=
Subject key identifier:   11:99:E0:F0:45:46:EB:82:2F:D4:9D:CA:4F:2A:FB:8F:61:01:FB:B9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333406655D4B52E8D5E0D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c462b8c9-d741-376a-8e7c-9acd25d70057.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     32376
IP address blocks:        66.173.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:40:66:55:d4:b5:2e:8d:5e:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=b149b1a0-74fb-44a6-850c-b9bb43685a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:1f:f0:43:68:85:93:be:1d:0d:d9:16:1d:
                    44:01:db:38:85:5f:40:18:a2:95:9c:2c:32:9b:54:
                    a1:17:c0:bd:c2:92:ea:7d:9d:98:95:57:c6:a9:c2:
                    ed:4d:ef:79:76:91:0c:a2:5e:f5:37:4a:5a:ee:62:
                    92:eb:f4:56:ce:44:41:09:77:59:df:0c:50:4e:5e:
                    56:a7:28:bf:65:6b:cd:97:ac:fb:f3:f6:26:6b:5d:
                    ee:c2:01:84:4b:59:09:c7:25:93:87:67:7f:71:c0:
                    e6:2b:a4:34:ab:06:06:65:e0:37:32:d3:ea:65:42:
                    a9:91:6c:eb:8d:cc:de:a9:f4:b1:78:4a:18:43:72:
                    ad:54:f9:b9:6a:aa:36:60:89:07:8d:54:5c:96:a4:
                    c5:5c:84:a8:f9:84:6a:20:96:8a:a2:f1:03:95:1a:
                    37:da:80:14:e9:74:4d:48:fb:b0:1d:4e:10:2d:53:
                    e6:bd:f4:6d:64:60:9f:8c:7c:f8:7b:e9:4d:a9:e9:
                    31:aa:89:6d:28:6b:b1:dc:0f:80:fc:2d:26:a1:2b:
                    30:b1:72:62:7b:7f:0d:28:9b:78:98:57:1e:09:4e:
                    01:70:41:2a:bc:8e:6d:00:07:70:fd:48:d1:46:ec:
                    3c:f7:0f:b4:04:06:e3:37:20:b6:9c:82:19:11:9d:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:E0:F0:45:46:EB:82:2F:D4:9D:CA:4F:2A:FB:8F:61:01:FB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c462b8c9-d741-376a-8e7c-9acd25d70057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.173.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:69:23:c7:35:d8:23:77:49:27:ee:c1:a1:49:9d:72:62:5b:
         9e:91:e8:5f:e1:bc:c3:aa:24:c8:16:c8:1c:52:7f:a0:e8:55:
         9c:48:2a:66:86:38:90:3a:35:8f:a1:42:50:2d:8e:a1:1f:ed:
         7b:62:48:2b:4f:9a:7b:d1:3f:dd:22:af:98:26:93:d8:4a:4d:
         0f:12:aa:7e:55:60:2f:f9:9a:f0:d1:a9:0b:ea:fe:66:1b:45:
         9e:89:a8:ad:bf:dd:01:b8:34:ae:1e:a4:58:93:a3:cc:6f:8c:
         e8:e2:0b:74:d7:b5:df:78:88:cb:0e:c9:52:21:fb:b5:1b:11:
         ab:27:50:c9:7a:a9:81:e2:74:8a:67:67:78:28:01:07:a0:69:
         74:59:26:a4:cd:e0:05:28:61:7f:4d:09:cd:c2:3b:6b:60:5c:
         84:b5:7d:a9:14:ed:88:6b:5f:4e:be:eb:92:e6:ec:ca:41:a9:
         6f:60:a9:d6:8a:67:df:45:1a:ea:bd:08:e3:cf:10:ce:c9:e5:
         65:b8:4b:8c:b8:c8:ed:38:f3:7d:b6:27:b1:b0:6c:49:57:08:
         a6:ae:21:4c:2c:95:ab:a9:96:fc:9a:f0:63:e0:89:70:d2:b0:
         95:09:13:21:55:94:a9:24:45:b6:db:46:51:21:3b:ca:d6:73:
         52:7a:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:40 2024 by rpki-client on console-fra.rpki-client.org