Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa
File:                     8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa (raw, json)
Hash identifier:          qoVyWRregEyn2WWcd7UM3xvFebyhfo0ciiFEB5qIfL8=
Subject key identifier:   AF:70:98:CD:2C:14:E2:9C:D0:6C:FD:27:4C:96:FD:5F:76:79:10:D3
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F43285845AF53729D2B455D4C489C3700
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     36352
IP address blocks:        66.248.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:72:9d:2b:45:5d:4c:48:9c:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=652226fd-8498-49dd-80e8-98a7cc93b1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:ae:55:17:6a:56:8e:a4:f6:ad:cb:fd:44:
                    6c:70:da:06:de:3e:c0:7d:65:4e:c3:30:5e:e2:8b:
                    c2:ab:0b:41:be:04:f3:46:b3:e0:56:5f:4c:4f:93:
                    a0:41:6e:cf:d4:33:3a:b1:52:f0:aa:b2:05:d8:a2:
                    32:f5:ad:13:b2:bc:0e:4d:c1:48:6a:d1:09:e7:28:
                    4f:64:2c:ce:15:b1:84:89:af:a9:c3:dd:67:48:1a:
                    91:c9:29:fa:b2:aa:07:5c:f0:4e:35:23:3e:a5:a0:
                    56:ff:1e:a1:98:4f:c2:63:e1:4b:17:cc:c9:c4:8a:
                    c6:38:0c:85:58:87:b3:a1:b1:7a:3e:77:a8:1d:a3:
                    ef:72:72:26:58:4f:5e:6d:95:68:bd:70:23:b0:08:
                    2c:f4:72:d0:c5:90:6c:c8:98:15:9e:8d:85:5b:f5:
                    1d:32:cd:7a:a4:05:cd:d2:b1:be:8d:e2:97:11:5c:
                    36:83:72:3e:61:87:cb:5f:56:b8:41:51:8e:94:c2:
                    50:00:7c:ba:cb:1b:04:4f:a8:9f:2d:df:de:8c:dc:
                    15:09:1b:87:e3:b2:28:91:e5:4c:e6:51:ab:8f:09:
                    14:1c:58:b6:fd:69:e6:c8:8c:d6:b6:7b:2f:c6:a5:
                    37:86:11:71:a8:c2:85:48:a6:ef:27:c4:5a:5a:47:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:70:98:CD:2C:14:E2:9C:D0:6C:FD:27:4C:96:FD:5F:76:79:10:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:c8:a7:b1:95:77:7d:15:a2:f6:70:dc:87:e9:18:e6:83:
         7d:95:eb:1f:81:af:23:9a:2f:17:9a:d4:2a:c4:78:a3:64:c6:
         8c:e4:84:c1:29:e4:85:99:92:e7:a5:a6:12:ac:0e:1d:cf:1c:
         69:09:9a:2c:fb:46:66:21:33:81:5e:e5:43:a3:0b:28:db:fd:
         44:62:72:9d:d1:3e:fd:29:db:38:05:e0:9e:58:05:b5:54:16:
         4b:50:1e:f1:5d:f7:22:68:ed:c8:47:8f:10:33:ee:4e:d2:0d:
         64:e4:9d:f9:ac:80:11:a1:83:1d:6d:6c:5b:2f:ce:e5:26:78:
         66:c4:15:f3:1f:84:95:0b:19:59:e6:e4:1d:f6:6e:19:e7:d5:
         b9:4d:03:63:e2:2f:c5:2a:31:69:ae:eb:20:5d:07:04:86:c9:
         42:52:6a:01:6c:63:f2:cb:44:fc:1c:df:f7:3b:bf:6c:f9:86:
         67:32:db:6e:88:7d:a8:fa:eb:84:64:99:89:f1:eb:39:c1:67:
         81:76:16:fb:93:1c:c1:36:42:f2:50:89:99:bc:14:63:c8:aa:
         ca:0a:a7:f3:f5:3f:4e:db:52:db:67:e4:8a:22:31:74:34:a9:
         1b:67:ed:17:33:65:54:71:60:18:de:a1:fb:1e:6e:56:d7:6d:
         d1:32:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:08:52 2024 by rpki-client on console-fra.rpki-client.org