Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa
File:                     fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa (raw, json)
Hash identifier:          QvMJkPibAWLXp+DMmYAF8hHFhDCPQZ6MTZ/bnrrB2rw=
Subject key identifier:   B5:50:06:46:FE:9C:74:4E:50:48:B1:5E:E9:0A:F2:47:22:8A:D9:9C
Certificate issuer:       /CN=5012fdc3-55c8-4825-af14-cdf211570229
Certificate serial:       010D0C9F432858462ACBB1202D4EF74DBF33AD60
Authority key identifier: B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa
Signing time:             Mon 10 Jun 2024 18:27:23 +0000
ROA not before:           Mon 10 Jun 2024 18:27:23 +0000
ROA not after:            Sun 08 Sep 2024 18:27:23 +0000
asID:                     32697
IP address blocks:        66.132.145.0/24 maxlen: 24
                          2607:84c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2a:cb:b1:20:2d:4e:f7:4d:bf:33:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5012fdc3-55c8-4825-af14-cdf211570229
        Validity
            Not Before: Jun 10 18:27:23 2024 GMT
            Not After : Sep  8 18:27:23 2024 GMT
        Subject: CN=46affcdc-b864-4495-b629-71fed18c3882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6d:db:23:78:29:d5:32:d7:27:ab:34:32:a5:
                    9f:88:8c:df:7c:3f:fa:5c:17:d8:7e:46:4c:14:69:
                    86:e2:d2:a3:3f:72:5b:9c:4d:6d:b2:b8:58:de:31:
                    2e:ff:38:24:2b:bc:96:a4:7e:1c:19:20:70:29:71:
                    98:c2:d2:9f:6f:42:9b:c7:6b:30:7f:d4:8c:fb:19:
                    ae:ec:55:80:d4:4e:b7:a3:89:e5:92:0f:4e:bc:c3:
                    10:0e:f6:6c:91:10:95:88:b8:e4:10:82:74:3f:08:
                    13:85:9e:fb:46:3a:1d:d8:ce:5c:7e:f8:2a:d0:4a:
                    1a:f9:a5:b2:2c:8f:e4:a1:00:b8:1a:86:d0:fb:9d:
                    c1:30:61:cc:3b:d3:1d:83:3b:80:10:be:78:e4:a0:
                    7c:31:85:84:2a:0b:27:91:74:8f:f8:53:dd:17:c8:
                    31:a3:d1:7c:40:30:57:7a:a5:ba:17:a3:87:e5:3c:
                    e2:e3:20:b3:89:4b:02:bf:ee:39:83:3f:41:c6:d7:
                    6f:49:cf:58:71:88:fd:cb:27:1d:48:32:71:31:16:
                    6d:89:fb:84:64:91:e1:f4:86:5d:ce:82:37:33:58:
                    21:ae:fc:10:e2:f7:3b:32:da:a1:ed:b6:a5:ca:58:
                    67:4f:fd:9e:a6:59:b2:44:2a:39:e0:10:be:9f:4f:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:50:06:46:FE:9C:74:4E:50:48:B1:5E:E9:0A:F2:47:22:8A:D9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/fc7fa452-b6cb-3bc3-92b8-e73d36abd991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229/5012fdc3-55c8-4825-af14-cdf211570229.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D0:29:F6:A6:69:07:EB:B2:A5:AA:C3:8A:D6:15:BE:97:AF:01:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5012fdc3-55c8-4825-af14-cdf211570229.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.145.0/24
                IPv6:
                  2607:84c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:dd:2a:5a:71:53:d9:fe:99:cb:9f:e8:c3:34:3a:dc:07:2d:
         e0:08:38:58:52:1b:56:ed:20:bc:32:cd:0d:c9:c0:0f:fc:a7:
         e9:3a:f2:3f:5a:e1:f9:33:d1:dc:73:48:95:82:d4:fc:9a:c0:
         fa:bd:9e:36:3d:d7:f9:dd:5f:72:4f:14:fc:42:72:b0:75:54:
         98:8b:bb:8a:bb:5f:c4:d5:b4:a3:50:f5:55:9c:b0:6c:b1:92:
         c7:01:9c:f2:14:3d:a1:0c:a6:1d:1f:08:cc:40:7d:09:1e:30:
         94:f2:b3:fa:36:ba:1c:dd:fd:e4:2b:fa:e7:23:98:b6:47:19:
         22:df:87:c7:bb:58:d8:49:4c:52:a5:bd:b8:ed:07:f2:40:1e:
         80:b1:9a:6d:54:1d:ad:05:3f:16:0a:74:49:05:c4:91:de:fd:
         34:6c:02:4d:52:15:5c:ba:62:b2:72:e2:da:d8:10:0b:7b:54:
         a2:ae:35:26:1d:96:70:23:a8:73:b1:f3:22:4a:4a:2c:90:a1:
         9b:e0:da:6e:65:ba:82:d1:2d:31:92:c9:1a:48:00:16:d3:06:
         d6:38:de:16:53:e0:ec:8c:8c:a1:9d:c5:91:9b:1f:84:e7:21:
         07:5b:b4:0a:92:1b:e4:fd:d1:01:bc:d1:73:7c:86:a1:46:ce:
         4e:9c:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:42 2024 by rpki-client on console-ams.rpki-client.org