Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa
File:                     254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa (raw, json)
Hash identifier:          06iLmcNuXqA6EIxdpFB6QFQmG6FE+S6Watppzoz08GM=
Subject key identifier:   43:49:5E:6B:E3:DA:8F:E3:98:74:6A:89:99:6C:62:B2:FF:10:41:38
Certificate issuer:       /CN=89a397c2-4860-4547-8d71-faf2481535cf
Certificate serial:       010D0C9F43285846A04542BE27E6F0C817B57880
Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa
Signing time:             Mon 22 Jul 2024 20:21:54 +0000
ROA not before:           Mon 22 Jul 2024 20:21:54 +0000
ROA not after:            Sun 20 Oct 2024 20:21:54 +0000
asID:                     401164
IP address blocks:        66.45.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a0:45:42:be:27:e6:f0:c8:17:b5:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf
        Validity
            Not Before: Jul 22 20:21:54 2024 GMT
            Not After : Oct 20 20:21:54 2024 GMT
        Subject: CN=a3984443-7494-41f2-9ad8-f7c61db847a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:b8:31:bf:b2:ab:09:18:6d:ae:f2:24:89:
                    cf:c0:23:a4:c9:08:85:6e:4f:aa:a0:62:b6:91:5d:
                    c8:38:fa:54:62:f2:2e:85:5a:65:98:e5:d1:a6:04:
                    1a:6a:be:06:4f:d9:e4:6c:5c:c2:29:d4:5c:c6:5c:
                    27:ae:96:e8:97:6c:95:a7:35:13:f1:df:ca:0b:82:
                    13:3b:eb:6d:56:c3:1a:cb:7f:e2:1e:2e:cd:4b:8e:
                    e4:ea:c0:0e:29:d3:46:47:9a:c5:47:3e:7b:75:f3:
                    0b:35:eb:3e:61:e5:3e:68:d5:03:58:c0:94:3a:63:
                    51:66:22:88:e8:ce:df:ec:29:70:24:e2:72:7a:8b:
                    59:e5:d0:1a:9a:84:3c:ce:e8:9b:ed:e4:33:ec:28:
                    bc:74:bf:2c:4c:3f:6a:56:e1:2e:6f:38:11:d6:d0:
                    79:e7:08:0d:52:01:82:7f:0d:54:dc:36:96:6a:00:
                    24:87:9c:34:8c:7d:b7:dc:37:da:84:ce:f2:cd:24:
                    df:77:82:5f:33:61:77:7d:77:07:2a:34:77:9b:27:
                    89:59:c3:e2:5c:bf:c9:ec:55:5f:ce:4c:3a:c2:30:
                    b5:9d:87:49:cc:f1:cb:95:7c:70:92:0e:68:5f:eb:
                    1f:fe:e8:95:11:62:32:21:2b:a9:86:44:87:83:90:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:49:5E:6B:E3:DA:8F:E3:98:74:6A:89:99:6C:62:B2:FF:10:41:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl

            X509v3 Authority Key Identifier:
                keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:2b:f3:ed:a3:98:e8:c9:d8:cb:e3:13:62:f2:f7:34:1a:
         cc:0d:7c:26:ce:ea:fe:c7:18:00:e9:04:98:3c:cf:f5:27:16:
         68:8f:55:74:39:21:38:4d:ca:7c:f3:09:32:bc:b7:ae:c0:66:
         21:6d:d8:61:fa:57:78:f3:54:d7:ad:52:81:16:39:62:1d:31:
         bc:36:cb:93:0e:04:0f:1e:06:f6:37:18:85:2f:58:3d:32:7e:
         f0:d4:e8:d4:3e:8d:22:8e:b8:fb:90:eb:1e:9a:1d:ab:9e:f3:
         c9:d8:33:6a:bd:e7:ae:59:a9:92:68:70:64:62:dc:32:d8:cc:
         a0:74:a0:23:aa:6f:8c:d9:5d:a5:78:d9:56:da:e5:f8:78:38:
         8c:74:c9:d3:05:9e:b9:8d:e9:87:a0:7f:05:1f:4a:d5:24:3a:
         1d:83:e5:7e:67:99:00:81:3f:bd:9e:b9:48:2f:a5:67:40:19:
         24:31:39:5c:6e:5d:6b:80:89:d5:93:de:e1:9a:93:60:08:91:
         44:e3:12:67:3d:f6:0f:4b:ea:10:5f:ec:3b:92:74:74:a9:61:
         84:2f:ed:f2:b1:6f:cb:52:17:fc:2e:75:38:35:26:02:08:a3:
         32:99:6d:66:aa:a6:ec:77:a3:63:f5:82:a5:9e:70:a6:42:a8:
         a4:12:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:05 2024 by rpki-client on console-fra.rpki-client.org