Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
File:                     4e206120-21a0-3b6c-80db-62308ac9e02c.roa (raw, json)
Hash identifier:          Fe1kFBT0xj6BFeyefSGZD1lS9O5RMZDLLmaEi/qOkLI=
Subject key identifier:   D7:FA:10:FF:9E:2E:08:70:D8:6A:4C:5B:28:17:9D:BA:22:DC:9A:9A
Certificate issuer:       /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
Certificate serial:       010D0C9F43285845F5C12183E7FB9FB966E79C80
Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa
Signing time:             Wed 22 May 2024 18:28:15 +0000
ROA not before:           Wed 22 May 2024 18:28:15 +0000
ROA not after:            Tue 20 Aug 2024 18:28:15 +0000
asID:                     394456
IP address blocks:        66.223.49.0/24 maxlen: 24
                          209.196.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:c1:21:83:e7:fb:9f:b9:66:e7:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e
        Validity
            Not Before: May 22 18:28:15 2024 GMT
            Not After : Aug 20 18:28:15 2024 GMT
        Subject: CN=bd19eff3-9694-4033-818c-bb70731046ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:fd:4c:71:e7:f9:09:06:15:12:08:e4:7d:
                    8c:bb:ca:1d:74:06:7a:29:da:c5:45:b9:4f:7e:b1:
                    a4:1f:7c:25:56:f9:40:b8:6a:68:a1:4f:2a:2c:04:
                    19:de:5a:41:15:6b:7e:40:8f:5e:39:3b:e3:ca:33:
                    e8:63:fc:7b:ed:ca:be:b9:53:03:7b:1d:a4:90:02:
                    8a:49:e7:7f:f9:b6:df:64:fc:70:b2:ce:92:d9:0e:
                    e6:11:e9:0d:f5:2e:7b:76:af:fa:74:76:55:2c:01:
                    a7:6e:b0:3f:b3:05:03:b8:7a:a3:a8:0b:c0:2c:62:
                    01:48:98:b5:44:48:dd:ae:ab:b5:3d:17:79:92:a8:
                    de:41:61:08:81:fb:b0:37:62:03:1e:a7:dc:04:c6:
                    13:61:35:33:51:2a:9f:dc:9c:ee:4e:3b:12:08:06:
                    ad:b3:eb:47:a2:38:9d:7a:b9:e3:c3:99:da:b2:ad:
                    a6:48:f6:da:c5:40:90:e0:81:ca:85:0f:36:c7:ab:
                    ff:4d:6e:3c:58:d5:04:ae:14:b3:3e:08:f7:22:d7:
                    6b:3a:2f:a7:fa:9f:94:e7:c5:72:e8:77:fd:42:0c:
                    b0:6b:49:e8:9f:9d:ec:2d:a5:d6:96:cb:4b:61:6b:
                    d3:08:a7:1b:9a:19:5a:0b:3b:7f:5a:e7:35:cf:3f:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:10:FF:9E:2E:08:70:D8:6A:4C:5B:28:17:9D:BA:22:DC:9A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/4e206120-21a0-3b6c-80db-62308ac9e02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.49.0/24
                  209.196.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d9:80:ca:0b:de:2c:16:f5:e8:88:a4:6b:cb:d2:d7:04:bd:
         39:75:6b:91:9a:74:c6:ce:d4:43:df:42:b0:ea:54:5e:4f:11:
         09:4f:a2:4b:d8:d0:d0:4d:90:ad:68:61:0a:9e:55:89:f3:b0:
         45:45:19:c8:5f:36:ae:51:dc:9d:e1:44:48:31:6e:b6:98:38:
         3e:e8:1d:cc:da:bc:8d:e8:8c:d1:47:2f:ac:47:38:c7:92:e9:
         09:b8:84:d3:1c:db:5c:80:3a:d2:d6:98:27:a5:99:08:e2:71:
         03:00:01:af:14:e0:6f:88:3a:ce:5d:d9:cc:55:5d:ee:6d:5e:
         69:ea:09:33:87:a8:9c:77:62:e9:31:c3:50:da:c1:2b:36:37:
         ff:15:93:79:55:e4:3e:d1:15:2b:86:d0:b9:82:1c:e0:3f:26:
         e8:e1:67:10:ec:48:69:65:3a:f3:2f:4e:14:f1:58:4d:6d:8a:
         ca:d6:e7:a1:57:cf:d4:ff:e6:9a:e7:c5:53:08:3b:c5:53:a3:
         3d:8b:ba:b8:aa:60:41:95:72:c5:05:0e:37:ba:fa:03:73:f5:
         63:84:e1:87:35:91:69:08:e2:26:07:ee:4b:b3:18:1b:73:50:
         cb:95:03:dd:f1:14:3c:fb:fa:69:85:ad:2d:10:4f:0e:65:04:
         37:d3:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:44 2024 by rpki-client on console-ams.rpki-client.org