Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e4033cd2-6613-3b32-a9a5-41a408916ad5.roa
File:                     e4033cd2-6613-3b32-a9a5-41a408916ad5.roa (raw, json)
Hash identifier:          tIG5i5XoMcRNmb6WZ0gIdpHo/VI0iEDM7v2HzT87TRc=
Subject key identifier:   1E:76:FB:66:5C:7C:FC:E7:5D:D4:8B:F6:9E:B7:3C:DE:AE:E9:0D:22
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858461C341D31EB1CB75472032300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e4033cd2-6613-3b32-a9a5-41a408916ad5.roa
Signing time:             Wed 05 Jun 2024 13:00:33 +0000
ROA not before:           Wed 05 Jun 2024 13:00:33 +0000
ROA not after:            Tue 03 Sep 2024 13:00:33 +0000
asID:                     64267
IP address blocks:        66.84.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:34:1d:31:eb:1c:b7:54:72:03:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  5 13:00:33 2024 GMT
            Not After : Sep  3 13:00:33 2024 GMT
        Subject: CN=332459f6-3386-4ea2-8eb4-aac6a46b8fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:98:4b:70:df:21:42:0a:fb:04:6d:51:36:
                    6a:a8:a8:93:34:72:c6:39:57:5a:f3:41:fc:51:e0:
                    e5:05:04:bb:d0:00:fa:d2:ad:0b:57:92:30:9f:08:
                    ae:42:44:07:26:17:7f:32:fc:98:53:f5:4d:95:12:
                    f9:94:8c:f0:a2:8f:3c:1d:45:77:55:13:2e:4f:b3:
                    72:c8:cc:8f:dd:c1:59:cc:ec:10:c4:68:e1:db:02:
                    08:2d:f2:da:7d:2f:58:97:15:91:20:ad:18:b0:70:
                    2b:9c:9f:f8:6c:b6:43:4b:74:9c:13:ae:c2:f6:31:
                    b8:e6:b2:f4:00:53:99:c2:a2:e9:a4:f7:2d:d4:19:
                    24:7e:3e:af:f6:c5:6b:f7:5c:87:13:30:ef:62:c0:
                    87:71:da:e5:7f:e5:1c:e8:be:63:13:ee:b9:3f:a9:
                    48:50:b6:4e:20:50:88:5d:a5:8e:0e:7d:90:bb:4a:
                    f1:32:b7:40:e4:67:a5:7c:29:11:0e:71:46:40:21:
                    d6:13:d4:93:8e:2f:6a:e9:1b:db:44:9c:ba:3c:c1:
                    28:e5:91:cf:20:35:1e:3d:17:7c:2e:da:b1:68:72:
                    91:a9:ba:01:ec:cf:01:84:06:5c:4e:e7:fb:1a:4f:
                    54:51:46:e8:58:8e:62:94:56:f8:6b:1f:96:11:b9:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:FB:66:5C:7C:FC:E7:5D:D4:8B:F6:9E:B7:3C:DE:AE:E9:0D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e4033cd2-6613-3b32-a9a5-41a408916ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.84.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:bb:46:08:75:3c:e9:e0:33:5f:6d:3f:7f:c1:55:55:b0:
         f7:cf:af:d2:59:81:d3:68:42:e3:d8:46:e8:b6:72:96:f6:30:
         86:21:f9:c5:6d:a7:cf:2c:73:4f:2d:be:54:a4:ac:80:53:18:
         c7:d3:02:5f:13:6f:66:81:c8:74:e7:ad:86:8c:29:07:a2:2a:
         5d:c7:dc:75:80:2e:12:16:22:eb:52:2e:c3:ec:4d:f0:f7:f9:
         ab:ea:16:6a:0d:86:d5:0b:ea:1c:31:8c:63:59:65:15:a8:76:
         82:f5:71:c5:4d:f9:4e:5b:0f:44:fa:53:c1:8a:9c:79:44:72:
         ef:19:02:d0:ea:61:92:03:55:1d:a1:f7:b7:90:46:ce:54:f8:
         72:19:fa:6f:e1:06:13:42:b6:3d:2d:9c:34:94:5a:6e:a2:b1:
         7b:e0:a6:b7:5e:32:52:2e:fc:14:7d:86:f3:73:f9:20:a1:1b:
         43:46:da:71:a1:6c:7e:ef:54:ec:ad:de:86:7c:ce:c2:de:ff:
         b1:e2:f7:37:14:2a:67:90:0a:ef:35:c4:5e:eb:d1:9d:89:2b:
         ef:05:54:e8:a4:fd:a6:57:da:03:ee:47:72:4c:32:27:72:f6:
         af:1b:53:3f:df:3c:65:c7:0a:95:9f:fc:21:c3:ce:ea:80:3f:
         04:0d:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:09:23 2024 by rpki-client on console-ams.rpki-client.org