Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
File:                     d0ff0748-49a0-3920-ad1b-a4de5796190f.roa (raw, json)
Hash identifier:          R0AIqqcZlgK5JUIUhgHuV0MvwFwgtOCk1TFXIczNpEY=
Subject key identifier:   CD:F7:3E:F2:AC:32:F5:34:A2:2B:C3:C4:8B:3A:AF:B5:09:6E:61:0F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453B77F7474311E54DB6BD8480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        66.110.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:f7:47:43:11:e5:4d:b6:bd:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=2948a11b-1b4c-4593-ab62-2170ad460f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:21:69:29:f7:0f:8d:9b:70:80:9d:b4:e6:
                    d6:1e:4d:b9:c7:b9:6a:33:5f:b7:ff:d6:26:83:fa:
                    df:0d:06:85:bc:ee:5a:92:a0:16:31:6d:be:81:3c:
                    d8:91:41:34:30:14:71:c6:49:8f:15:62:60:21:63:
                    be:69:18:97:4f:c5:94:60:b5:3d:78:60:76:64:31:
                    1f:2b:2b:bd:da:d9:d9:4d:3c:41:1b:24:a5:46:60:
                    47:e1:d8:21:dd:d8:fd:70:71:68:ea:d0:57:0f:3a:
                    74:ac:43:24:5f:65:dd:21:17:48:fc:b8:f2:82:09:
                    aa:b6:b4:4f:26:bc:4c:4c:45:ab:40:8b:b2:86:76:
                    a2:c9:23:62:20:f0:a7:e8:c4:69:9e:a0:8b:be:9d:
                    f9:7e:d7:52:07:e6:89:8c:4b:38:a2:e3:ec:84:17:
                    ed:a5:a2:4e:6d:ef:ea:ab:08:0c:e6:ad:3d:c1:ae:
                    f4:b3:c9:35:35:d1:82:c0:7d:02:4f:7e:42:7f:d8:
                    38:45:37:c9:16:0c:6d:53:83:0b:bf:07:48:ea:40:
                    04:8a:31:18:0c:72:0f:50:a7:d8:87:63:36:1b:67:
                    c0:a9:b8:8f:71:30:ee:e2:53:5b:50:d0:0f:36:c9:
                    27:e6:a6:96:d8:5b:fb:54:b1:46:b5:e5:bc:79:23:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F7:3E:F2:AC:32:F5:34:A2:2B:C3:C4:8B:3A:AF:B5:09:6E:61:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0ff0748-49a0-3920-ad1b-a4de5796190f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fd:21:fd:16:7e:d1:46:fb:9d:fe:92:dc:b0:c5:67:60:69:
         43:e5:2f:24:a5:8f:f5:44:76:f9:51:45:76:7f:40:b3:8c:52:
         0c:ff:93:7f:7c:33:d9:52:64:c4:7c:d0:31:f8:66:10:23:03:
         d5:36:ca:9b:44:43:c0:01:b4:a0:91:36:87:af:47:8e:47:77:
         22:e7:cb:eb:f5:cf:fc:5d:1a:ab:6b:b8:92:3e:0c:15:69:bd:
         7b:1a:e0:ad:52:46:35:fe:d6:ba:43:08:88:b2:0c:bd:b9:dd:
         fb:10:bf:e6:e1:f2:0b:0b:56:09:70:d5:5c:42:6a:61:f2:9a:
         db:77:13:22:ff:c5:74:0c:16:ce:b1:5d:52:ac:ba:cc:ed:f2:
         74:e3:b4:e2:01:d1:85:44:bc:c1:0b:f2:df:25:39:43:2f:35:
         b6:10:24:d2:ec:58:60:2a:9b:28:74:6a:ee:a2:28:74:c4:dc:
         cc:c8:34:37:fb:9a:d0:56:cd:88:18:48:76:f7:08:46:ba:b5:
         49:9c:2d:49:4a:be:70:96:10:17:8d:17:0a:c2:92:9c:a3:dd:
         04:99:61:2a:40:47:00:bd:fc:ff:18:96:f4:ef:56:d8:c5:c0:
         32:91:b3:d0:cd:97:dc:c0:d9:b4:05:a7:b7:77:93:df:45:f7:
         3b:2c:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:04 2024 by rpki-client on console-fra.rpki-client.org