Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a8a4aff-d7b8-3da4-a4c1-290767d35ec8.roa
File:                     9a8a4aff-d7b8-3da4-a4c1-290767d35ec8.roa (raw, json)
Hash identifier:          UFy5heP8RHhwSUiQEbVjlXKwG+gkomM4FdkI4nAYpN8=
Subject key identifier:   62:CE:97:81:AE:9B:9D:6E:B0:7A:15:00:66:76:FC:28:87:ED:DC:70
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F43285845D933ADAEBED2F44F66C0DAC0
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a8a4aff-d7b8-3da4-a4c1-290767d35ec8.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     7018
IP address blocks:        66.11.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:ad:ae:be:d2:f4:4f:66:c0:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=a83c2bc3-ea1d-4c60-83fe-4233597ed218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:b4:b5:b2:e2:5a:c7:14:8f:ac:78:27:89:
                    5a:40:12:2d:f3:5b:bb:6f:b2:dc:a3:a8:03:44:4d:
                    a8:cc:44:9a:87:7c:9f:e0:27:dc:36:83:48:19:90:
                    a9:6a:7c:43:7f:0e:cc:d8:b2:db:ce:85:2b:e4:e4:
                    cc:c9:65:bb:61:0b:fc:88:23:42:19:a0:23:6d:5a:
                    48:fc:c7:d3:1a:1a:35:20:48:1b:87:80:dc:d9:ec:
                    e6:7a:ef:59:0e:84:61:84:c2:75:2e:59:2a:94:2c:
                    dc:d6:9c:c4:a4:ec:cc:76:be:87:61:ef:1f:03:33:
                    cd:4c:fd:6f:6e:45:0e:a8:88:d9:ca:3b:20:45:56:
                    2e:95:09:fd:89:d9:f8:e1:b7:39:0f:56:e1:25:74:
                    2d:6f:9d:db:fe:5e:e0:b8:82:eb:73:8a:07:70:d7:
                    af:07:1f:1f:9d:5f:08:8d:92:84:97:ff:b5:1b:25:
                    a1:e0:49:6e:da:82:ba:b1:21:18:b4:77:04:d9:5f:
                    ee:02:e0:d7:dc:7f:75:96:30:43:d2:0b:6e:2c:a4:
                    ea:db:9b:b9:97:9c:1b:bc:e6:18:cc:81:78:15:c1:
                    55:b3:48:51:9a:23:3d:39:06:9f:3d:8b:9c:69:29:
                    09:c3:37:2c:9d:80:2d:2a:34:2f:83:e2:81:ad:e1:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CE:97:81:AE:9B:9D:6E:B0:7A:15:00:66:76:FC:28:87:ED:DC:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a8a4aff-d7b8-3da4-a4c1-290767d35ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:25:df:a6:94:bb:22:75:a0:90:07:c5:51:06:25:f6:47:
         6d:03:65:c3:7b:40:e4:c6:b7:3d:04:0c:4c:fc:42:c0:f6:42:
         27:aa:19:97:16:71:55:02:fc:04:a4:6f:bd:3c:a0:81:50:9a:
         65:52:56:b8:f4:a1:51:92:5c:dd:2e:9f:2b:59:bf:9b:97:e1:
         6c:c6:0b:2a:41:dc:4c:07:df:80:aa:a0:ba:dd:c2:7a:20:af:
         a3:64:bd:4e:45:95:57:70:68:74:7d:a9:f5:ce:ca:c4:6b:4a:
         3b:42:8e:4d:86:63:bf:62:96:65:52:2a:32:9c:9d:a7:36:79:
         17:a5:6c:ca:48:95:0a:46:f1:1e:cb:d9:be:c2:f8:10:e6:da:
         23:f0:da:87:b1:29:ad:33:58:cb:f7:58:a6:de:73:52:53:54:
         78:58:ab:fc:18:b0:8d:10:45:2d:09:b0:69:a5:3c:6b:ee:9f:
         76:d1:75:0f:84:7d:0c:9e:38:42:bb:2e:1d:6d:c8:bb:b4:cc:
         fd:65:93:38:e3:91:9a:a2:60:94:86:2d:ca:3e:f4:3d:d1:df:
         17:cf:80:c2:9e:e4:60:cd:a0:9e:7a:83:aa:98:3f:ba:3c:a3:
         cd:1c:12:f4:45:96:5a:7f:85:ee:ab:9b:a4:2a:58:0b:45:b7:
         6a:f7:73:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:25 2024 by rpki-client on console-fra.rpki-client.org