Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/b5d83aa5-e882-3ff0-9137-8e3a5dd4ea4c.roa
File:                     b5d83aa5-e882-3ff0-9137-8e3a5dd4ea4c.roa (raw, json)
Hash identifier:          fEhbJCyDKzqCOmiK4A+0VnZ/XcL873FIYR9UiruEw68=
Subject key identifier:   5F:52:36:36:C4:C3:7D:90:28:5E:88:65:A0:71:C3:95:87:7A:B2:B1
Certificate issuer:       /CN=19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f
Certificate serial:       010D0C9F4328584746EB58E9132C01EAD6984900
Authority key identifier: 9C:1A:43:31:B6:9D:C6:E3:98:75:89:66:EA:29:14:83:1A:94:FB:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/b5d83aa5-e882-3ff0-9137-8e3a5dd4ea4c.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     2914
IP address blocks:        66.6.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:58:e9:13:2c:01:ea:d6:98:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=d3e1f586-6899-4c81-aefc-4aa5cf8a564a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:36:51:4c:72:f1:18:05:6a:0e:c9:7f:31:
                    71:7a:ae:15:a1:b0:10:2e:c8:97:c2:5c:56:44:48:
                    25:e4:f2:b8:c7:c0:1f:7c:61:bd:f0:f4:b3:84:fe:
                    97:71:f7:05:cd:98:07:37:31:8e:e3:93:fd:af:9a:
                    75:14:62:5d:cd:4f:97:7c:86:fa:c7:b4:06:8c:26:
                    6b:80:3a:8a:15:47:9f:6b:97:f6:6f:fd:4b:fc:1c:
                    a6:9e:d7:90:ed:cc:31:0a:4a:8a:6d:22:2c:16:92:
                    16:63:f8:8e:79:7c:70:c4:85:6a:88:44:34:55:a8:
                    02:48:10:14:75:e2:72:c5:af:54:f7:f5:02:9c:e2:
                    ec:fa:dc:2d:bd:cf:c9:23:18:9b:1a:01:ab:7e:a5:
                    dc:69:b9:f5:a0:5d:0c:85:fd:91:79:cf:ef:10:72:
                    18:b4:17:01:82:ee:5a:b5:22:ce:7e:4c:35:60:54:
                    db:fb:32:ca:2e:78:eb:6d:21:51:fe:9c:fa:ed:8f:
                    5b:71:95:52:af:5c:6d:ef:3c:1a:d4:a1:80:e3:71:
                    ac:ea:af:71:d3:29:46:71:26:4b:bd:2c:5f:b7:76:
                    8b:5a:09:15:b3:be:36:c5:13:ef:e4:bc:88:62:4a:
                    4c:f6:4f:82:3c:09:5a:96:b0:d3:49:6f:e4:3a:e1:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:52:36:36:C4:C3:7D:90:28:5E:88:65:A0:71:C3:95:87:7A:B2:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/b5d83aa5-e882-3ff0-9137-8e3a5dd4ea4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:43:31:B6:9D:C6:E3:98:75:89:66:EA:29:14:83:1A:94:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:08:44:d8:6e:21:6b:62:10:2f:49:75:04:51:34:9c:7c:
         7d:05:4b:1c:a8:ef:38:44:5b:84:7f:3f:e2:fb:8c:ca:6e:d0:
         fb:4c:e5:b1:5d:ad:ad:60:04:31:a5:42:34:03:99:c5:38:d0:
         57:6a:67:be:5b:7b:1f:1d:ff:2d:3e:8e:d2:e4:2c:b5:a5:79:
         50:13:f9:ed:35:91:8c:62:72:80:1e:c8:8c:ee:a5:78:38:64:
         2f:d3:ab:a6:49:73:0e:48:4e:2a:1b:c2:ac:58:da:24:e4:c5:
         81:00:58:26:c9:2b:a0:23:2b:ee:2f:2f:e5:dc:9a:9e:1a:18:
         62:11:fc:a1:6f:1d:bc:7d:8b:c2:26:bf:ae:1b:08:05:cc:b9:
         b7:c6:d3:98:19:80:30:f3:34:9c:e0:d9:45:d5:17:3e:a9:57:
         bf:18:bb:a5:b4:41:26:e9:87:ae:0e:11:a2:b5:2c:b8:22:57:
         f9:23:c5:82:2c:0d:48:1e:9a:34:2f:41:93:90:ee:43:7a:fd:
         0b:66:01:44:04:cf:4d:11:51:51:43:cf:3b:e3:f2:5c:d8:fe:
         17:7c:97:e1:50:ed:4c:d5:0b:df:49:7f:65:c7:69:6f:e4:0d:
         25:61:03:ab:b5:0c:f8:d3:b8:01:75:e1:21:49:63:77:6e:f5:
         60:2f:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:36 2024 by rpki-client on console-fra.rpki-client.org