Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa
File:                     f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa (raw, json)
Hash identifier:          qQsS3hJIzLJfwPE3oPmq5UDaA3L/9l5Ehour66N2WrA=
Subject key identifier:   BD:2F:11:DF:9C:82:F3:52:1D:1E:A3:BF:43:42:AA:0C:32:6B:5C:BD
Certificate issuer:       /CN=edc22fcb-2cab-42b3-9bab-80acf203c651
Certificate serial:       010D0C9F4328584586D869055F33B63F0F4F3FC0
Authority key identifier: 1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     2914
IP address blocks:        66.6.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:69:05:5f:33:b6:3f:0f:4f:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc22fcb-2cab-42b3-9bab-80acf203c651
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=c1cef369-53e7-4f54-9344-bacf679feb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:5b:76:71:ab:5a:a0:b3:0c:13:6b:5c:1d:
                    91:d7:9f:b3:f9:48:3a:8f:5c:8c:cc:7c:e3:ab:7d:
                    05:d8:3d:88:bc:c7:c5:98:37:6a:f7:b6:49:f4:5e:
                    a4:b1:bd:0f:9e:d1:96:cf:12:5f:b5:52:87:67:01:
                    13:61:ee:ed:31:7f:e8:6d:14:94:08:0d:40:62:2d:
                    c0:33:46:bb:80:7e:e9:f1:28:37:c7:05:7e:93:59:
                    be:8d:be:6d:64:ff:65:44:c9:4f:bf:9e:26:e9:a5:
                    5f:12:56:8c:76:c3:81:af:1a:5a:2d:16:08:bd:c8:
                    c5:fe:76:5d:ba:af:27:05:ae:59:46:2c:33:4e:ef:
                    8e:e5:81:9e:a9:6e:e0:b6:b9:d3:c6:8c:d7:55:c6:
                    0a:0b:6f:b8:89:86:35:5c:6f:2d:05:fd:3f:87:b6:
                    32:9e:6b:7d:e1:34:dc:52:cb:54:af:b5:8f:12:b9:
                    34:74:97:03:ae:0d:d4:a1:97:88:d2:10:d6:5c:4b:
                    61:e6:44:cc:9b:95:75:67:aa:b1:54:80:ce:07:42:
                    5d:79:e7:05:9b:f0:31:38:a6:f7:1d:14:9d:ed:2c:
                    6a:24:f0:c2:87:fb:b5:57:f3:38:06:65:ba:76:ed:
                    de:4a:d8:a6:2e:3c:c1:1d:c2:e5:e9:1d:05:9c:dd:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:11:DF:9C:82:F3:52:1D:1E:A3:BF:43:42:AA:0C:32:6B:5C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/f3530f42-37cc-352c-9380-e3aa2d77d9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.crl

            X509v3 Authority Key Identifier:
                keyid:1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:04:45:99:ed:ca:af:ba:ef:dd:d6:4c:d6:98:60:2d:73:
         08:25:4f:1f:3b:f5:b3:b3:29:d8:66:ee:94:11:8b:9d:40:65:
         a7:de:b0:65:78:c2:41:df:bf:52:10:78:c8:c3:0a:7b:28:24:
         14:fe:9a:c6:71:06:9a:74:60:27:79:70:00:39:ee:ff:cf:50:
         82:ef:a0:b0:07:05:5c:d7:89:c3:29:50:78:54:ce:14:2c:cd:
         97:2c:c3:a5:77:97:4b:3c:8f:59:38:c3:9e:4d:2b:f9:b7:17:
         b3:de:2e:e2:33:c5:20:18:57:94:48:73:a1:a9:5c:94:4a:4e:
         3a:f3:6d:c5:3a:82:1f:af:fc:90:84:f4:17:e9:12:08:fc:67:
         55:e6:8d:7d:c5:78:11:c6:8f:8e:c4:86:6c:e7:13:14:72:36:
         2b:31:2e:ed:f3:14:4a:51:72:73:f4:a1:93:47:d0:38:ad:98:
         7d:b3:86:d1:7f:11:ed:e0:2e:a4:ee:9c:d8:65:20:88:8b:c1:
         74:16:5d:7f:98:06:f0:d1:e0:76:09:fc:a6:68:2a:17:00:24:
         5f:74:ed:46:61:31:98:3e:fd:c9:09:d2:60:e9:e2:b5:2f:f1:
         5b:de:0b:1a:6d:87:d6:a8:e7:59:86:bf:b1:32:4e:4d:ef:e3:
         5e:74:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:37:09 2024 by rpki-client on console-fra.rpki-client.org