Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa
File:                     d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa (raw, json)
Hash identifier:          fm/MiNphbWoSpUTMvbkrcH8VSV2Ls/kFIQHO7AL+qgQ=
Subject key identifier:   CA:A0:60:70:94:8B:27:28:7E:51:C5:BA:2A:76:70:57:7F:F5:EF:90
Certificate issuer:       /CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094
Certificate serial:       010D0C9F432858451A158729F77A6C058E299980
Authority key identifier: 9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     46884
IP address blocks:        66.11.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:87:29:f7:7a:6c:05:8e:29:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eee8d2b-8dbc-4819-9142-4b1b45d5a094
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=c78ac362-9bc4-4b7a-b79c-403e236d1b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:c1:b5:56:c7:07:a6:f4:67:5d:ba:68:35:
                    3c:67:dc:32:37:02:2f:f3:e3:15:0c:76:27:40:99:
                    d3:79:e2:25:b9:4b:58:a8:2d:ac:53:e0:01:57:d5:
                    a5:a0:d6:83:af:a6:54:72:75:1d:fe:cc:98:21:17:
                    0c:3f:56:e0:fa:0c:5b:9d:b6:6f:03:a1:89:42:ce:
                    33:f3:61:19:4c:8b:5c:b3:a2:1a:fc:60:e4:d2:06:
                    81:66:4e:9c:27:85:50:a5:b6:cc:78:db:e2:73:c0:
                    ad:ff:5c:6a:26:24:8a:ba:a9:f7:08:e4:0a:1d:9d:
                    07:82:b8:74:8c:1b:30:69:28:d8:fb:97:72:b0:45:
                    2d:96:65:73:c2:b8:7d:66:c5:31:87:b0:b6:2e:70:
                    a7:db:25:85:c7:21:44:a4:64:c9:f1:ba:9a:1e:99:
                    b1:d5:d2:ec:44:8a:41:4f:89:7f:41:eb:23:8f:93:
                    42:4e:c0:24:a3:a3:57:01:2c:91:96:00:1a:f1:7a:
                    0f:54:e4:da:f6:da:fd:7c:3d:e9:2b:86:ac:97:8b:
                    27:9d:14:72:95:d5:af:3f:10:20:d0:2c:a1:d2:4b:
                    d3:c0:b7:84:b5:54:bd:fa:62:2e:42:26:99:a3:eb:
                    25:6e:06:41:83:e1:f2:f6:c0:06:72:de:d9:60:c2:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A0:60:70:94:8B:27:28:7E:51:C5:BA:2A:76:70:57:7F:F5:EF:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/d222eacc-6fc2-3916-aa6b-0ec83e121d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.crl

            X509v3 Authority Key Identifier:
                keyid:9B:3A:51:CD:D1:B6:39:CD:DA:B9:7D:D2:65:BA:8C:2A:83:84:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0eee8d2b-8dbc-4819-9142-4b1b45d5a094.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:86:4b:38:bf:1b:94:3b:08:73:02:1c:80:b5:24:8e:bd:56:
         91:d2:2e:8c:23:5c:2c:64:ac:28:ff:3b:0b:e4:09:c8:db:e9:
         53:82:d7:bb:ca:37:fe:fa:3d:a1:e5:82:2f:e5:6c:24:63:3b:
         ef:98:c8:6b:f5:63:c1:e1:d8:f3:0a:8b:3a:71:77:37:21:10:
         f4:84:19:5e:94:68:78:be:18:e0:55:3d:82:f8:cf:78:28:52:
         fe:57:c2:30:23:b7:53:00:72:a3:ec:7f:4a:90:5e:1f:ba:65:
         1e:28:2c:30:a5:f9:04:ea:a9:37:40:aa:52:3b:a2:10:c6:53:
         b6:2e:b2:ca:21:9f:5e:a3:0c:7e:08:4a:e3:04:85:34:67:7a:
         18:a3:05:0c:cf:08:ce:b0:25:23:bd:14:b9:58:c7:96:35:6d:
         26:98:74:b0:30:cc:14:fb:76:1d:7b:fb:71:74:a1:bb:24:5a:
         6e:ee:c2:64:dc:1c:f1:83:30:43:a6:18:7e:d1:ea:f9:8e:ed:
         0f:8b:6c:29:33:fa:c1:bc:0e:9a:eb:3e:3b:8e:92:f7:01:e4:
         8f:f6:bc:56:e7:0c:7f:48:04:aa:aa:8e:ee:cf:03:73:e8:f1:
         74:0c:cb:65:e7:8f:ff:7b:cf:9a:7e:56:cd:a3:a9:75:41:19:
         3a:c4:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org