Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/670bea95-7485-39fa-895f-5e39710978ec.roa
File:                     670bea95-7485-39fa-895f-5e39710978ec.roa (raw, json)
Hash identifier:          Cl2LLdI2IKYtWNji5vQJSjsBtmTU8mu1t5xlLORmP7Q=
Subject key identifier:   71:06:81:D2:B5:5E:90:13:E1:C4:08:ED:4E:CB:21:9B:DD:CF:16:21
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F43285845304D3BC5F1E4B7E799F660A0
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/670bea95-7485-39fa-895f-5e39710978ec.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     400610
IP address blocks:        66.219.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3b:c5:f1:e4:b7:e7:99:f6:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=fa026d16-c9d0-4bae-9ccb-11be1a4cf36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:ff:0b:50:1a:5e:64:86:8e:cd:fa:fc:7f:
                    fc:8f:1c:e9:86:a0:0f:36:1a:1b:78:01:ef:9b:00:
                    99:c8:56:15:e3:5b:a2:c4:53:6b:4a:26:4c:ac:2b:
                    81:ca:da:42:63:5c:5b:90:50:a0:0d:0d:8e:29:14:
                    a8:6c:59:40:a9:aa:da:a1:a6:d9:95:48:f3:ea:15:
                    f6:eb:24:7b:a4:fe:de:59:12:d2:1a:af:f0:ac:81:
                    fa:95:cc:30:33:03:20:d9:e2:12:f1:03:b1:56:86:
                    c1:47:7e:5a:ad:77:4a:9b:69:25:e1:14:7e:09:dd:
                    9c:90:60:e5:a9:d0:89:4a:69:fa:ae:51:45:08:c2:
                    e1:4c:f2:58:ee:5b:55:83:cc:dd:f8:89:9b:f1:09:
                    9f:7a:0f:89:4f:46:0b:85:9a:c1:a6:92:b3:73:91:
                    1f:d1:6d:07:9f:93:4f:9e:08:4e:90:f1:ee:2d:3f:
                    6a:fb:35:c9:ae:e3:86:77:87:17:b3:a3:63:13:cb:
                    59:41:a7:83:1e:70:07:0e:5a:de:63:b0:41:08:24:
                    79:d3:05:81:bf:1a:4e:36:8f:0a:bf:8d:10:46:b3:
                    a7:b0:b0:d6:84:bf:8f:a7:2c:cb:c1:6e:0b:ea:84:
                    71:85:2e:bd:f8:a9:f2:d4:84:24:2b:36:22:07:40:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:06:81:D2:B5:5E:90:13:E1:C4:08:ED:4E:CB:21:9B:DD:CF:16:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/670bea95-7485-39fa-895f-5e39710978ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:58:2c:13:54:40:c4:b8:de:60:17:27:4f:76:5c:23:68:32:
         80:0a:a8:90:e5:d8:ad:6e:4e:30:43:f2:37:90:af:a9:0d:58:
         07:df:00:07:d8:90:b3:cb:d2:87:71:d3:82:be:71:44:b8:2f:
         bd:59:90:8d:93:aa:65:0b:75:ce:42:04:59:fd:09:87:1d:d8:
         e4:75:9f:a7:ae:32:9f:e8:7c:51:c4:a6:e4:4b:63:f8:ad:e7:
         0f:09:a6:76:87:c1:91:02:7c:93:3e:72:60:da:c4:b7:81:f0:
         68:09:e0:7b:13:f5:fe:6c:b5:f3:11:65:1a:8d:07:06:59:1a:
         1a:2f:1a:a4:5d:fe:6f:49:da:2a:21:73:d9:bd:61:19:80:07:
         a4:7a:87:d9:32:5f:10:db:f9:c5:67:5f:01:6f:ac:0b:93:13:
         39:aa:ba:bc:26:0d:f1:83:fc:35:9a:bc:7e:44:cc:70:fe:e3:
         99:bc:ba:48:9c:59:86:00:01:f3:cc:5b:40:be:46:d2:21:2a:
         87:8c:b4:0a:ae:6c:11:a2:08:34:32:12:4f:d0:cb:2a:95:bd:
         05:8e:8b:19:3f:db:dc:43:ff:05:12:b3:f6:f0:1f:94:12:fc:
         3c:8e:7d:3b:aa:64:5d:94:c4:87:d5:c0:1e:08:00:df:2f:56:
         ef:ab:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:33:12 2024 by rpki-client on console-fra.rpki-client.org