Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf/1b66ee6b-066c-3d7a-8bbb-09e6acd7b6d9.roa
File:                     1b66ee6b-066c-3d7a-8bbb-09e6acd7b6d9.roa (raw, json)
Hash identifier:          blkKgEsmjeoD/MZ2gImRgW2v4WH8qCHAtqUTuJhKDJY=
Subject key identifier:   70:FC:00:ED:BB:C1:82:9A:7F:A9:2D:25:FC:89:EA:E9:CB:7A:55:38
Certificate issuer:       /CN=e6419740-0c8e-441b-ad83-c537ba0fdbbf
Certificate serial:       010D0C9F43285845549822071763965B47086740
Authority key identifier: 25:EE:3E:C5:9E:93:EB:22:21:D9:F9:D2:81:21:85:86:82:42:F1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf/1b66ee6b-066c-3d7a-8bbb-09e6acd7b6d9.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     26383
IP address blocks:        134.195.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf/e6419740-0c8e-441b-ad83-c537ba0fdbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf/e6419740-0c8e-441b-ad83-c537ba0fdbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:22:07:17:63:96:5b:47:08:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6419740-0c8e-441b-ad83-c537ba0fdbbf
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=7ccc8dd3-2f80-41a4-a260-bc1d65484e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:a9:aa:31:c2:7b:64:98:17:81:45:ce:6b:
                    1a:08:f5:75:71:00:04:22:f9:64:d3:d3:bf:c6:9a:
                    fe:bd:1b:ff:37:2a:9e:2d:d7:4a:eb:36:e5:5e:98:
                    4a:b9:93:12:55:42:da:0f:a0:51:3b:a0:93:b4:e3:
                    87:66:08:ba:26:48:f2:3d:bf:4c:5f:9f:26:59:45:
                    5f:87:29:14:c2:a3:33:a0:1d:59:ce:89:84:dd:f3:
                    b4:b9:5f:79:53:37:c2:55:47:d8:c1:55:ec:b4:af:
                    75:58:ac:78:0b:3a:ec:be:0c:78:68:ee:58:a7:d3:
                    e6:3f:34:82:42:9e:ca:76:ac:a3:9c:19:c8:fb:bd:
                    27:d5:b7:a8:16:ad:f2:27:9f:2e:f3:ef:02:1c:cf:
                    ef:5d:3a:16:90:17:fe:3e:23:d0:61:99:e8:8f:9e:
                    46:7c:d1:2b:60:92:5a:1c:0d:ef:e8:d0:33:0c:7c:
                    6e:5e:34:db:ed:67:3d:6b:78:20:c9:9f:bf:e9:e6:
                    25:f1:97:22:ab:4d:c0:a7:df:96:8a:f2:24:56:a7:
                    01:f0:ad:92:fc:51:92:c9:c8:32:77:2d:dd:4b:03:
                    18:a6:97:19:51:2d:af:ff:1e:86:ab:29:b3:b8:f2:
                    7c:59:60:12:5f:04:32:5a:8a:cf:a9:27:72:df:a2:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FC:00:ED:BB:C1:82:9A:7F:A9:2D:25:FC:89:EA:E9:CB:7A:55:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf/1b66ee6b-066c-3d7a-8bbb-09e6acd7b6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf/e6419740-0c8e-441b-ad83-c537ba0fdbbf.crl

            X509v3 Authority Key Identifier:
                keyid:25:EE:3E:C5:9E:93:EB:22:21:D9:F9:D2:81:21:85:86:82:42:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6419740-0c8e-441b-ad83-c537ba0fdbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ff:09:a9:aa:84:ef:ba:21:dc:1e:13:ae:c7:3d:37:91:5f:
         40:cd:50:c9:a7:e3:c8:bf:27:1a:17:63:55:42:4c:24:c2:2e:
         47:12:28:c2:1c:e0:0f:a6:0e:69:38:8f:d7:99:59:a8:6e:c2:
         78:1b:e6:d0:29:86:52:16:2d:76:8c:f0:e3:f2:3c:4d:b9:c6:
         21:11:1a:a1:48:0a:f7:e3:ef:5d:ff:4b:da:aa:22:63:9a:c4:
         91:ac:8f:f5:23:58:81:7c:b2:d5:9b:fd:36:98:b5:2c:27:c2:
         4b:3d:75:39:dc:71:a9:2e:ff:14:ea:00:71:ca:af:bc:94:fa:
         70:5c:f8:df:87:53:b3:c4:27:48:e3:0a:7e:dd:9e:6d:89:49:
         f2:b1:a5:af:39:b3:58:b5:70:cb:32:70:cf:7c:c8:1d:71:6a:
         3f:cc:e1:b1:c4:11:a6:41:75:5e:07:5c:4a:22:7d:95:10:ef:
         73:6b:5b:88:bc:59:46:8f:58:ef:da:bf:87:10:1f:c7:aa:fd:
         46:ca:6c:2a:d4:47:6c:6f:df:ff:6e:b7:7c:42:52:65:40:53:
         53:82:9a:ba:7b:b1:c7:6b:80:60:1a:25:04:4e:3c:7a:2d:f6:
         02:14:65:76:31:05:42:82:85:cf:0e:48:56:71:5c:ae:fa:2c:
         2a:15:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:15 2024 by rpki-client on console-ams.rpki-client.org