Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/46f9a9f2-054c-3c9d-b56d-5b639e77cffe.roa
File:                     46f9a9f2-054c-3c9d-b56d-5b639e77cffe.roa (raw, json)
Hash identifier:          bhsKSQU1fJHWpkleIllN2DAHc4KOcka/2wE1nqo5H88=
Subject key identifier:   F3:22:43:44:ED:AC:28:F4:8B:60:01:3D:27:6B:60:A2:3B:4F:77:93
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845BA7E32C6008CD959A55D01C0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/46f9a9f2-054c-3c9d-b56d-5b639e77cffe.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     12129
IP address blocks:        66.51.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:32:c6:00:8c:d9:59:a5:5d:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=ea4b365a-2058-4405-9319-15f399b62a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:10:aa:6d:9a:4c:f7:ac:d1:f5:8f:d4:cf:cb:
                    1f:3b:62:27:d1:40:5c:b0:da:a9:21:d0:ce:c8:b6:
                    43:5d:21:41:cb:f4:59:b2:e0:da:30:b6:82:17:b6:
                    c2:0d:0d:a7:1d:97:ae:2b:5a:e8:25:0e:2e:5e:40:
                    22:a2:48:aa:ef:88:66:ae:90:b6:3f:a2:e5:81:0c:
                    00:a8:3a:4f:a7:bb:3c:cc:b1:81:5d:f7:5b:88:ba:
                    95:12:c7:f7:7e:14:df:70:fe:db:c8:5a:1e:55:21:
                    27:a6:60:64:e3:25:db:1c:59:03:98:59:d3:bd:67:
                    47:a8:35:ad:d2:63:f1:78:9d:a7:95:55:56:ac:5b:
                    c2:72:7d:94:3b:e2:76:97:d4:c8:5e:76:33:01:4c:
                    dd:f5:3d:b7:9e:92:83:e5:ce:19:71:35:68:f9:1e:
                    07:22:e6:4a:ef:c9:a1:55:4c:5f:a8:74:d8:2c:d5:
                    c1:0a:0f:71:86:21:65:cf:a5:87:d5:c4:d1:56:d3:
                    0a:c9:99:42:7c:ad:54:1d:bf:3f:41:bf:6e:bb:e9:
                    60:32:ff:83:25:60:25:03:a8:92:4c:c4:d1:7c:eb:
                    b1:86:d4:fb:d4:a4:ec:a6:79:5a:de:08:69:01:06:
                    08:12:21:5e:2e:77:f6:f5:d0:3a:52:43:a9:41:29:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:22:43:44:ED:AC:28:F4:8B:60:01:3D:27:6B:60:A2:3B:4F:77:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/46f9a9f2-054c-3c9d-b56d-5b639e77cffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:04:5d:7d:b4:c1:66:73:9a:08:82:1c:33:72:1a:06:d2:
         c9:37:4f:c6:6d:48:e4:e8:98:7c:f9:e0:e5:10:28:93:07:26:
         1d:03:1f:4b:02:be:1f:74:ee:3e:79:13:51:72:26:ec:d4:ec:
         c0:b2:ba:78:b1:27:27:01:a1:e9:e5:6e:7e:07:2e:0a:94:4c:
         5a:e1:19:82:33:f9:b6:87:0c:7c:b6:ac:d7:fa:ad:ac:54:2e:
         4a:3e:2b:88:6b:5d:fa:46:ec:1f:54:f2:bd:ca:45:ea:20:20:
         c4:7f:5d:6f:b1:2b:4e:6a:cc:f7:98:59:e6:39:08:9e:a5:31:
         6f:1c:3e:25:1a:2f:1d:77:a5:17:21:c2:a6:6e:05:70:18:f9:
         9b:68:66:13:5f:96:73:bb:09:3e:b1:31:d8:c5:d0:ff:df:a0:
         bc:33:9a:82:0f:fc:ae:03:24:95:b7:49:48:e6:2a:6f:03:97:
         12:27:3c:6d:9a:88:14:33:37:8d:6a:48:53:cb:36:34:bf:71:
         f8:0d:6c:b3:d6:90:a1:aa:c6:c7:61:83:a6:16:e8:1d:ac:16:
         95:0f:65:e8:e7:e0:b3:1b:7b:45:28:e4:b4:9c:ac:49:39:59:
         8e:1f:f7:36:00:8b:be:50:c6:f9:9b:5c:f3:f5:d8:f6:6c:c6:
         08:83:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:09 2024 by rpki-client on console-ams.rpki-client.org