Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa
File:                     8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa (raw, json)
Hash identifier:          BNKcSV/CfUsXAopU06JqvH5Tyi4LjYUNu8aVtHwU3w4=
Subject key identifier:   34:D4:10:16:3E:93:89:B0:7D:D1:EB:A2:CE:4E:37:AE:70:AE:F3:63
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285845777DE222B60304C3434BC080
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     12129
IP address blocks:        66.51.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e2:22:b6:03:04:c3:43:4b:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=0a6fece6-ffa3-4acf-a2ec-ca94a6a04211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:35:a4:b1:bb:7a:5e:2f:cd:26:45:5f:01:
                    5e:79:91:b0:ab:52:b8:a8:32:6d:9e:73:f8:d3:02:
                    12:c1:c7:7b:37:52:74:35:af:7a:ff:d3:dd:5b:13:
                    22:ca:ea:82:c1:49:8f:70:a5:39:9f:8d:83:3a:f8:
                    7f:8d:eb:87:89:4e:00:88:21:b6:42:6e:61:9f:39:
                    9a:6f:eb:24:bb:c3:ed:a1:e7:25:08:a8:88:37:3d:
                    2c:34:ea:e0:88:49:7f:fc:34:57:e4:d4:7d:d4:1f:
                    42:ba:e6:e9:5b:6d:d9:ba:b8:cc:82:36:4c:98:e0:
                    f4:04:a3:d6:17:50:8c:1f:09:33:5a:81:d9:da:49:
                    bc:71:d2:a3:80:48:97:a3:92:46:2d:cf:f9:1b:5e:
                    7e:49:c0:43:0e:e4:b6:7b:7b:64:20:84:55:e5:19:
                    ca:8d:dc:2e:73:ea:8f:d5:ee:fe:71:6a:f0:d0:3d:
                    d8:7d:5a:1b:9e:30:5b:cd:14:66:9a:e7:3e:56:78:
                    a1:5d:8c:65:65:e5:eb:39:a2:41:fe:c9:e7:98:e9:
                    e2:08:9d:7c:7e:97:70:ae:23:54:08:7a:f2:3e:9d:
                    9e:dc:af:50:92:cd:c2:c6:b8:3f:85:87:99:3e:da:
                    b6:11:6c:57:9d:53:bb:75:f4:fa:ef:b4:98:be:68:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:10:16:3E:93:89:B0:7D:D1:EB:A2:CE:4E:37:AE:70:AE:F3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/8d3519f2-b150-3ed4-9d1a-83843936d3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:75:d4:9e:59:e5:67:04:b1:b6:d4:97:36:42:ed:31:b2:
         b4:a7:1d:46:94:82:3c:de:cc:a9:4f:1c:e9:91:a1:64:f3:25:
         d8:86:62:05:d8:af:d1:73:18:62:cd:9b:59:6c:18:7e:44:a9:
         3f:08:9b:7d:2b:ab:03:d8:b0:64:4d:db:01:c9:6f:3d:d2:a3:
         ce:2a:1f:d0:dd:90:03:f1:ca:c6:39:22:76:d7:12:1a:47:97:
         11:d7:83:83:7e:65:ce:27:3e:72:dc:99:18:c5:5d:9f:14:16:
         ef:25:7f:f0:61:b5:e2:6d:65:ed:8e:ff:fa:aa:02:80:73:f0:
         49:3c:f2:4b:8b:38:66:c2:8b:6c:50:9c:ea:b7:90:83:42:f1:
         67:62:f8:0b:57:7b:d7:cb:ba:04:9b:6b:fc:a0:b9:fc:fb:5c:
         84:75:8a:b0:94:f7:4a:b0:b7:ba:12:45:88:d5:39:58:4f:5c:
         98:11:aa:38:bc:93:d9:40:ba:7b:0e:b9:37:fc:08:82:ac:05:
         cf:c8:36:c9:e2:b0:05:01:6b:ef:a6:cd:be:08:54:8b:38:0b:
         92:10:52:7c:e6:a0:92:0b:7b:b6:cc:ab:ff:a9:1b:61:41:24:
         86:e8:6d:bb:9a:5b:7a:4b:ad:95:e9:1a:77:33:03:11:f2:1a:
         61:75:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:59 2024 by rpki-client on console-fra.rpki-client.org