Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e31322e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          HOzuapl1X6gp3z7Rvp4xUD3vgloX5Qln1GaA+F99fTQ=
Subject key identifier:   2B:99:7B:AF:92:4D:21:79:B4:63:44:32:EB:21:AF:1D:E2:CA:C0:4A
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       63F6FA71F48AB1C216D1736AF4F1AFE31E03D31C
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        66.117.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 11:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f6:fa:71:f4:8a:b1:c2:16:d1:73:6a:f4:f1:af:e3:1e:03:d3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=2B997BAF924D2179B4634432EB21AF1DE2CAC04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:89:9d:86:e2:b0:10:a1:cb:21:8e:28:93:
                    91:89:aa:1e:f7:ad:ae:17:b9:e2:8c:2f:25:cf:65:
                    69:7e:df:0c:f8:f1:ff:3a:3c:83:af:c4:a0:65:f2:
                    c1:73:c2:79:f6:15:5b:49:9c:65:00:89:df:ef:85:
                    4c:2b:9a:e0:b3:c7:73:84:cb:80:56:7d:41:60:07:
                    68:ba:a1:22:e6:27:37:f1:52:d2:b0:87:81:fb:8b:
                    f6:6b:4e:67:a3:65:90:e1:df:f2:54:ef:3e:0c:77:
                    24:75:47:26:cd:3e:12:58:e4:44:d2:fb:dc:b6:73:
                    b7:5d:3e:2d:27:63:45:b2:89:d2:e9:12:42:6e:e4:
                    11:ef:cc:d1:1c:9d:a9:fb:de:69:fe:aa:ab:0d:81:
                    e0:a3:a2:72:60:b0:82:fb:a7:4e:e3:dc:ee:fb:18:
                    d9:db:02:54:89:3f:d7:eb:4f:a0:e2:1f:20:a2:3a:
                    a9:69:dd:29:ef:7a:44:a5:11:a8:ae:64:41:ea:f2:
                    30:54:83:61:81:b2:cf:5d:e5:31:1f:a2:eb:c3:bf:
                    57:e2:a2:1a:8f:c2:f0:bf:b3:ba:26:d7:2c:10:6d:
                    a9:2d:1b:50:c5:78:92:5e:7c:dd:e3:56:23:32:33:
                    3a:1d:e1:d3:af:d0:91:92:e2:eb:38:09:66:7d:18:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:99:7B:AF:92:4D:21:79:B4:63:44:32:EB:21:AF:1D:E2:CA:C0:4A
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:8e:18:eb:88:45:85:50:21:97:ed:b1:6c:18:4e:3f:0d:
         77:c9:3a:54:d5:4d:a5:6e:5f:ac:9b:1d:b8:2c:d8:e7:49:f1:
         67:e1:5b:61:f1:8d:4b:49:bd:a1:72:6a:13:a1:54:a1:4c:53:
         09:ba:f0:b5:6d:96:2e:d3:17:4e:57:bd:41:35:e4:4f:a4:75:
         17:75:c2:7b:be:8f:8a:5c:e0:e1:1e:85:39:f5:63:73:d4:55:
         72:1c:ad:1d:3b:89:fb:57:a9:69:1e:3d:2b:37:26:64:ac:b5:
         ec:31:2a:b8:77:73:39:eb:c1:e5:66:0a:bf:f9:7f:da:3d:b7:
         a3:cd:01:0b:7b:f6:a0:45:dc:ee:0e:ca:dd:ce:ae:29:81:8b:
         b9:14:44:47:df:e1:d2:7d:e2:c1:36:5f:23:f0:f4:37:04:b9:
         9b:61:57:d6:2f:a2:81:49:b5:46:7b:11:6a:56:4b:96:97:84:
         c7:fe:97:92:18:e6:af:0b:78:e1:27:20:82:75:98:14:28:00:
         f4:7f:5d:ae:c3:01:ef:14:07:43:bf:50:c8:0e:75:22:c5:f4:
         45:ed:c9:54:fb:43:8b:6b:f8:b0:f6:0a:6f:bd:70:ea:f7:6d:
         72:1e:f4:cb:11:1f:ad:8d:bd:12:04:c4:c8:d7:e6:19:6e:26:
         98:66:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:57:29 2024 by rpki-client on console-ams.rpki-client.org