Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa
File:                     cb8fec23-e2ec-3003-86a2-c723d77d395e.roa (raw, json)
Hash identifier:          +ZrrbqjerV7vVsUICFm9byM2gBwa8ReW6AoeUVS6Qbk=
Subject key identifier:   56:8B:81:AD:5D:C0:1A:EA:70:84:9C:80:9D:FB:7C:E4:BB:B3:DB:64
Certificate issuer:       /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial:       010D0C9F43285847A0413944B447C4C547453210
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     398291
IP address blocks:        66.179.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:39:44:b4:47:c4:c5:47:45:32:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=8c64f3db-b3b9-41e7-b558-56c5cab7ee42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:33:56:af:b9:dc:59:79:26:5d:24:3f:fc:
                    05:ee:16:60:92:92:f4:c0:85:34:05:20:62:47:4d:
                    30:d4:17:9a:81:41:5b:fd:b2:cb:78:86:8d:41:a5:
                    53:c3:2c:ce:3e:20:c8:78:5d:aa:0c:d9:1b:56:5a:
                    af:b0:c4:c3:86:bf:23:2a:3b:56:b0:75:34:66:d1:
                    ac:ec:b0:39:99:ee:b1:f7:e5:3b:fd:d6:70:e6:c0:
                    61:e7:f2:5b:f7:f6:e4:da:cf:35:06:9a:e0:63:aa:
                    65:3d:69:6e:b3:db:a6:8b:81:bb:e5:66:74:73:59:
                    4f:77:99:97:f4:23:46:a7:5a:69:7b:a3:e7:81:a2:
                    af:af:a6:d5:03:02:3d:49:96:f1:2b:b3:3c:5f:26:
                    23:2c:2d:d5:7e:14:13:b9:a8:22:73:68:ca:55:f1:
                    2d:02:dc:ef:9e:3c:63:88:b7:d6:53:f0:cf:4a:62:
                    90:10:54:75:af:d2:ca:de:5d:92:d4:10:1c:9a:5b:
                    2e:b0:e3:8f:8b:9e:3c:73:06:12:ad:d7:7b:1c:6b:
                    a1:f1:91:1f:98:26:15:b8:59:33:21:18:00:9f:d0:
                    78:4c:07:67:7d:9e:a8:a1:a8:8a:50:b1:23:da:02:
                    30:00:7a:3d:08:c1:d8:8e:d6:c9:9b:08:a9:8d:d0:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8B:81:AD:5D:C0:1A:EA:70:84:9C:80:9D:FB:7C:E4:BB:B3:DB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/cb8fec23-e2ec-3003-86a2-c723d77d395e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:e4:b7:7b:50:9d:57:f7:d7:78:cf:41:96:dc:62:b3:15:
         cd:e3:ea:5d:74:1f:6a:cd:56:21:3b:c4:f8:6b:1b:6d:0d:de:
         2c:3b:70:d6:95:a5:49:cc:2a:f1:22:e3:19:67:41:c9:6f:1c:
         ed:09:0a:57:f3:1b:1e:ea:36:9c:7c:9a:cf:14:ca:2d:7f:ba:
         d6:4a:19:66:d4:8d:41:f8:b0:83:a1:2b:ec:b6:00:c1:54:9e:
         30:3b:3b:5d:a2:4a:76:fc:ba:7f:d6:a4:27:f4:47:62:e7:8e:
         ff:16:6c:fb:72:ba:07:57:f5:9d:2a:82:76:55:e4:0e:3a:70:
         b7:39:84:02:89:9d:2e:33:c3:a2:f7:1a:f0:34:cc:26:3a:3c:
         03:74:96:62:19:19:4e:5f:38:d6:af:b4:f6:88:ee:25:8e:fe:
         22:f8:61:02:d1:39:ab:46:fc:36:ec:43:07:7f:16:42:94:45:
         68:59:2d:d4:32:6f:c4:56:45:a7:cd:af:10:1b:df:e4:3e:9f:
         eb:79:c0:49:f0:29:4a:8b:93:49:8f:d0:10:07:7e:8d:e8:7e:
         05:8a:4d:38:a6:46:0e:b5:2f:be:72:e6:de:77:76:5d:c0:78:
         f3:e3:c7:24:77:58:3c:2e:2c:cd:73:4b:42:d0:a5:b6:a9:90:
         37:5d:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:03 2024 by rpki-client on console-fra.rpki-client.org