Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa
File:                     1becb7ae-de8d-3a12-ba08-f457b03b3667.roa (raw, json)
Hash identifier:          RovOuGJ9sLH5uYiyxrJ4PUM+ArBFNpTZuBYn3rLluU0=
Subject key identifier:   B2:02:2A:55:F8:87:A1:C7:CC:04:35:49:24:A2:A0:57:53:03:45:C8
Certificate issuer:       /CN=656bb562-ba73-4cab-b885-ab843b4308c4
Certificate serial:       010D0C9F4328584515E58E967EC834DEDC4A1B80
Authority key identifier: 33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        66.51.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:8e:96:7e:c8:34:de:dc:4a:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656bb562-ba73-4cab-b885-ab843b4308c4
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=452dadb9-f25f-4bef-b9f0-07ef1cd1a069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:29:27:34:39:0d:e5:e1:38:de:d5:da:da:
                    d6:33:b0:79:79:3d:c8:c0:e0:78:f7:7f:bd:e3:3b:
                    30:14:d8:32:b1:5b:99:95:c1:27:ae:40:34:d7:bb:
                    2a:c2:55:d9:07:2b:bf:fa:51:55:77:08:6d:0e:b1:
                    e0:6f:e1:76:28:b8:13:d2:e6:df:67:45:d3:97:3c:
                    99:7d:31:f8:28:eb:0c:14:96:d9:32:be:39:fc:9e:
                    c4:36:a0:7f:0f:54:76:51:0e:a3:b5:90:52:eb:90:
                    f0:fe:18:dc:ee:69:73:32:f0:7b:64:e9:c6:10:1f:
                    b9:69:fc:a0:c0:6e:00:d0:72:bf:5c:7c:6b:2e:c5:
                    80:e9:2a:f8:6d:18:00:e9:60:f3:eb:f3:a9:04:8b:
                    06:5d:c9:5a:ab:10:25:f1:51:f7:27:ea:73:6f:9e:
                    04:46:2b:e2:08:49:71:f1:51:79:20:5d:32:93:9d:
                    ce:98:cf:5e:2f:d5:94:91:cd:4a:6f:d6:bb:bf:a8:
                    11:16:5c:32:19:c6:b8:74:79:b8:9c:9e:af:fb:92:
                    56:64:38:27:f1:a8:ba:af:a5:89:e9:0b:44:ea:6b:
                    3f:e6:8e:d9:57:6d:0a:fa:bb:90:70:6e:37:bf:ef:
                    e2:cd:55:df:71:21:c4:6b:8d:eb:d3:da:db:e8:98:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:2A:55:F8:87:A1:C7:CC:04:35:49:24:A2:A0:57:53:03:45:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/1becb7ae-de8d-3a12-ba08-f457b03b3667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl

            X509v3 Authority Key Identifier:
                keyid:33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:38:8f:0d:90:08:38:6f:fa:22:79:c2:10:dc:7a:a5:b5:75:
         f5:3d:e3:33:d5:aa:19:c1:12:14:4b:86:e4:dd:17:ed:42:5b:
         52:99:4e:88:95:cb:2d:0c:bf:62:28:85:90:5c:3c:9e:a3:59:
         a0:66:c4:92:db:ee:23:0f:ca:37:3c:37:12:8a:1e:7f:32:20:
         91:9a:67:0e:76:ae:c8:73:ff:a6:6d:05:65:7c:ca:7a:54:7b:
         12:c1:ef:06:50:72:8c:0d:a1:4c:c8:b4:c8:a8:69:85:c1:54:
         fa:45:cc:02:46:c7:87:6a:80:a2:0b:95:e2:c8:da:15:92:a1:
         dd:75:5f:a5:3f:25:73:b6:ed:b5:a7:6e:80:85:0a:a2:4d:c8:
         03:f0:37:dd:9f:f1:a2:60:8e:a6:c8:c7:87:ac:15:cc:fa:7b:
         24:38:21:3a:9c:d9:91:ae:08:a5:c0:21:75:87:8f:5f:a7:6d:
         fa:95:55:29:61:c2:67:fe:d5:6d:0e:3c:23:a1:3e:05:31:bc:
         81:bb:3e:4b:de:2e:3f:fe:22:82:48:f8:1a:ee:30:7c:a7:c1:
         bb:a5:b6:92:20:12:dc:99:8d:0c:6f:e6:ba:33:5f:a3:c5:65:
         11:45:2b:79:2b:da:5d:9a:84:71:bb:4e:81:4b:35:03:cb:0a:
         b1:d5:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:23 2024 by rpki-client on console-ams.rpki-client.org