Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
File:                     6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (raw, json)
Hash identifier:          s6A6E5cgvKZxMpiZvjrfddXH+Qe+QKS4svJnmExN4+s=
Subject key identifier:   3F:0C:D6:99:C8:1A:5A:8A:60:20:7F:EF:8E:4E:42:41:CD:AC:73:1E
Certificate issuer:       /CN=c3e3599f-a90f-4544-a440-c15eca99db7f
Certificate serial:       010D0C9F432858477EC10B61DE876507247E63E0
Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     22952
IP address blocks:        66.187.200.0/22 maxlen: 24
                          162.246.208.0/21 maxlen: 24
                          2604:c240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0b:61:de:87:65:07:24:7e:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=5c80b624-b959-4787-866e-5037ea7843dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:7a:e4:f6:ed:cc:60:0d:45:63:c1:f4:5d:
                    a2:dc:71:04:8c:55:73:97:11:1d:0d:76:04:be:a6:
                    79:fb:ca:ee:55:b3:13:92:74:54:88:b4:db:ea:a5:
                    d6:09:00:b2:65:de:a0:4a:c8:a0:93:ea:f4:2b:73:
                    44:59:8a:c8:3f:5a:0b:19:49:a9:df:2d:81:2c:31:
                    6d:c5:f5:ae:28:c1:d9:db:25:f1:72:93:66:42:42:
                    55:37:14:ea:b0:05:9b:96:a8:dc:1f:f9:4a:b2:73:
                    a0:1f:2b:2d:96:30:a9:8a:09:af:8e:0d:23:e4:b6:
                    1b:6b:c8:ff:88:86:f0:52:2b:b8:c7:3f:55:31:e1:
                    a5:f2:84:ed:ad:6f:19:4c:81:f3:20:5b:56:02:ba:
                    06:35:67:2a:af:65:bc:96:3c:60:a0:60:65:83:a8:
                    6d:12:bc:f5:23:f1:04:0c:0c:9d:a3:da:5a:6a:e8:
                    dd:07:c3:f6:10:27:3d:a9:77:63:91:0d:7a:f5:dc:
                    d3:4f:43:59:5e:40:81:1f:9d:5e:e3:f6:8c:47:30:
                    b3:dd:00:db:b6:56:ee:a1:db:36:c4:b0:71:f9:49:
                    d7:22:17:a4:23:f9:27:6d:45:6c:db:26:3f:91:ff:
                    79:6c:70:62:52:13:df:04:89:7b:f1:c0:1e:46:82:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0C:D6:99:C8:1A:5A:8A:60:20:7F:EF:8E:4E:42:41:CD:AC:73:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl

            X509v3 Authority Key Identifier:
                keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.200.0/22
                  162.246.208.0/21
                IPv6:
                  2604:c240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:42:de:e8:66:45:f6:a1:76:87:d0:fb:58:5c:0b:2c:f4:
         66:f8:4f:c9:3e:d4:40:5a:a6:00:81:9a:1f:1d:42:d8:28:03:
         36:f2:0e:46:46:8e:b4:5e:51:17:90:a1:28:5a:79:da:c8:e6:
         a9:57:78:96:44:a5:ac:d2:69:00:84:81:f1:5e:f4:8b:c3:96:
         a5:2f:eb:8d:6b:a8:cd:12:11:30:59:e1:2c:f4:7f:47:8a:58:
         b9:48:04:08:b8:75:6d:99:53:14:d7:85:e5:3f:f6:69:20:c3:
         97:a9:10:07:8f:1b:ca:df:48:63:c6:9e:31:61:4f:13:e1:46:
         54:e0:c6:4a:5a:88:c3:6a:07:e4:4b:8f:13:99:1e:8d:c4:7e:
         24:01:89:26:c0:bb:ec:aa:b4:43:56:7f:4f:00:c8:41:01:0e:
         a1:7e:0a:03:30:c5:49:a6:30:8b:93:74:f0:bb:91:35:76:4b:
         e3:36:12:c7:b5:fa:55:23:64:5d:15:15:0a:f2:17:f1:cc:7e:
         95:ad:fd:4c:64:08:ad:df:75:de:ae:3c:cd:9a:66:ef:5a:b7:
         12:38:3b:98:5f:b6:1b:1c:16:8e:88:5a:86:91:46:a7:54:1c:
         70:8a:78:74:98:78:80:c0:fc:16:d2:d4:cf:fe:95:65:98:5d:
         17:aa:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:41 2024 by rpki-client on console-fra.rpki-client.org