Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/598da242-7857-399d-81bf-a23b11f2b88f.roa
File:                     598da242-7857-399d-81bf-a23b11f2b88f.roa (raw, json)
Hash identifier:          kDrniP+ATeSVWZDtkeQqlYRIkUR8xf4yZosnxubI58Y=
Subject key identifier:   F7:BC:57:34:45:43:92:23:C5:8B:17:6F:AA:B8:6B:20:E8:91:DF:56
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F43285844F9FABF6DA8F0AB8776938300
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/598da242-7857-399d-81bf-a23b11f2b88f.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     11059
IP address blocks:        66.118.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:bf:6d:a8:f0:ab:87:76:93:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=1d6d21b9-fb6c-4f0a-ba8a-4dd07256327c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:7d:98:a1:bf:77:e5:62:75:5e:4d:17:7a:
                    ac:4a:ca:d9:3c:b1:44:d3:e4:3d:f8:c6:07:25:d4:
                    35:83:1c:a2:db:0a:51:5b:7a:24:1f:87:a9:62:1b:
                    a2:bb:5f:c9:66:4c:be:c4:69:a0:00:20:1d:98:b8:
                    e6:82:28:bf:aa:d0:b9:9b:3d:de:62:29:c1:d7:a9:
                    a6:f5:49:37:02:7e:bd:e5:95:ae:57:c6:ad:30:04:
                    54:85:f7:28:73:7e:0d:aa:f7:7a:4c:6b:03:5e:ae:
                    eb:55:f2:cf:b5:70:9b:d6:8e:f3:29:f6:76:3a:d3:
                    3d:91:4d:40:86:73:6c:e3:24:cd:85:bd:fa:be:d8:
                    96:4a:b9:e6:35:2b:49:79:ff:47:a8:84:14:ba:7d:
                    1b:82:fe:87:50:2f:10:3e:e7:ae:78:db:13:90:f2:
                    05:f0:6f:6c:5f:02:94:fe:95:47:a8:67:af:f3:40:
                    24:78:98:ab:39:46:54:f7:14:65:25:9f:08:86:a1:
                    f3:24:83:dd:22:20:9b:ad:dd:4e:f9:36:76:e7:2f:
                    15:fd:dd:3d:33:66:5a:df:00:da:5a:1b:02:c7:ab:
                    8f:cd:99:2b:e9:de:8b:fa:b3:ca:61:28:6d:0c:a2:
                    bc:9a:5e:d7:f1:9c:22:3e:13:32:e8:4d:e9:63:5e:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BC:57:34:45:43:92:23:C5:8B:17:6F:AA:B8:6B:20:E8:91:DF:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/598da242-7857-399d-81bf-a23b11f2b88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:78:75:65:5c:bd:46:30:79:b4:2d:45:c5:50:0a:16:ff:
         ee:c9:ad:11:99:e3:5a:b8:17:ee:de:f9:56:f3:fd:a0:04:9d:
         da:c2:a3:d6:02:52:aa:a6:fe:46:b2:3e:52:32:9f:d5:a3:76:
         d3:d8:e2:b5:86:e5:1c:2a:3b:01:bc:4e:21:4b:53:c2:e1:e0:
         c0:71:4d:53:ec:6f:a5:82:f4:ae:80:49:9e:51:25:35:4f:ca:
         1d:0b:6f:b6:ee:5d:a5:66:45:65:6f:3a:e2:17:d8:24:8b:bd:
         03:9d:21:60:e3:6c:c2:35:7d:cf:c8:d1:d0:a0:95:3c:bf:4e:
         34:f0:d4:01:50:8c:f0:2a:72:55:d4:17:ce:ee:03:91:27:45:
         5e:28:7a:88:88:3f:e7:76:a8:73:da:9e:db:7c:05:44:cf:16:
         fe:5d:74:d4:98:bd:1a:6b:91:5d:b4:c2:95:ac:18:89:9b:7d:
         8a:53:5b:d6:ee:16:43:a8:6e:42:b3:55:a3:1f:b4:c2:64:fc:
         5e:34:ee:90:b6:bb:cf:f0:b1:4b:8d:c3:90:94:2e:48:80:86:
         7c:32:52:64:4f:a2:8e:76:94:be:5a:d8:71:77:a7:9a:37:0d:
         35:3a:0c:35:01:50:7f:68:1f:d3:60:73:4a:29:a9:57:6a:ea:
         fc:2e:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:15:50 2024 by rpki-client on console-ams.rpki-client.org