Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1509d10a-0780-3a38-8812-94e443d6e293.roa
File:                     1509d10a-0780-3a38-8812-94e443d6e293.roa (raw, json)
Hash identifier:          ncTrK6sMwL08m3x1W8Bkwnl/K1/e681ajw90hdYUXDk=
Subject key identifier:   10:61:E0:58:F9:3C:9E:B9:86:7B:5F:79:FD:30:B8:8A:A5:F5:62:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7EFDF82FECA6E45AA3E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1509d10a-0780-3a38-8812-94e443d6e293.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        66.208.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:ef:df:82:fe:ca:6e:45:aa:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=18016348-ff3d-42b4-af2c-bb9e4d4acdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:76:1c:a3:4e:da:0a:3a:94:a0:84:ee:3d:35:
                    40:9b:0e:56:a2:d4:c4:82:76:b3:fb:98:2e:79:84:
                    b6:66:27:ae:f8:02:cd:2f:9f:85:80:fb:a0:4c:ff:
                    c6:78:af:1c:64:b2:48:98:e9:60:75:10:c5:ad:76:
                    f1:f7:ab:cc:84:e1:73:0b:90:5a:d4:75:dc:00:e3:
                    50:5f:9e:26:16:5a:fa:cd:f5:aa:11:b7:11:24:21:
                    56:43:ec:1d:61:ad:85:3f:87:0a:fe:eb:84:83:72:
                    b5:ca:ea:a0:ea:3b:7c:5b:67:ed:60:8a:21:4a:93:
                    5b:1b:b2:c2:9f:87:df:a6:5d:e8:2e:ec:95:09:ad:
                    28:47:f1:4b:3f:ba:e6:b4:99:6a:da:04:f4:eb:56:
                    db:63:0a:de:90:dc:a9:c6:b7:d5:93:72:f8:09:63:
                    bc:b0:37:7f:c9:d9:0a:36:66:86:26:ea:a7:a1:c5:
                    f7:d9:66:e1:85:c4:f1:db:c3:ec:db:4b:47:fb:70:
                    33:51:6b:3e:56:64:b6:99:3e:74:16:25:d2:3c:bf:
                    73:2a:36:e5:58:12:3b:35:35:21:26:0f:c9:ac:6c:
                    d7:e1:2e:27:9c:2c:44:d4:ce:2e:1e:97:08:68:9c:
                    88:6c:d4:58:bb:d7:3a:8a:79:db:03:87:7c:bb:24:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:61:E0:58:F9:3C:9E:B9:86:7B:5F:79:FD:30:B8:8A:A5:F5:62:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1509d10a-0780-3a38-8812-94e443d6e293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:66:be:87:d8:68:da:10:7a:ec:4d:41:5f:78:ee:bf:ec:ec:
         68:bf:12:01:78:be:29:40:78:a8:ee:eb:01:05:d9:5a:f7:e2:
         70:47:10:66:59:23:67:de:4a:74:4d:c3:ca:c0:f1:b2:b0:19:
         21:58:5c:a2:92:01:af:79:d7:5b:07:7e:34:b3:df:cb:b1:a4:
         01:73:65:39:3c:e3:b9:6b:3b:54:7a:f2:d6:40:ed:39:41:7c:
         b0:a8:fa:fe:be:00:c4:eb:43:fe:89:7a:c3:c3:9b:49:97:28:
         b8:8a:bf:ed:42:81:d2:61:5c:bc:8a:27:5a:c8:c6:84:ac:be:
         ba:8a:f2:47:43:36:2b:01:0d:1b:a6:a4:b7:27:3a:ab:9b:f9:
         e1:b3:0c:4e:32:34:91:33:a6:bc:e0:0f:0b:35:49:7c:52:df:
         af:21:ec:b1:df:ed:f1:db:f3:86:b5:29:32:f9:71:d7:9a:b5:
         73:10:f4:64:3b:b9:60:62:a5:a7:0b:f6:18:d8:e9:fb:34:a8:
         10:47:6b:3c:15:3a:81:cf:50:60:8d:8d:3b:f5:7c:9f:69:0a:
         19:f6:b0:12:8e:e7:e5:22:3a:99:49:6b:48:65:ab:c4:79:80:
         74:e1:26:50:f6:88:64:4b:a7:a6:dd:57:bb:f2:d3:ab:c4:d3:
         49:48:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:35:47 2024 by rpki-client on console-fra.rpki-client.org