Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73ccb5cf-64bb-3d97-8c82-d89faa39ef4a.roa
File:                     73ccb5cf-64bb-3d97-8c82-d89faa39ef4a.roa (raw, json)
Hash identifier:          8J5Y0Yz+7E4BsDOx6QCroS8+Nr35+J/MQz2BvN4ed+w=
Subject key identifier:   70:34:18:0B:DA:6B:DA:C2:D5:D5:11:E7:E1:1C:54:95:7B:E0:01:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DC5F2FACFED9FBC70A000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73ccb5cf-64bb-3d97-8c82-d89faa39ef4a.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        67.166.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:c5:f2:fa:cf:ed:9f:bc:70:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=05d91b4d-2fe2-4b20-8a4e-a97c2b5a7505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:c1:cd:da:a3:c8:6f:e6:d9:bf:78:65:a4:
                    08:28:e6:e0:05:66:45:7d:92:6f:20:b8:53:8e:71:
                    0d:d9:0b:c1:04:f8:43:73:44:c6:60:ef:74:52:90:
                    6e:e8:52:e0:91:22:24:35:f3:47:0f:ae:fc:fa:94:
                    45:8b:2a:8e:f7:bb:1b:c1:9a:fd:ea:62:2e:25:5d:
                    30:ee:26:c4:24:f5:ae:2c:ab:bd:34:c5:ef:2c:54:
                    08:b1:c6:e1:ad:cb:67:a7:fb:f1:9b:ee:ad:b6:01:
                    56:a4:87:51:0d:f0:0a:69:cc:1a:c1:e1:82:b8:8d:
                    5a:18:c4:a7:b0:66:f5:f0:a8:96:7a:55:12:49:86:
                    eb:53:57:cd:c5:5d:23:13:12:15:7c:c8:42:f0:b4:
                    96:36:2e:6a:e1:0a:91:3e:9e:9f:49:6d:33:aa:86:
                    0c:66:76:96:ce:47:dc:2a:5e:0b:3c:92:05:37:4b:
                    b8:ed:89:1a:4d:86:41:c0:d6:6b:09:ed:f6:e6:6c:
                    28:de:59:0e:21:94:61:5e:de:61:da:af:63:93:c8:
                    09:f3:d7:4c:dc:3c:7a:eb:b3:d4:eb:3d:a7:d0:b8:
                    94:18:7a:6e:6c:cb:9e:34:b1:0a:ee:8f:b6:aa:c5:
                    ef:4e:9c:54:e5:2f:38:3f:ba:8f:92:a6:61:d6:63:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:18:0B:DA:6B:DA:C2:D5:D5:11:E7:E1:1C:54:95:7B:E0:01:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73ccb5cf-64bb-3d97-8c82-d89faa39ef4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.166.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:59:e6:fb:e8:4b:20:85:84:93:33:fb:65:f7:6a:36:d0:d0:
         35:12:58:17:7e:ab:a7:5d:71:7b:f1:82:a5:d8:4e:94:27:74:
         6a:a5:4f:76:b0:1c:ee:23:27:be:83:b2:f0:f6:49:da:75:3f:
         40:68:ef:ea:08:7d:95:60:f7:36:f1:f1:15:ce:7b:84:23:62:
         65:cc:97:a1:20:74:3e:e7:79:5e:32:fb:77:72:24:f4:7e:6e:
         68:d8:cb:a1:9b:5c:3c:be:b4:96:22:12:8c:5b:f4:d7:31:32:
         69:2e:08:b4:8e:a9:fe:3b:46:f8:ec:d1:5c:3d:9d:da:1f:cb:
         92:f2:e2:7e:d6:a3:c8:44:23:c9:2b:c0:f3:2e:59:46:c9:51:
         9b:46:be:e4:8a:dc:50:aa:99:47:c2:1b:ce:07:0c:0c:ca:56:
         7c:69:ad:86:ec:39:8a:5b:44:96:b3:be:4e:4c:21:9a:74:c8:
         70:0c:72:f6:44:45:3c:4c:54:d5:62:67:e8:c1:c4:ad:44:75:
         e4:b4:8b:30:e7:7f:da:bf:d3:1a:0b:d7:5f:aa:4d:2d:0f:72:
         86:a4:d6:17:94:ae:22:67:3e:49:d2:28:3f:a8:95:f4:5a:2e:
         38:90:38:36:36:5a:f6:f4:6a:85:24:ef:c3:b6:01:f0:9e:d8:
         86:98:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:04:53 2024 by rpki-client on console-ams.rpki-client.org