Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/840905f9-9c4f-35d3-86f1-01202ddb9611.roa
File:                     840905f9-9c4f-35d3-86f1-01202ddb9611.roa (raw, json)
Hash identifier:          GquSJgW0IViCGbwkGCDRatPo7Mq9d8MGUZ7/46MlthI=
Subject key identifier:   C1:C4:A9:B9:85:2D:3F:91:2E:11:19:D6:02:98:47:E4:40:C5:1D:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848117028532DC65C5A687A84E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/840905f9-9c4f-35d3-86f1-01202ddb9611.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        75.66.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:28:53:2d:c6:5c:5a:68:7a:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=83b290ac-adf5-4ce1-b27c-f85d75ccfc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:98:dc:d0:63:ec:c3:35:df:42:fa:c3:49:
                    77:67:99:2c:cb:60:27:d1:d5:eb:f9:1d:20:5a:b5:
                    aa:ec:11:34:eb:a9:f0:3c:f2:b8:40:0a:9b:af:51:
                    3a:e5:e2:0b:ab:08:71:e1:04:c8:2c:b0:df:e2:38:
                    18:ed:2c:fb:36:6e:96:68:66:ab:69:51:c6:ff:6b:
                    fe:d5:11:8f:90:79:09:62:35:31:b5:ef:de:cd:b4:
                    a9:86:7b:1c:62:4b:d4:4a:83:68:ec:dc:4c:03:42:
                    c0:ec:02:da:dc:9d:75:40:b9:a0:fe:c0:b0:af:f1:
                    ac:4d:cb:ab:08:b5:1b:ae:60:b5:84:8c:89:ff:4f:
                    1a:ab:44:10:a6:ba:69:27:db:ee:63:da:9c:3f:90:
                    fc:0a:79:a0:08:42:17:6c:56:e4:53:41:06:10:b1:
                    02:31:f9:e8:8f:8b:f8:ed:9f:bf:4e:eb:ec:8d:c3:
                    b0:07:67:c8:d6:a0:8e:7e:22:cf:5b:eb:29:3b:eb:
                    b7:81:fa:0a:6b:ee:e6:94:9e:7b:8a:82:71:c8:ca:
                    45:3e:a4:15:fe:2d:e4:44:8b:51:e6:18:e0:9f:98:
                    2b:a1:98:7e:32:b1:16:e6:b6:f3:50:68:90:dd:a9:
                    05:3e:b8:0a:fc:4a:da:0b:3d:37:c5:3f:13:97:bb:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C4:A9:B9:85:2D:3F:91:2E:11:19:D6:02:98:47:E4:40:C5:1D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/840905f9-9c4f-35d3-86f1-01202ddb9611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:03:7b:d7:a6:de:5c:fc:4e:d4:f3:a7:f9:6d:cb:14:17:
         e6:a3:45:b6:48:31:f9:75:ce:b2:ad:e2:b3:00:26:f5:4a:ca:
         ad:96:7a:72:b7:08:7f:c2:34:a1:6b:44:87:ce:d8:fe:f0:15:
         21:89:22:5b:32:23:79:9d:02:e3:13:d6:74:2c:f8:26:f5:87:
         48:54:bb:2c:45:f0:b7:75:a5:7d:8f:69:8a:2f:54:5f:57:ff:
         45:4c:69:1c:a2:41:21:48:48:0f:e1:7f:9a:91:cf:47:4d:54:
         f3:c1:68:2b:e9:49:18:ac:5f:e6:ae:7f:e2:b6:bc:18:cf:bf:
         be:76:a2:61:d9:78:ff:3c:c4:99:a0:0d:fd:17:16:87:85:c4:
         92:10:2f:34:49:98:b9:02:a7:81:cf:4a:09:0a:50:c2:19:fb:
         b1:ec:57:b2:d1:d6:2e:c1:ae:00:0c:aa:d6:14:5d:9e:65:73:
         53:d9:9d:3c:fb:06:ef:51:95:47:be:84:fa:2e:17:1c:d0:7e:
         08:4e:a8:c2:7b:90:82:d8:7a:7a:de:3b:c7:84:89:2d:f0:63:
         2a:15:b5:f1:9e:d2:89:1f:fc:b4:8e:23:1a:17:f2:05:92:e8:
         17:17:1e:86:71:03:67:9e:f5:79:31:31:96:cc:62:ab:4a:e8:
         50:76:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:19:30 2024 by rpki-client on console-fra.rpki-client.org