Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81da03b-5dda-371b-b76f-678fc56a6efd.roa
File:                     d81da03b-5dda-371b-b76f-678fc56a6efd.roa (raw, json)
Hash identifier:          GUxIlmtywE02kdnndnI+6uju2vCPigbwqQtJXT7C6HA=
Subject key identifier:   F3:15:81:D4:9A:E3:99:BC:33:19:5C:3B:7C:9C:2D:14:06:88:2D:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E574635016D8E3A807F060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81da03b-5dda-371b-b76f-678fc56a6efd.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        66.56.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:74:63:50:16:d8:e3:a8:07:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=37da2984-1615-4d1e-b3ac-a02b81afa55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:47:b1:44:ec:20:80:6b:7f:e5:52:f1:cf:
                    ec:89:cd:16:cf:68:61:85:47:22:99:59:c1:32:aa:
                    dc:44:9f:7c:6f:14:df:e5:26:df:b4:95:3d:e8:38:
                    73:43:df:6c:5e:14:d4:14:b6:43:cf:3a:3e:73:24:
                    6d:76:18:e8:7d:2f:c1:f4:64:07:05:9c:0d:63:f8:
                    e0:6e:1c:ed:2e:be:c1:fa:6b:7c:84:16:9c:44:3c:
                    47:e4:eb:6c:b0:0b:ea:c8:cf:4f:cc:c3:a2:24:e9:
                    3c:b2:fe:d1:13:72:69:11:38:9d:ba:2a:0e:e3:2c:
                    f2:30:97:ce:5b:fa:67:64:e0:e8:41:52:a6:0b:29:
                    2f:88:84:5b:df:3c:cc:59:b8:aa:a3:76:bd:01:8c:
                    40:56:be:39:ca:4d:d2:60:af:5b:0d:e2:52:e6:4d:
                    cb:78:69:d5:5c:28:01:ac:df:b8:26:7a:64:c3:e7:
                    25:8a:ed:f6:76:09:4a:11:47:89:34:c8:54:7d:77:
                    24:53:28:a2:46:26:27:da:83:6e:5d:ab:37:5d:19:
                    cc:0b:73:cc:97:ec:86:19:aa:95:dc:13:67:74:37:
                    c3:69:cb:23:89:58:83:c1:e0:7d:9c:cb:5f:86:2d:
                    3f:2f:70:c1:f9:44:0a:20:4f:38:d3:bd:6a:c2:bc:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:15:81:D4:9A:E3:99:BC:33:19:5C:3B:7C:9C:2D:14:06:88:2D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81da03b-5dda-371b-b76f-678fc56a6efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.56.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:08:7c:a8:55:ce:3d:bf:aa:9f:88:20:07:32:b3:71:89:
         cd:37:48:ed:9e:b5:96:0f:f6:fb:23:e2:af:e6:c1:75:71:1b:
         3c:99:50:ec:37:f9:e3:00:37:fb:ff:62:4c:7c:0f:e6:1c:8e:
         f3:7e:69:81:4b:e4:92:ec:8b:71:64:52:bf:21:05:32:4d:c2:
         3c:2d:92:ee:d0:d4:1d:83:05:6a:8b:29:94:c0:e6:49:2e:6b:
         4d:97:d5:9e:ba:7e:66:b4:e1:38:e9:89:a2:18:1e:d1:ba:e3:
         43:e8:0f:ad:1c:ca:b6:52:6e:d7:a9:94:c0:3b:3c:90:04:72:
         bd:2b:a8:3c:0c:93:a3:55:cc:7f:40:ab:49:6d:a4:35:05:26:
         ae:81:c2:91:3c:a6:fc:58:69:e4:0d:98:fc:95:25:7f:ed:eb:
         24:dc:56:2a:14:1a:bd:bb:93:8d:ef:40:21:02:c0:f8:2a:f6:
         7b:0c:9a:91:d3:e5:8c:8e:de:42:02:c7:8f:f8:3b:bf:9a:58:
         08:50:c0:8b:25:2c:ef:5e:41:65:0f:c1:a0:19:40:d6:ba:33:
         e8:a6:d0:56:f4:02:c8:ea:87:d6:e9:38:bb:d8:9b:4a:41:2a:
         83:17:d1:8c:64:d0:8b:dd:d5:65:58:9e:57:64:00:6c:b4:99:
         38:da:b4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:34:19 2024 by rpki-client on console-fra.rpki-client.org