Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe56587f-8f69-3c98-895b-729a211a9bce.roa
File:                     fe56587f-8f69-3c98-895b-729a211a9bce.roa (raw, json)
Hash identifier:          dOuOZYh8ebzBfg0NduGsoia2wu8kF1nDFR2iQ/ElS1s=
Subject key identifier:   D8:6E:BB:74:A9:57:74:FA:D0:BF:10:22:93:DD:25:B9:83:A5:CD:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABE7626562F9A37C778A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe56587f-8f69-3c98-895b-729a211a9bce.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        66.41.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:e7:62:65:62:f9:a3:7c:77:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e94ae95a-cf49-4181-b0f5-f4f0f54ffc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:6c:e1:32:ea:01:6f:6d:e2:19:80:88:e1:
                    a4:c7:10:b7:4e:4a:e4:73:94:29:68:67:1c:ff:4b:
                    72:b3:d8:c9:b0:c6:7c:85:80:3c:6c:b4:4b:19:b2:
                    3f:cc:a6:c7:b3:31:46:d3:3f:2d:6b:00:73:52:4b:
                    5c:e3:92:92:d1:47:9e:71:d4:d6:d8:ad:c1:b5:ac:
                    c6:d5:be:48:70:be:68:9f:46:3c:b3:da:8d:37:79:
                    51:e4:ee:4a:5e:42:de:c0:7a:ee:e5:f3:af:32:d2:
                    60:15:5e:95:c4:76:4a:5a:49:83:77:3f:3a:65:0e:
                    0e:56:cf:e5:20:ce:c2:0e:a4:fe:1a:c3:cf:99:a9:
                    28:5c:a5:1f:09:6d:bd:b6:cc:4a:37:ac:b3:0d:8e:
                    82:d2:dd:df:f1:fe:35:6d:ea:aa:bc:90:fd:e7:1f:
                    72:48:de:1c:ed:6a:9c:ef:e4:ec:f4:15:2f:0e:bd:
                    89:2b:fa:2d:3e:da:66:7b:1e:f7:62:10:17:0e:34:
                    a9:24:9d:ec:c7:db:8a:b2:b0:7c:2a:f0:c1:d0:3f:
                    3d:a6:9f:da:93:46:7c:d2:ee:cb:f1:76:f4:0e:80:
                    bd:87:4c:a6:85:ff:e2:fb:3b:e5:bf:be:ab:6d:0f:
                    42:8d:fc:67:7b:a3:a5:c4:9a:f4:17:59:bf:95:e9:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6E:BB:74:A9:57:74:FA:D0:BF:10:22:93:DD:25:B9:83:A5:CD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe56587f-8f69-3c98-895b-729a211a9bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:71:cd:13:6f:eb:58:a4:eb:02:c8:ab:36:4d:34:62:f2:bf:
         03:7d:de:f6:ef:1f:a2:7e:14:ae:9b:a6:00:7a:d6:27:8f:3e:
         95:36:df:47:bc:5d:57:83:77:05:07:53:a7:fb:03:77:28:53:
         28:2c:15:4c:50:6d:f1:8d:ff:62:49:a4:07:60:7d:40:a6:f2:
         17:b0:96:39:a0:73:e8:26:c8:e1:1e:c4:bf:5b:f6:a5:46:1c:
         13:23:ec:c1:6b:04:ff:8a:86:b0:4a:10:40:76:34:3e:d2:85:
         00:cb:77:74:e0:51:b5:8d:ec:89:b0:94:bb:70:58:b7:8a:b4:
         c0:4a:9c:c9:2b:cf:5f:12:27:48:86:27:2d:42:ea:51:f3:fa:
         9e:07:ff:c2:ce:d8:fb:2d:03:5e:91:80:fd:be:94:21:c0:92:
         3c:b1:d3:ed:62:cc:b4:dc:fb:a9:61:19:54:6d:5c:70:7e:bb:
         fd:98:84:ef:74:c1:9c:b6:52:9a:9e:91:ee:a7:41:d3:04:8b:
         fe:38:5a:e5:80:80:b1:86:c0:03:7b:81:b3:1a:80:52:d2:48:
         0b:4c:2d:45:a4:f6:8c:6e:25:64:d1:5c:b9:8c:ff:2a:7f:89:
         2c:1b:79:a7:a5:6e:25:62:98:e4:e7:73:f5:41:76:20:bb:97:
         74:15:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:00:33 2024 by rpki-client on console-ams.rpki-client.org