Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa
File:                     fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa (raw, json)
Hash identifier:          IFSirEcyC7szYI8XZivgdQylT51A29pqGXr3lY8jPNo=
Subject key identifier:   DB:E7:49:56:1B:0F:80:0B:4C:D3:E7:73:29:88:1B:0D:E7:3B:8E:68
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584500F561D5E97346CDBEE87A00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        66.159.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:61:d5:e9:73:46:cd:be:e8:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=5d55025b-c6b4-4f1c-95bd-a643e205f323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:c3:ef:27:79:c4:67:a9:4b:24:40:b5:6b:
                    bf:9c:33:a0:88:e5:bc:86:69:1e:54:96:1d:39:d2:
                    8e:9d:cd:51:84:30:a7:31:ae:62:23:18:d8:fd:45:
                    ec:4c:0d:ce:af:f1:2f:3b:6f:71:f9:56:8f:f6:0d:
                    56:93:c8:a7:55:51:06:c8:62:16:c8:8a:b7:f9:cc:
                    f6:62:5f:56:94:16:ee:b6:34:7e:79:eb:90:50:fb:
                    6d:0e:95:3c:c7:7d:c1:bc:54:d2:57:9f:e9:3c:dd:
                    ab:0b:32:b3:03:fd:c3:53:32:88:73:8a:e5:b5:9e:
                    ff:99:2e:04:3a:66:e9:dd:43:fe:f9:73:85:3b:46:
                    7e:02:95:c5:c0:de:f5:c6:21:5a:bf:62:7b:0a:d8:
                    52:35:6b:c3:c5:50:56:17:d3:b0:0f:9a:05:0f:9f:
                    6f:21:e8:5c:2e:26:5a:63:d2:ad:6a:83:ba:bd:0c:
                    ae:73:bd:35:90:e2:84:15:e4:25:5c:5d:26:04:45:
                    95:f8:fb:01:4c:ac:a9:47:6f:fa:7d:c4:f2:59:a9:
                    5a:48:5f:1a:3a:20:9e:db:2d:c4:6d:c8:03:02:b3:
                    db:de:5c:39:bc:8a:de:f5:11:84:2f:d1:20:97:7d:
                    fa:8d:c7:72:2e:01:88:50:79:d5:8a:5d:8f:fb:fc:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:49:56:1B:0F:80:0B:4C:D3:E7:73:29:88:1B:0D:E7:3B:8E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fa1c6302-3cbf-3f95-9de8-f1b5c9231060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3f:bd:42:70:b5:cf:1d:f4:a5:91:c5:d4:ed:de:89:68:c0:
         0b:4e:3c:aa:44:2a:2c:f2:b4:3a:b9:64:b5:f5:3a:8f:24:7c:
         03:0f:be:07:83:ef:f3:c4:67:af:54:1e:07:c8:10:d0:9b:8f:
         24:fc:a4:8a:81:e4:c5:f3:15:5a:73:ca:a8:a7:7a:f5:bf:b4:
         2e:23:e5:8d:b7:9c:cd:9e:d0:7c:b0:b8:cc:d0:09:be:44:b0:
         6c:ae:12:74:c3:55:a6:4a:7f:78:17:75:8c:37:e5:56:a3:e7:
         d2:ed:a5:2b:a1:8d:70:db:5f:ae:81:08:c6:a9:87:d9:2d:fe:
         e1:d6:66:ca:0d:53:99:ba:59:3e:d2:5b:39:c9:89:fd:62:32:
         f2:9e:0f:09:f6:b0:de:58:65:70:eb:6a:93:17:99:7c:34:b1:
         9a:a4:bb:6d:25:48:19:b7:be:7b:66:ac:ea:3a:02:4e:e9:fe:
         b8:b4:59:a5:0e:7f:0c:1b:85:e1:89:65:ef:14:c1:ec:84:10:
         3f:af:e8:27:0d:d1:b6:dc:4f:b0:9d:3f:7c:5f:01:8b:ce:2a:
         f5:60:27:f7:bf:14:f1:1a:ce:48:23:f9:d8:55:17:50:94:2f:
         aa:15:26:f3:93:9f:1c:0d:23:dc:32:8a:80:d0:ad:67:dc:cc:
         69:27:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:25:18 2024 by rpki-client on console-ams.rpki-client.org