Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eec3889c-d66d-35b0-908e-27b95ad60786.roa
File:                     eec3889c-d66d-35b0-908e-27b95ad60786.roa (raw, json)
Hash identifier:          38I1gwDHOHUWok1EFtvTv8uzlrscCByMTDc6706Ib/c=
Subject key identifier:   90:95:3E:40:4B:52:46:42:95:27:D3:04:1B:3D:EC:3B:9D:5A:DD:0B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285847ECB43DAB767AB29A685D3100
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eec3889c-d66d-35b0-908e-27b95ad60786.roa
Signing time:             Mon 18 Nov 2024 22:13:53 +0000
ROA not before:           Mon 18 Nov 2024 22:13:53 +0000
ROA not after:            Sun 16 Feb 2025 22:13:53 +0000
asID:                     7018
IP address blocks:        198.66.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:b4:3d:ab:76:7a:b2:9a:68:5d:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov 18 22:13:53 2024 GMT
            Not After : Feb 16 22:13:53 2025 GMT
        Subject: CN=195570b3-8f13-4db7-960f-58938011338c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:f3:02:a9:5e:ff:c3:41:01:b3:13:60:02:
                    5c:65:52:5a:e4:8f:f2:03:c2:1c:00:73:6d:c7:b7:
                    76:96:40:69:d1:ce:a9:88:42:cf:43:7a:23:60:2c:
                    f5:5e:4f:48:bc:f9:ae:7f:fc:f1:b9:37:40:5a:13:
                    d4:7f:98:03:e9:fe:94:86:58:31:35:73:f0:b2:b9:
                    1a:c7:19:c4:89:5f:c9:09:20:8b:9c:46:92:08:1b:
                    a5:1f:bb:95:3f:9f:8e:79:d8:6a:62:6f:32:04:bb:
                    86:02:a8:b8:fc:ca:9c:f0:02:ce:34:4e:c6:b8:25:
                    41:d7:55:b7:57:09:a7:27:90:f7:4a:17:ee:70:3b:
                    78:c0:1f:41:c1:97:59:9c:72:f0:6b:ca:45:08:97:
                    55:39:73:28:c6:a0:95:d6:2d:cf:6e:09:ac:d9:cc:
                    fe:38:fe:98:ba:f9:c5:93:85:fe:6d:d9:2f:39:37:
                    ea:8c:33:9f:6a:d6:08:da:c6:76:cf:0e:75:40:be:
                    ff:22:c8:70:4a:19:28:ed:89:a1:c0:34:41:a7:44:
                    95:94:e3:8f:3a:d0:a5:ed:5b:66:5f:73:8c:ef:de:
                    d4:48:ce:f9:ac:79:d2:86:eb:98:d6:42:17:fa:01:
                    40:41:f5:a7:6b:c4:db:77:bf:67:8f:30:d0:34:58:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:95:3E:40:4B:52:46:42:95:27:D3:04:1B:3D:EC:3B:9D:5A:DD:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eec3889c-d66d-35b0-908e-27b95ad60786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e0:72:72:9c:89:b8:dd:2e:c2:91:4a:0c:98:c8:90:d2:80:
         4e:e2:e4:bd:b8:1d:21:f1:5b:bb:95:b9:5f:53:d5:85:67:bc:
         11:8f:e9:2a:d6:58:7e:51:a3:66:bd:1f:14:24:cc:bc:e2:42:
         3e:c0:c4:3a:f2:63:ca:31:29:14:3e:87:c3:ad:6d:a1:eb:b9:
         e8:7d:5b:1f:0c:f7:71:32:51:06:29:fa:1a:74:b9:00:2e:75:
         6e:0d:ba:91:1b:1c:e5:f9:a4:c1:81:f6:75:ed:cc:f3:91:b0:
         77:73:08:a0:b9:1d:cd:2e:11:53:04:1b:d9:b5:9e:08:b3:e0:
         d3:77:7b:8b:12:f0:ca:cf:44:1e:30:72:7d:13:29:d5:ae:e4:
         64:ea:5c:7f:de:de:33:15:ba:86:9f:71:f6:7a:0b:03:38:3b:
         19:6c:e7:28:82:2e:96:74:b7:82:d4:96:0e:a5:2b:3b:a6:b7:
         c8:9d:5e:b6:fe:06:e1:67:bf:13:1a:e8:b5:f0:21:8c:3c:5d:
         af:82:ad:d2:72:83:22:14:55:2a:3d:26:2b:7c:e5:b8:db:66:
         97:ae:dd:cc:20:71:08:dd:19:e0:33:5d:63:b9:3a:b2:fe:ec:
         4c:17:51:8d:0e:fb:23:36:5b:6e:92:22:dd:fc:d2:c6:b2:4b:
         44:6a:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:09 2024 by rpki-client on console-fra.rpki-client.org