Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa
File:                     a8735f80-d635-36e0-a042-89c554b7b169.roa (raw, json)
Hash identifier:          16107ilsvsiT/GPoqaGQFpBy0pzuYNVU4BxyMZLyvW0=
Subject key identifier:   57:70:19:06:77:C3:6C:C2:68:BD:14:62:34:1A:3E:F8:B0:35:E0:B6
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858478456744233300DFB74C3E900
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     22808
IP address blocks:        66.112.128.16/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:74:42:33:30:0d:fb:74:c3:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=ea853a95-0ec4-4065-8412-c88336f8f61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:2e:fe:e4:6d:de:b8:15:42:79:1e:15:71:
                    7f:63:eb:f6:a8:99:3d:50:cb:55:4e:f6:af:91:25:
                    bf:4c:6c:ff:1c:f9:22:a9:be:cf:8a:19:aa:48:e5:
                    08:11:e1:aa:29:51:e1:98:25:30:93:1a:11:df:10:
                    50:cc:dc:7b:b6:79:d5:25:8d:e7:70:b7:bc:1c:f8:
                    b6:b8:78:7b:03:b5:2e:7f:48:22:dd:95:0f:3c:69:
                    01:57:f1:9c:15:1b:1f:e9:04:9c:01:dd:f0:f0:1d:
                    b9:1f:64:1c:79:63:80:83:34:24:12:ad:fc:ec:33:
                    ed:e5:a1:d3:8e:18:aa:5f:61:c7:f9:8b:4d:c2:fd:
                    2d:12:50:82:f2:31:fe:d2:6e:bb:71:1d:77:a9:18:
                    0c:88:49:3a:c2:79:a1:ad:b1:23:ab:b4:37:9d:7c:
                    ce:42:0c:56:cc:55:e5:9b:74:ef:c3:46:63:0a:32:
                    b4:e6:f5:74:91:21:f0:1f:34:be:86:ab:3d:1c:55:
                    c6:29:ff:90:48:da:c6:92:58:1d:2e:1d:a9:77:5c:
                    0f:3a:97:5d:ab:2c:cb:56:b8:6f:63:c2:b8:b8:36:
                    3a:68:40:35:15:b6:f1:66:72:73:28:61:8d:fa:55:
                    47:62:ee:0b:a0:79:09:6b:c3:6a:6d:ad:25:e2:f9:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:19:06:77:C3:6C:C2:68:BD:14:62:34:1A:3E:F8:B0:35:E0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/a8735f80-d635-36e0-a042-89c554b7b169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.128.16/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:76:2b:9f:54:3a:e1:60:75:de:2d:f8:32:36:ba:71:34:
         5a:1e:b0:b3:ba:2d:ca:85:90:c5:51:7d:10:d8:1f:ba:2a:24:
         9f:d8:1c:b4:45:63:da:b0:78:a3:c2:21:1d:ee:9a:bd:43:f6:
         3a:c2:da:25:2e:17:d8:03:11:22:00:fe:41:5d:f5:87:8a:55:
         ee:d5:66:a8:bf:99:68:d1:4d:80:c3:91:4f:ad:a1:9f:11:7e:
         3e:c7:b6:11:c4:05:40:57:19:6c:a6:ee:1c:8a:22:89:a0:15:
         24:94:d4:8d:37:3a:e7:2d:16:17:6e:61:5d:79:2e:67:44:3d:
         8f:d9:d7:c8:2f:8d:f2:3c:18:20:50:0f:ff:9a:8c:7f:ef:3b:
         d3:82:91:de:2b:9f:ab:d4:56:b1:20:49:b3:ca:8b:4d:15:e0:
         10:3e:78:a2:d2:87:ed:61:79:30:cb:bb:f6:87:41:99:4c:7a:
         5a:be:0a:77:c9:0c:75:fe:21:78:5a:a6:ce:55:39:a0:da:13:
         b8:95:2c:3c:7e:05:ed:ab:b6:10:1a:f2:6a:d0:47:62:8c:c5:
         aa:ac:12:99:b1:52:d9:72:7c:15:e4:a9:ca:0a:46:cf:63:10:
         09:cc:93:64:65:87:48:86:6c:35:c0:60:91:18:22:6e:0f:47:
         b9:6d:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:05 2024 by rpki-client on console-ams.rpki-client.org