Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa
File:                     0752d7a5-5222-310c-85f3-05e84bd2890b.roa (raw, json)
Hash identifier:          ShuP0EeTvPIF5PwZN85PeyCsDVn4ZGb346Rm1TEvuik=
Subject key identifier:   15:BF:0D:C3:52:D0:0E:B8:30:89:C8:A3:5F:D0:49:DE:34:4B:5E:43
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584535233158672070860D63D100
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa
Signing time:             Thu 14 Mar 2024 18:34:50 +0000
ROA not before:           Thu 14 Mar 2024 18:34:50 +0000
ROA not after:            Wed 12 Jun 2024 18:34:50 +0000
asID:                     4213
IP address blocks:        66.172.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:23:31:58:67:20:70:86:0d:63:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Mar 14 18:34:50 2024 GMT
            Not After : Jun 12 18:34:50 2024 GMT
        Subject: CN=f96e4aaf-8580-4d68-913b-0dcf43e5415d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:e3:c2:82:95:30:12:fd:fc:33:80:fb:93:
                    21:e1:6e:cd:3f:14:cc:7a:70:1c:52:42:60:2c:1d:
                    76:89:eb:9a:91:b3:cf:78:2a:bc:15:7b:e2:cc:81:
                    75:3a:88:cf:fb:2f:43:83:2b:6d:df:56:6c:4f:70:
                    67:03:d4:ce:e5:a9:bc:a2:61:51:86:98:66:85:5f:
                    06:b3:de:96:05:91:9c:5b:2a:4a:bc:36:c1:35:96:
                    9c:10:14:6f:72:eb:18:bd:ce:02:4a:b7:61:88:54:
                    1d:d1:bd:12:75:ba:18:e8:a3:9c:2e:ed:a1:80:bb:
                    a9:38:1d:bf:ac:03:36:00:ce:66:a7:8b:16:fb:ae:
                    9e:20:f8:30:1f:8f:ad:c7:3a:66:83:92:ad:2b:92:
                    51:57:6e:6e:cd:7b:71:68:0a:c9:e1:18:16:5d:ec:
                    cd:75:c0:61:84:6c:1a:78:93:62:c2:f7:f0:91:83:
                    3e:d7:e4:b5:6d:48:a3:8a:0b:02:48:c0:d6:5c:28:
                    c9:1c:85:bd:67:77:1f:ed:f8:b3:57:35:a0:6b:88:
                    50:da:a2:a2:28:48:3d:5f:45:30:d4:e0:e8:a6:05:
                    0b:46:59:31:fd:9b:bc:85:24:2d:3e:40:3f:a1:37:
                    26:8a:22:30:cd:b6:47:e1:a9:f7:9c:78:1d:39:83:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:0D:C3:52:D0:0E:B8:30:89:C8:A3:5F:D0:49:DE:34:4B:5E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0752d7a5-5222-310c-85f3-05e84bd2890b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:9f:c8:84:28:4d:e4:d3:ac:cb:47:ea:04:cf:de:2c:77:
         0c:78:9c:36:ff:d4:20:3d:c3:7c:b7:6f:11:36:94:16:3a:d6:
         e3:f0:1e:b4:57:35:d2:6f:f4:f9:85:5f:44:a3:b5:3f:c8:1a:
         74:b6:a4:a0:78:34:41:a7:23:ef:be:7f:d0:8a:bb:50:fd:3d:
         9e:eb:4e:5b:04:8f:8b:05:18:86:f7:34:1f:62:43:60:3e:b1:
         f9:b3:6d:b6:ec:68:67:25:03:22:29:f8:90:1e:a5:9b:2c:d8:
         88:42:6d:79:2f:1f:b0:4a:23:d4:4d:57:a7:a7:e2:da:f1:fe:
         76:af:fa:00:eb:35:12:dd:b5:05:53:51:24:8f:41:47:ab:b4:
         73:47:54:2e:72:2c:67:55:39:de:0e:39:37:34:46:09:7f:ba:
         08:7b:82:82:13:64:1f:cf:5c:c0:01:c1:df:33:80:88:27:d8:
         8b:47:ee:3a:0a:72:3d:4e:03:9e:3c:25:48:f8:ad:96:3f:66:
         ad:a9:ac:a0:70:53:aa:16:90:10:16:9b:2d:d3:2c:f3:92:f0:
         8f:ac:d8:ad:9b:4a:e9:b7:9c:5d:e5:21:a2:85:26:97:64:43:
         75:55:91:2c:69:1e:8c:1d:2b:30:eb:a6:2c:b0:c7:bb:4a:4b:
         97:a9:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:53:53 2024 by rpki-client on console-ams.rpki-client.org