Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/87d6d784-aa10-370b-a0c0-de6e87414ae1.roa
File:                     87d6d784-aa10-370b-a0c0-de6e87414ae1.roa (raw, json)
Hash identifier:          P2ePgeusk8uY1t1GssdGprzWvJr3V2G4EQgej+RTwEM=
Subject key identifier:   17:42:5A:53:64:C4:82:57:91:03:FD:3F:C5:50:B3:C3:AA:78:5B:EA
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847D569FD84D5459F6B6693A1A0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/87d6d784-aa10-370b-a0c0-de6e87414ae1.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     32544
IP address blocks:        66.172.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fd:84:d5:45:9f:6b:66:93:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=1ee545ec-a17c-4757-b320-375447cd7e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:b3:8a:4b:6f:73:d0:9a:62:19:a6:f7:a8:
                    f2:4a:6f:fa:56:08:43:c6:e6:0b:1c:9c:49:98:df:
                    66:6c:41:bd:94:37:9b:cf:dc:5c:8a:0c:ac:e6:21:
                    7e:65:00:d4:bd:02:a6:43:2e:d8:80:54:88:f5:2f:
                    ae:96:98:16:0c:1e:3a:db:81:0d:4a:55:8a:b4:bf:
                    1c:55:2b:a5:09:47:53:20:73:cc:c3:6d:a6:2b:0a:
                    31:38:26:3d:59:d9:32:d5:18:59:4e:7c:b4:a7:6e:
                    34:4a:c6:1a:4d:82:e7:23:82:f0:49:15:fc:99:b4:
                    11:3c:75:fb:e0:df:ad:cb:ec:b2:ee:ff:fc:b3:04:
                    e5:c2:b2:c0:94:80:eb:5a:cf:64:a5:cb:3b:5a:d1:
                    89:88:b8:05:35:d1:34:73:d0:03:5d:6d:8a:9a:db:
                    3b:ba:af:e7:cc:83:e1:ad:16:b8:da:c8:a1:ac:0a:
                    9c:0f:d9:c8:0b:36:d0:4d:4e:2a:3c:10:f8:e9:e0:
                    d6:b2:18:58:5a:05:0f:db:f5:92:70:31:55:80:e4:
                    96:a3:71:29:ac:cc:f1:fc:b7:b8:6c:86:8a:89:e0:
                    27:5f:5c:d4:0f:41:89:76:42:87:f7:f1:36:68:cf:
                    5b:de:0e:af:63:68:97:28:89:31:d0:df:d2:c2:ea:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:42:5A:53:64:C4:82:57:91:03:FD:3F:C5:50:B3:C3:AA:78:5B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/87d6d784-aa10-370b-a0c0-de6e87414ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:57:cb:9c:34:95:b4:56:ab:5a:44:4c:73:75:63:49:bd:88:
         a9:a8:e0:1a:ac:8a:b5:1c:dd:a4:af:bf:85:49:9d:46:af:8b:
         49:58:17:cb:45:61:d3:4d:22:04:19:07:41:55:81:4b:45:52:
         cc:c4:e3:e4:58:1e:51:1a:8f:a7:89:8b:a6:4e:0d:63:c2:47:
         2a:64:44:c6:37:5c:d4:2d:dc:ae:3d:f4:3e:60:21:e2:37:bb:
         ff:ad:d3:ab:ba:0a:f2:1e:7a:d7:2a:be:dc:84:7e:36:e7:22:
         75:bb:56:1a:eb:3e:aa:39:42:08:95:ac:a4:fd:93:a9:b6:cb:
         42:75:66:92:ab:d7:46:25:b0:8a:d8:d7:39:2e:7e:33:71:a9:
         79:d6:6b:a6:d1:31:7f:89:6d:c6:c5:90:7d:4f:59:0e:6f:7c:
         6c:a3:82:b2:2c:e1:ec:70:9c:d2:84:02:4a:1f:26:9f:0e:0d:
         a4:8b:5d:c9:c4:5f:e7:d2:a2:9f:a1:07:d4:c5:bc:62:e5:c6:
         de:55:ed:c4:3f:bf:18:43:4b:61:c1:8c:9c:d2:13:a5:8e:c1:
         27:9c:c1:f6:68:dd:ef:1e:8c:f0:b5:48:96:cb:c4:d0:0c:37:
         96:24:63:1f:3f:fd:7d:0e:21:94:5e:fa:bb:07:ed:8f:ad:1e:
         d1:fc:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:29 2024 by rpki-client on console-ams.rpki-client.org