Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa
File:                     ecff82b6-556f-3ccc-8045-cd50558517e5.roa (raw, json)
Hash identifier:          gWwolKV0d/B7arKV/k/ZJJ7r3II0Z3FwN2lxc5CN3dg=
Subject key identifier:   C3:04:75:C2:D9:B1:76:18:43:FC:6D:F1:EA:2F:8E:23:C4:2B:CD:DA
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F43285844F24BB8594168FFEC6980E200
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa
Signing time:             Mon 19 Feb 2024 19:57:19 +0000
ROA not before:           Mon 19 Feb 2024 19:57:19 +0000
ROA not after:            Sun 19 May 2024 18:57:19 +0000
asID:                     14618
IP address blocks:        199.66.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:4b:b8:59:41:68:ff:ec:69:80:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Feb 19 19:57:19 2024 GMT
            Not After : May 19 18:57:19 2024 GMT
        Subject: CN=b4271886-6344-4471-bf3d-38f640ad63db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:8b:b8:b0:b6:58:c2:a0:51:16:44:3d:d6:
                    08:16:ed:f1:15:97:17:2a:d6:58:ea:82:3d:7c:30:
                    7a:5b:da:ae:37:86:3b:82:fa:91:44:68:4a:c6:c7:
                    6e:d5:02:8e:46:1c:30:a2:b4:cd:3c:b0:72:67:70:
                    bb:10:39:b0:3f:4d:af:db:b1:90:07:1b:d2:3f:af:
                    66:25:f4:9e:5b:d5:f2:02:62:23:5e:ec:e8:b1:e2:
                    95:0e:4d:c1:6b:c8:9b:4a:b2:ef:e5:7a:d3:99:f6:
                    9e:4b:7f:9b:93:36:33:09:ec:34:b4:dc:3e:df:f9:
                    5c:11:27:46:ca:c5:27:15:c9:75:32:e3:59:f2:b6:
                    13:2f:9c:11:2e:ff:19:e6:f7:a1:cf:ee:ef:dc:62:
                    5a:0e:e0:e2:ed:2c:9b:37:89:3d:33:62:f0:fe:72:
                    33:3c:d8:17:d6:1b:c9:f9:9a:38:28:1f:ea:a3:c1:
                    31:7d:bd:26:e7:0a:38:8a:9f:2e:67:13:35:c0:fb:
                    9a:f1:e6:c7:f6:15:3b:bc:f6:ae:00:a4:5b:34:35:
                    d7:0b:79:10:04:8e:3d:55:b7:55:e7:ec:0c:ad:35:
                    53:83:d2:51:9a:a4:7f:ea:72:e1:29:fe:07:a1:e4:
                    c0:34:18:ef:cc:03:fe:85:8c:22:29:53:3d:79:9c:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:04:75:C2:D9:B1:76:18:43:FC:6D:F1:EA:2F:8E:23:C4:2B:CD:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:16:92:ca:c5:97:1e:b7:26:15:48:80:fc:91:25:b9:fd:eb:
         95:72:29:f5:55:88:de:83:82:55:07:bb:da:39:06:1f:87:72:
         89:b3:72:b6:f3:92:9c:bc:d1:4e:1e:0f:6a:23:c2:2a:b7:20:
         0b:de:be:bb:5b:ff:2f:ab:76:41:b1:f4:64:d0:a1:a5:ba:6d:
         a9:75:d5:ce:26:ee:24:6e:91:21:21:64:a4:87:39:f4:4a:a3:
         62:d1:cd:c0:7c:63:05:c9:c1:73:e4:d0:3a:6a:b8:55:88:5f:
         3c:fe:d4:61:80:76:51:fd:c1:a5:72:94:db:98:18:c6:0f:0e:
         4e:55:2d:82:74:6b:23:db:7e:ad:8a:e8:d4:5b:e7:cd:de:9f:
         d7:05:6f:85:69:60:5d:cc:05:6e:11:0f:79:74:09:5e:d5:77:
         6e:7e:22:4d:44:34:4a:34:a1:00:bf:6c:99:09:54:80:e4:68:
         51:25:50:b1:da:fa:df:68:7f:88:9d:2f:2a:63:29:be:19:f0:
         22:36:b4:57:53:0b:12:e9:6d:1d:5f:af:e7:a4:d7:16:82:c2:
         bf:81:09:f2:e8:6a:d7:1d:73:64:0e:b5:24:31:9c:a8:4e:91:
         dc:f1:94:fc:ee:e9:4a:bf:78:0a:20:2d:c1:ae:39:c2:c5:8b:
         b1:e2:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:50:29 2024 by rpki-client on console-ams.rpki-client.org