Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1aa50007-0212-31f3-a767-d0b9800bf8fb.roa
File:                     1aa50007-0212-31f3-a767-d0b9800bf8fb.roa (raw, json)
Hash identifier:          5n/SH4FzZ468h+zzmvhG+fcrSzf1lWfEDC4UjDxo5Lc=
Subject key identifier:   E1:24:74:A1:E4:60:2A:CF:1B:D1:AA:B9:F5:5C:B1:A9:EF:2E:74:C5
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584559E35B25FDE5A7F97AC57E00
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1aa50007-0212-31f3-a767-d0b9800bf8fb.roa
Signing time:             Wed 27 Mar 2024 22:31:07 +0000
ROA not before:           Wed 27 Mar 2024 22:31:07 +0000
ROA not after:            Tue 25 Jun 2024 22:31:07 +0000
asID:                     35847
IP address blocks:        66.33.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:59:e3:5b:25:fd:e5:a7:f9:7a:c5:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Mar 27 22:31:07 2024 GMT
            Not After : Jun 25 22:31:07 2024 GMT
        Subject: CN=55228027-0045-4cab-99a2-ecc5ff4f1934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:c7:6c:b1:e9:97:64:c5:e6:2c:2f:79:ff:
                    0e:8c:13:78:41:f3:f0:f7:ac:6e:d9:fa:6c:5a:00:
                    22:8b:fb:80:46:43:c3:70:99:3b:cc:c4:14:c1:55:
                    62:e6:01:4e:59:88:86:5d:a0:e2:7d:f6:00:4f:36:
                    23:be:aa:c1:35:f2:fc:5c:27:4b:00:5b:57:76:f8:
                    a4:c0:b0:0a:e6:96:9b:11:4e:c5:6c:4b:5e:a2:e9:
                    55:40:c1:72:dd:d3:71:bf:59:4c:8c:74:ff:99:10:
                    1b:3e:26:8a:09:74:eb:fb:38:c2:f8:cf:1c:0e:47:
                    e7:cf:fa:35:8b:d8:5f:d1:a4:b2:fb:29:39:17:55:
                    6e:59:7c:ed:7c:35:0e:64:67:7c:46:31:dd:b3:a6:
                    b1:61:ff:cb:67:88:78:91:c2:df:f2:12:a9:9b:1d:
                    74:67:64:04:a2:97:93:b1:99:3f:9e:3e:59:c5:67:
                    e9:17:ca:d6:05:2c:60:6d:53:5c:c5:e5:42:69:51:
                    c7:f0:b4:5f:e1:5b:a2:9d:ee:85:b9:86:bf:b3:96:
                    09:86:f8:76:0a:10:5e:92:f5:e1:c0:b7:05:87:48:
                    5a:91:55:5d:4c:61:cb:45:ec:b2:34:ba:71:54:3d:
                    43:26:cd:4b:d4:61:70:70:8f:1a:20:c6:6d:bd:b0:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:74:A1:E4:60:2A:CF:1B:D1:AA:B9:F5:5C:B1:A9:EF:2E:74:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/1aa50007-0212-31f3-a767-d0b9800bf8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:0f:b2:84:55:b0:9b:59:9d:a1:17:14:63:e8:04:01:c0:
         64:1e:c5:f9:df:c8:a6:1f:cf:12:e3:4b:e3:c6:b1:8f:e7:b7:
         a8:d2:7a:2a:c9:34:30:45:d3:ec:5a:a2:99:3c:5a:04:07:6d:
         b5:41:8a:47:16:71:ac:f6:16:67:29:d3:08:a7:f6:f4:92:db:
         a3:85:cf:ef:59:10:08:04:15:c5:25:6d:33:ce:c1:44:72:fa:
         41:80:be:93:0b:81:68:26:99:81:cc:4b:b7:1a:9f:59:98:3e:
         67:e3:c9:a0:00:5a:38:d2:c1:54:cd:95:a6:c8:87:b8:bb:c0:
         4d:84:7c:b4:a8:f4:9c:22:a0:3d:39:da:e2:70:48:ea:03:19:
         0b:cf:9f:1b:a5:31:86:22:65:bc:76:0b:8b:cd:0c:63:d4:7f:
         45:74:d4:b9:0a:5e:7a:74:3a:25:df:e7:d5:93:ef:82:fe:b2:
         4a:12:ec:5f:58:46:8e:91:9b:06:36:a1:85:91:3b:8d:05:7e:
         3b:04:b5:fa:69:a3:12:e1:6f:98:23:ca:20:4e:4d:42:ad:b8:
         8a:d3:70:a3:49:fb:1f:83:f6:88:5d:dd:8b:d0:61:06:86:cf:
         84:8b:a2:bb:f3:d8:f7:eb:ee:2b:fc:6e:b5:b5:87:6e:3a:97:
         3b:b9:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 02:27:25 2024 by rpki-client on console-ams.rpki-client.org