Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa
File:                     14949f9b-6dc4-3f59-ac26-e099378e8cef.roa (raw, json)
Hash identifier:          dg5m7EP3a5+o343YgROnrvmyRd6MzTEQIueFhnJvbEE=
Subject key identifier:   FD:97:9F:7F:6D:15:A8:FE:49:C9:09:7C:59:D4:DA:2A:F3:68:85:D7
Certificate issuer:       /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
Certificate serial:       010D0C9F43285845A9BE0B34890E07D8B4998E80
Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        66.187.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0b:34:89:0e:07:d8:b4:99:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=19898f6e-7a3b-4b27-b7b3-dbe68e25c396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:5d:27:48:a3:2d:be:bb:53:3f:68:4e:f5:
                    04:1a:53:c0:42:74:c3:ee:f9:b9:7a:f3:e1:df:99:
                    8a:87:a3:1e:e6:9b:e1:df:bd:7e:58:71:39:15:48:
                    33:3e:25:64:48:8e:9e:54:17:c1:ba:c8:38:cb:41:
                    64:65:bc:b8:dd:08:50:e5:59:f8:34:f6:f0:4e:b3:
                    c5:3f:7d:f4:d1:1c:06:a5:2a:40:57:f9:1a:c9:fe:
                    9c:96:57:fd:5b:c9:08:d9:1f:1c:b7:d5:60:fd:d9:
                    ae:43:d4:5d:aa:ba:26:f2:c3:80:c8:f9:9d:7b:a2:
                    39:e8:b2:0c:0b:ea:b8:b8:93:a8:68:d1:0b:dc:65:
                    34:cd:47:d4:4c:ee:e5:0f:3e:42:98:37:58:15:6e:
                    88:aa:53:8c:9a:34:ea:87:9b:e6:98:f5:a7:c3:88:
                    30:92:16:83:7f:f9:1b:e4:8f:da:1c:ab:18:d8:98:
                    5c:de:63:77:1b:f9:ee:4f:59:a9:da:8f:88:f2:c7:
                    5d:6d:a5:6f:8f:7c:d9:c1:1f:45:52:04:5b:7f:37:
                    17:97:48:f5:d4:f6:bd:39:f0:f2:1b:c4:2d:5d:52:
                    0b:d0:d8:15:68:55:fc:b5:68:ac:dc:4c:5c:03:25:
                    24:be:8a:68:b7:86:a7:d9:7c:b6:0e:4c:19:e5:99:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:97:9F:7F:6D:15:A8:FE:49:C9:09:7C:59:D4:DA:2A:F3:68:85:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/14949f9b-6dc4-3f59-ac26-e099378e8cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl

            X509v3 Authority Key Identifier:
                keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:ee:f1:06:2a:31:1f:c4:de:75:8d:a1:58:8b:dd:0d:80:
         ec:01:a8:50:a6:d9:03:7b:ef:3d:5c:48:24:c1:a5:ff:3e:e1:
         bb:26:6a:a0:80:fa:8f:c0:b9:b1:5c:37:bc:31:5c:f0:3d:49:
         75:74:25:d2:39:f9:3f:7c:65:2a:5b:de:4b:ae:37:c4:ab:2a:
         f7:7e:51:08:59:cf:d1:6d:ed:0b:4e:04:22:0d:7b:aa:66:e9:
         33:d2:c8:48:2f:56:b5:60:c2:50:ff:d6:9d:7e:36:76:d6:e1:
         cd:dc:d0:15:e8:06:63:ac:bf:c1:41:30:f8:71:ac:8c:1f:1d:
         d0:52:9e:70:da:9f:f0:fd:69:c4:76:48:ee:98:63:4d:b1:a8:
         32:16:42:1c:de:dd:f6:0e:b9:33:55:41:c0:55:67:2f:91:66:
         40:93:12:f6:8d:4d:d6:c9:c7:a9:fd:6e:1c:e5:4f:d0:c5:18:
         22:78:3f:2d:a6:93:e4:1b:6c:ba:1c:ac:5c:8f:a9:d7:c6:cd:
         92:c5:97:bc:26:ed:8b:7b:09:96:b4:9f:42:cf:86:fd:ac:4a:
         b8:a8:b0:25:dc:f0:57:30:50:97:c2:9c:00:82:51:c0:a6:d4:
         e0:e7:d0:75:bf:de:8f:60:30:38:1a:fc:2d:33:54:12:fb:e7:
         45:35:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:53:26 2024 by rpki-client on console-fra.rpki-client.org