Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
File:                     3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa (raw, json)
Hash identifier:          VHUwfYfPD77jUpj/UiKKXsnh/HnGwzlF/juudHWpndQ=
Subject key identifier:   AB:DD:E3:97:8D:68:0B:0E:D4:E8:CA:5F:66:04:4A:6E:ED:41:69:C9
Certificate issuer:       /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Certificate serial:       010D0C9F432858471AB9A5974448195EDC1E2080
Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa
Signing time:             Wed 04 Sep 2024 17:05:01 +0000
ROA not before:           Wed 04 Sep 2024 17:05:01 +0000
ROA not after:            Tue 03 Dec 2024 18:05:01 +0000
asID:                     33724
IP address blocks:        66.85.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:b9:a5:97:44:48:19:5e:dc:1e:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
        Validity
            Not Before: Sep  4 17:05:01 2024 GMT
            Not After : Dec  3 18:05:01 2024 GMT
        Subject: CN=a58c908b-d61d-4419-b5e8-f02766fda3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:71:f8:1c:86:c2:53:77:46:f6:f3:0d:5f:
                    5e:cb:5b:bf:c1:b0:0b:22:3b:fd:3c:13:fe:d8:09:
                    44:e2:63:bd:2e:8d:66:af:b2:2f:f0:fb:a7:2b:86:
                    56:99:29:df:93:38:5b:9b:f3:b2:3d:c6:9e:7e:c2:
                    6c:ba:10:76:84:fa:6b:03:94:4a:d1:3c:17:62:d0:
                    fa:b0:25:d0:0d:55:4d:d3:7a:5c:df:bc:04:aa:df:
                    bd:c1:16:ea:12:d7:dd:96:35:78:56:3d:f6:9d:89:
                    e6:ba:dd:a6:03:25:f8:4f:b6:39:c8:b5:33:3a:c8:
                    85:d3:50:17:74:ac:2e:e7:7f:60:47:3d:d4:5a:1c:
                    98:f0:31:ad:29:b3:da:ec:64:27:22:42:e6:d9:64:
                    a2:38:1d:b9:91:cd:d7:07:c9:90:39:b1:e1:d5:b9:
                    e4:71:fb:bd:da:ed:4f:da:e5:c2:c5:ca:8d:87:e5:
                    59:b7:29:af:97:79:a2:00:7b:ac:6c:00:03:cc:b5:
                    00:96:25:f5:90:c4:77:47:79:76:22:71:cc:19:ff:
                    52:c6:64:83:31:a6:fd:56:cf:17:18:e8:5f:8c:df:
                    df:1f:84:06:74:d9:04:d1:00:ea:1c:70:2f:26:12:
                    0d:ae:de:5c:f8:f0:b4:6a:cc:32:d9:e7:01:b1:a6:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DD:E3:97:8D:68:0B:0E:D4:E8:CA:5F:66:04:4A:6E:ED:41:69:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl

            X509v3 Authority Key Identifier:
                keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:c6:98:e4:9f:c9:50:29:52:98:83:54:c2:55:b0:a4:31:
         e3:d1:6d:46:d7:94:8d:9e:d1:60:6d:e2:03:37:34:39:66:11:
         4f:f4:70:90:2b:8e:d0:ec:eb:c4:23:f6:cd:28:0b:5d:e7:20:
         4c:0b:d0:a6:6d:5c:7f:4f:8e:16:f0:da:25:14:90:20:27:1a:
         0d:bb:5a:ea:82:eb:0b:08:44:3b:04:79:a1:12:ee:4a:54:11:
         b2:ed:7f:64:01:74:e8:25:08:55:7f:88:a6:d9:d0:d0:3e:f6:
         37:4d:23:b7:6c:4f:39:9d:74:17:32:7f:83:08:0f:55:e4:90:
         86:59:07:64:d4:61:6f:b9:21:c4:c8:66:c0:7d:55:aa:a0:05:
         de:ce:d5:9b:a9:79:19:0d:d1:99:34:f5:98:05:b5:e4:9b:1e:
         66:b2:ae:e3:ed:b2:79:38:a7:83:c0:8c:4f:64:9d:90:99:4b:
         16:62:c0:30:b7:3d:3d:91:69:7e:68:44:78:94:b0:c8:28:bf:
         4a:0d:96:ff:ec:be:c6:f4:63:62:13:b9:34:76:ce:5f:42:d4:
         a7:ad:c7:ba:17:57:1c:d0:58:4c:ba:37:a8:84:f8:7d:eb:0f:
         0b:33:fb:ce:5c:72:9f:80:37:fa:02:18:d5:20:0b:23:a5:cd:
         e8:6e:dc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:48 2024 by rpki-client on console-fra.rpki-client.org