Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa
File:                     7effcafc-decd-3160-8a47-fac0462e8a13.roa (raw, json)
Hash identifier:          jX4BsgNG64pYaTbVPYGtZYyhnxqXNxc8nWKgfpteqxs=
Subject key identifier:   5E:D4:BF:A5:30:9C:F4:74:68:31:71:B2:6B:55:54:43:BC:11:4F:E1
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285845BD90089B6EC64A081C844270
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa
Signing time:             Thu 02 May 2024 15:24:04 +0000
ROA not before:           Thu 02 May 2024 15:24:04 +0000
ROA not after:            Wed 31 Jul 2024 15:24:04 +0000
asID:                     21949
IP address blocks:        66.207.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:90:08:9b:6e:c6:4a:08:1c:84:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: May  2 15:24:04 2024 GMT
            Not After : Jul 31 15:24:04 2024 GMT
        Subject: CN=63391481-da3c-4f37-adc9-4ca6b0f8bdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:bc:33:d6:52:47:d0:b9:ab:58:7e:a5:2b:
                    87:aa:3a:bf:c2:66:d8:fb:ce:c6:0d:1d:5f:c7:fb:
                    ae:5e:83:e1:83:49:2a:60:f4:85:ae:b0:49:e8:d9:
                    79:6a:f8:24:58:f2:3d:bc:a2:c0:7e:83:3b:9c:b8:
                    69:55:cd:6d:69:90:19:6e:a8:de:d4:99:b1:15:7a:
                    03:11:8f:b3:59:b5:e2:4f:22:43:32:20:72:fa:c1:
                    35:8e:a1:cd:0f:09:a5:cb:80:3a:82:03:6f:1d:74:
                    a9:75:e9:90:37:d4:82:33:4c:70:16:22:8b:68:f6:
                    55:b2:71:ab:85:a6:d3:03:78:f4:b3:13:48:5b:57:
                    0e:b9:e0:7b:3a:ea:c3:26:c8:a5:11:52:09:66:d2:
                    bc:b3:a1:a6:a2:e8:70:96:29:e1:1f:86:7c:27:3c:
                    30:3b:4b:3a:df:40:5f:cc:be:0e:f9:6b:03:59:00:
                    74:14:46:02:22:21:f5:ad:21:7b:c4:87:71:c1:99:
                    27:5c:d8:f5:58:8b:a1:8d:ac:26:8b:b3:da:88:9f:
                    1d:a8:df:30:14:1c:a6:b5:61:5f:cb:36:a2:a7:29:
                    ff:05:ab:8b:0a:11:4c:07:8f:a9:06:d1:ff:e6:43:
                    07:d2:9a:2d:95:ca:64:85:09:16:d1:c5:4f:e9:5c:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D4:BF:A5:30:9C:F4:74:68:31:71:B2:6B:55:54:43:BC:11:4F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7effcafc-decd-3160-8a47-fac0462e8a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:4a:e2:85:30:6a:48:da:d8:e9:df:06:01:14:2a:bf:12:
         f5:9a:86:47:48:b1:e0:db:0a:34:48:69:1c:4b:fd:c0:53:b1:
         e9:5b:e9:1b:99:05:c0:31:6a:24:7e:5f:3e:dc:6f:c2:3c:cd:
         37:fe:37:47:6d:56:2e:93:e4:5d:f3:49:73:7d:25:19:5a:52:
         09:47:cd:2e:a4:e2:af:4b:fe:b3:7b:ce:f8:6e:7c:b0:ae:f8:
         b6:30:91:47:86:14:d1:4b:e7:84:b1:5c:7a:46:27:62:0d:61:
         08:df:28:2d:26:9e:69:d0:78:ff:7f:70:2b:25:9b:ca:53:32:
         e3:53:1a:66:4c:d5:12:7b:10:00:38:df:cb:1c:2e:39:cd:cc:
         2e:e5:9d:5e:5f:2f:52:01:39:c2:e1:e6:91:bd:c9:16:0d:6d:
         a6:c8:eb:45:e4:e1:7c:9b:37:53:16:04:63:37:b9:65:fa:40:
         18:3c:e8:4f:d8:20:8b:44:06:c2:4b:f0:1f:05:bb:3c:8f:19:
         63:0c:6d:f9:c4:d0:d7:33:9e:49:4c:78:52:cb:80:04:8f:2d:
         ff:f1:4f:49:5c:cf:9e:a1:c2:b1:a8:c0:25:c1:cc:7c:d4:16:
         25:5e:47:f8:a9:90:16:b0:06:aa:21:b3:e6:37:76:e2:50:98:
         13:dc:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:24 2024 by rpki-client on console-ams.rpki-client.org