Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa
File:                     2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa (raw, json)
Hash identifier:          7fnjF3E6qMxBObK8Iithm4FcypjIv6tpbzL/GlSzwl0=
Subject key identifier:   BD:99:96:58:90:E5:02:3D:19:D5:15:58:42:0F:4B:C3:3E:66:E0:6E
Certificate issuer:       /CN=283c33f6-719a-4205-86d9-7cf90d013622
Certificate serial:       010D0C9F432858452AB7DC9EF8E8D96C9581A120
Authority key identifier: 43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     399992
IP address blocks:        66.118.58.0/24 maxlen: 24
                          2620:9b:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:dc:9e:f8:e8:d9:6c:95:81:a1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283c33f6-719a-4205-86d9-7cf90d013622
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=3348e135-4e48-4b23-a2ae-a6fcbd1e0b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:93:96:b3:5b:6b:e4:dc:b9:42:00:70:ad:79:
                    ef:c7:9f:2c:d7:4a:7e:3c:46:b2:53:4b:ff:2b:81:
                    99:eb:c8:30:49:b1:d3:e5:16:9f:0a:15:dc:ad:e6:
                    8f:a0:6d:0d:ca:ab:6d:72:5e:18:74:fc:0c:6b:56:
                    cd:e3:cb:84:da:ef:19:6b:00:73:a6:f8:ac:cd:2b:
                    97:82:7d:12:e6:99:ef:f2:d1:09:90:4d:3f:b5:4f:
                    db:3b:80:f7:de:88:26:ea:60:df:4a:98:ac:57:0a:
                    ee:08:69:2b:a2:9e:35:be:f6:70:15:44:aa:4c:3f:
                    94:44:c3:c6:64:59:e9:c9:59:f2:bd:19:91:c7:ce:
                    52:9d:b5:6d:fe:83:0d:fb:7e:ba:c0:aa:19:0c:49:
                    4b:de:cc:2a:b0:66:a2:67:05:1c:f2:bd:fd:30:b0:
                    6d:3e:8c:af:99:8a:c4:e3:7c:b6:ae:8a:4a:d0:98:
                    75:4e:85:1a:da:b2:d3:ab:10:56:dc:d8:7d:6d:20:
                    3a:5a:5c:7f:f3:f8:86:a9:b3:bf:c9:cd:2e:1b:87:
                    c1:b7:3b:bb:63:7d:40:69:a5:fb:19:39:61:6c:05:
                    f0:c8:7c:2f:6a:54:04:20:d0:5f:55:4d:6e:1d:97:
                    a7:dc:fb:ba:64:a1:ef:11:21:40:9d:19:0c:17:2d:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:99:96:58:90:E5:02:3D:19:D5:15:58:42:0F:4B:C3:3E:66:E0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl

            X509v3 Authority Key Identifier:
                keyid:43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.58.0/24
                IPv6:
                  2620:9b:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:d1:73:fb:f3:e4:3c:66:90:72:87:67:1c:23:cc:84:b1:
         0e:02:75:ad:21:88:79:ca:e2:29:c8:bb:57:9f:e5:74:a2:24:
         35:7c:ff:cf:6a:61:05:a0:49:30:b7:7f:21:51:e8:2b:a1:73:
         d0:73:d0:74:59:32:49:85:7e:75:d2:1f:14:5b:81:a1:01:15:
         eb:89:1f:d1:78:71:21:23:2b:30:8c:37:dd:b4:3b:e2:30:12:
         df:b5:76:09:0d:d8:36:28:15:11:e6:ec:e9:87:04:1f:6e:b2:
         9c:0f:05:1b:8e:87:36:12:19:90:68:81:ae:da:5f:6d:88:c5:
         63:99:df:2d:0a:c4:7f:d8:f7:07:af:b7:98:2a:de:6e:82:c4:
         ff:b9:35:f6:c6:a1:a3:2f:49:4e:65:78:bc:17:73:4e:88:6c:
         3d:a6:78:45:87:05:1b:31:6e:fc:55:72:25:c8:d4:04:98:4a:
         cc:78:9a:77:bb:84:5e:3f:c8:71:8d:94:a5:90:2e:26:0b:5f:
         82:b7:0b:e4:ca:09:ea:b9:8b:83:d2:4f:2e:15:37:25:df:a8:
         56:e2:52:a0:4f:56:7e:2e:d9:fe:5b:af:6f:8e:ce:5f:61:91:
         5e:8c:81:91:39:5e:f9:03:e4:b8:08:ea:55:46:3e:69:4b:27:
         53:af:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:26:11 2024 by rpki-client on console-ams.rpki-client.org