Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa
File:                     fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa (raw, json)
Hash identifier:          VV18P8k8cDOlRTG75dqDXSd6K0hQshHt4aYYGM4QI3U=
Subject key identifier:   0C:9F:2E:A9:F0:8A:03:E1:48:61:06:00:48:0E:CC:E7:9F:EE:94:11
Certificate issuer:       /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial:       010D0C9F43285845A9BE1ACFD89A4970C476B580
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     6597
IP address blocks:        66.163.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:1a:cf:d8:9a:49:70:c4:76:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=67a251c2-b533-4f18-b53c-51508db49d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:90:eb:38:6d:c7:0d:f8:2b:4a:54:87:57:
                    a3:19:8e:48:4e:34:c6:68:c9:53:8b:fe:96:e8:3f:
                    0e:5d:b6:98:21:c0:f7:eb:f5:78:89:fd:e3:b9:93:
                    fe:90:53:4b:bf:9e:1c:26:9f:61:39:ff:a1:b6:6a:
                    de:16:2a:12:27:8c:5e:aa:40:7e:b0:28:08:ac:fa:
                    4b:0e:75:20:5a:5a:be:30:da:19:81:0e:2d:4a:53:
                    0b:2c:1a:4f:6f:dd:b7:fd:b3:af:76:48:c2:41:f0:
                    63:c3:6e:f2:47:98:cf:53:ad:be:5a:90:2f:d0:8b:
                    d7:c8:70:4e:42:27:ec:a3:14:7e:d5:44:89:91:9c:
                    9e:1f:09:7e:7c:8b:fb:b3:47:a2:2c:51:63:27:fc:
                    14:f1:75:90:d6:d7:94:b9:83:c6:1a:4f:c5:88:c7:
                    0d:ab:89:37:14:42:50:91:99:8c:42:80:6f:f4:c8:
                    5a:ec:ee:6f:b9:59:d7:f0:55:b2:06:12:5e:88:7b:
                    c8:b9:86:2e:2e:2c:61:94:44:eb:ab:b8:67:07:99:
                    40:28:13:ce:a5:7a:0b:ec:34:1c:26:39:f1:01:89:
                    d1:d5:8b:b2:b1:11:a8:1c:c8:78:af:78:71:05:aa:
                    53:8b:be:66:6a:4f:c8:16:b9:da:97:d8:96:64:af:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9F:2E:A9:F0:8A:03:E1:48:61:06:00:48:0E:CC:E7:9F:EE:94:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa9646e1-fa04-3cf6-962b-dedb839a3abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl

            X509v3 Authority Key Identifier:
                keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:24:ef:70:b2:57:ca:c7:d0:e1:8c:be:9d:e5:45:37:f6:bd:
         59:1a:56:5b:35:01:ef:86:01:07:e9:bb:fd:2d:95:87:f8:21:
         8f:be:fb:02:95:89:41:3f:f6:71:30:1c:dc:77:53:d4:10:9f:
         bb:bd:9e:1f:d7:6d:cf:06:75:3b:e0:d5:10:89:64:81:4a:f9:
         9b:4a:72:6d:5c:22:6b:4d:f4:e3:3b:48:a3:a6:72:2a:65:a3:
         73:e5:a6:54:5b:53:39:fa:e2:d8:06:b7:5d:85:b0:a8:09:0c:
         a1:3a:06:33:2c:50:78:3c:6a:54:5f:04:1a:fd:f2:a3:bf:5b:
         89:3f:4f:42:e9:f6:0a:da:16:4f:c3:13:3a:c1:1c:bf:5b:b8:
         8f:91:b3:d2:2a:74:23:cc:db:33:de:3b:b8:87:87:81:22:73:
         f3:f1:d3:2f:34:04:2d:49:99:93:0d:d9:4a:92:90:e5:e0:16:
         82:be:5d:bd:db:1f:1a:bf:55:ce:0a:75:77:1c:5f:70:f4:bb:
         92:43:2f:07:8b:09:af:a0:ad:7b:95:22:79:64:71:0c:bb:fb:
         b2:95:6e:75:15:c8:31:54:81:e0:ab:ec:fa:cb:15:9f:58:ec:
         89:32:51:d1:4c:09:27:7b:d1:5a:6f:e1:63:f2:70:20:70:2e:
         a2:aa:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:31:36 2024 by rpki-client on console-ams.rpki-client.org