Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/66bc8334-56b5-3188-afef-d99276881362.roa
File:                     66bc8334-56b5-3188-afef-d99276881362.roa (raw, json)
Hash identifier:          eTr5bPXaienxO/LU0p3C5dIkDOwu0/W448JadM6J7Mc=
Subject key identifier:   F8:16:F0:41:01:41:94:06:E5:C7:6C:B0:AB:04:8A:12:95:6F:99:E1
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285847E35F6985757FF915D82C7900
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/66bc8334-56b5-3188-afef-d99276881362.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     9009
IP address blocks:        45.59.26.0/24 maxlen: 24
                          172.102.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:69:85:75:7f:f9:15:d8:2c:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=feb6135e-54bf-424d-b5ef-484700b77df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:c8:05:75:19:da:90:fd:1f:72:60:e8:8d:
                    7b:c5:3e:03:ef:0a:a6:58:6b:c9:17:80:5d:99:74:
                    b2:47:92:ff:7d:12:b8:ab:b5:7f:fd:26:59:ee:c6:
                    69:ba:90:e1:d0:db:72:59:84:5a:ff:4c:36:c8:d9:
                    1c:14:12:dc:52:fd:bd:5a:0f:f8:a5:37:ba:0b:ce:
                    e0:e1:c6:ba:44:47:76:a7:90:cb:72:19:b1:40:bf:
                    a8:23:39:42:01:ad:c2:c7:b8:b9:e9:d9:7a:9f:92:
                    bf:95:4e:1f:a6:b6:41:c6:93:64:25:63:51:35:ca:
                    8e:c4:d7:ee:5d:8b:45:8a:87:89:e7:ac:c7:a4:52:
                    83:0a:b7:75:11:c7:9c:c3:5e:5b:10:ea:66:72:c9:
                    46:7a:80:60:6f:3e:75:fc:82:b4:20:c1:a1:1e:e1:
                    99:98:7f:53:c6:3f:d9:41:6a:66:36:36:13:76:71:
                    6b:87:ec:2d:e7:56:7e:b1:b9:56:31:c6:89:02:0a:
                    09:0a:f3:ac:b2:77:0c:3b:f6:18:f8:8d:c4:31:5f:
                    27:eb:37:5c:8f:f9:e0:09:bb:0a:72:c2:89:f1:75:
                    6d:c5:8d:bf:b3:ae:91:ec:91:0b:f3:d9:8d:35:14:
                    1d:d3:cb:b5:e2:e6:76:48:8f:e6:bc:24:f0:19:f7:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:F0:41:01:41:94:06:E5:C7:6C:B0:AB:04:8A:12:95:6F:99:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/66bc8334-56b5-3188-afef-d99276881362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.26.0/24
                  172.102.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:da:6b:c6:5d:71:7f:5b:3e:91:20:8a:42:a7:60:f6:5b:3c:
         fc:97:3c:10:15:ec:f2:1e:28:5c:9a:89:7a:91:90:74:a6:09:
         bd:a7:b2:63:cf:3f:34:b8:1c:b1:ad:37:e5:05:a6:e4:fb:d8:
         b8:60:ff:96:1b:e2:59:28:dd:1c:49:00:8c:a5:e7:48:f9:ee:
         33:4d:bf:d4:d9:1c:90:f2:8e:58:b8:e4:36:ea:eb:fc:39:40:
         73:49:fd:27:f3:82:36:d3:ae:35:c2:9f:9a:cb:e7:a5:e9:15:
         62:3e:f2:4e:f9:e0:82:4e:b6:9a:f4:e6:e9:f7:f2:b5:1a:58:
         36:a1:6f:54:9e:0e:88:3a:0c:fe:ec:3c:7e:ba:84:d6:0f:04:
         2a:59:d3:1d:14:3e:b0:6f:dd:d1:fc:cf:f8:3b:2b:8c:e8:ee:
         3b:21:50:2f:68:73:c0:d3:63:72:3e:8c:e3:24:23:ae:d3:33:
         06:6a:99:be:a6:3b:f7:bf:09:a4:17:4e:71:ce:98:b7:7e:c4:
         60:cc:fd:14:4d:28:47:f0:59:9d:33:49:74:e3:83:48:8b:0a:
         a7:a9:0e:9a:ea:0c:ff:bb:0b:0e:bd:f4:0e:5b:31:2a:64:b8:
         b1:2e:d9:84:a2:8a:39:ec:6a:c4:3d:9c:91:67:11:c2:b1:d4:
         24:c7:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org