Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa
File:                     6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa (raw, json)
Hash identifier:          GJuuUbNgTLXmxImu/5n2lZM8YL+CgV1StNWnLekWXpo=
Subject key identifier:   56:3C:23:03:D0:BE:A4:21:51:B4:CE:C0:A8:5A:69:85:02:63:1D:6C
Certificate issuer:       /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Certificate serial:       010D0C9F432858473D25DD0A9666B5CA1E3D6080
Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        66.33.34.0/24 maxlen: 24
                          66.33.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:dd:0a:96:66:b5:ca:1e:3d:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=04805001-a031-4cef-922a-8c57d393d838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:97:76:6b:3e:91:0d:bf:e6:0c:77:1b:71:ff:
                    99:ab:62:24:c1:db:35:c4:0c:4e:59:91:c2:99:94:
                    bd:c6:f2:55:da:e2:4f:2a:df:35:19:bd:f4:78:9a:
                    ab:35:d4:49:e2:75:e1:a2:0a:a2:a1:7d:ce:f7:d9:
                    b5:2b:6b:09:87:95:85:e5:25:16:bd:5d:dc:fc:cb:
                    55:92:55:19:09:a0:93:0c:f6:7b:15:53:74:28:f0:
                    f3:87:b1:9a:e5:cf:d2:84:6b:ca:6d:c8:e8:51:e6:
                    c1:ec:90:34:cd:64:cc:48:b1:61:ef:13:90:b0:9d:
                    e8:6b:fd:d4:c0:97:31:02:29:e8:6a:e4:07:f1:61:
                    76:2f:2b:d8:4e:d0:26:60:1b:be:a4:95:9d:a2:df:
                    87:69:58:19:3e:35:09:1a:b6:7c:39:e8:33:2d:b2:
                    c1:b6:67:d5:b1:90:91:20:20:b1:53:a4:c0:c3:d8:
                    7c:2b:5b:34:21:7b:64:98:da:53:b3:a8:4e:17:a7:
                    eb:61:ab:2a:49:b5:64:39:74:5e:b4:95:0e:46:44:
                    62:55:cf:16:4c:5c:af:a4:b2:37:96:9f:ab:76:67:
                    62:1f:eb:e1:34:e0:f8:5b:47:bc:5b:f1:dd:5d:de:
                    e9:6c:1b:3e:23:dc:f6:7a:64:de:d9:90:d1:3c:43:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3C:23:03:D0:BE:A4:21:51:B4:CE:C0:A8:5A:69:85:02:63:1D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/6c91a7dc-b329-3ac6-bb84-10549bf3d44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:d9:ab:66:6d:4c:5c:ff:7c:1d:b5:b6:7b:9e:9f:da:e0:
         17:89:db:70:4a:93:a8:77:5b:52:75:f9:21:9d:95:87:67:00:
         65:59:67:8a:79:91:ad:3e:65:bc:a4:ee:b5:f8:93:f8:9f:e3:
         d7:f2:ae:c4:ba:ba:8f:3c:75:4c:47:16:91:19:4b:fa:f0:0c:
         c8:70:3c:d4:22:95:d5:76:fb:94:af:f0:73:50:0e:8c:68:63:
         c1:08:53:ec:1c:9a:ba:1b:2b:02:df:46:b1:23:77:b4:fb:10:
         25:68:1b:db:3b:8f:11:83:af:48:f6:a7:a5:5d:4f:c1:d8:78:
         97:c4:0d:ed:d1:56:ef:7d:2a:f5:47:ed:10:e9:29:c3:15:99:
         d0:3f:5e:10:ec:c8:d0:f2:53:d7:94:b5:25:18:f7:a4:37:8c:
         70:24:9f:c2:39:7a:fd:93:ed:99:cd:3a:8a:0d:89:cd:d5:76:
         6a:65:33:58:ce:a5:53:c6:ec:e0:7b:a0:b9:3a:24:fb:f3:e5:
         e7:cc:2e:b8:0e:ce:e8:19:37:d0:a0:cd:03:6f:4e:09:28:07:
         b6:05:2c:43:78:ff:23:9d:9a:eb:78:61:f5:58:ad:ef:f7:cf:
         df:68:83:99:24:b4:0a:d7:38:6f:ad:bb:32:86:6c:76:ea:8e:
         5b:91:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:14:09 2024 by rpki-client on console-fra.rpki-client.org