Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0d2b0c-cf8c-3471-b154-d5b4143773ee.roa
File:                     8d0d2b0c-cf8c-3471-b154-d5b4143773ee.roa (raw, json)
Hash identifier:          9Cc6bwyUj17HM53r49PElVIm7uoJb1pgJWEpEWfhpn0=
Subject key identifier:   B5:CC:4F:97:B9:06:7C:FA:57:DB:BA:D7:9C:03:62:B8:09:DD:0F:89
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F154F8C31D0F51CD57EEC558
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0d2b0c-cf8c-3471-b154-d5b4143773ee.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        66.184.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:54:f8:c3:1d:0f:51:cd:57:ee:c5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=d390180e-37f2-4ab0-bed7-434c1a4626f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:83:19:39:08:27:1c:d1:66:d4:43:51:16:
                    bd:5e:8b:87:47:15:0e:d7:11:a8:e9:86:ed:89:12:
                    7e:19:33:82:27:93:8e:c2:fa:7d:51:00:c0:4c:1d:
                    ac:e3:2f:73:73:83:5d:46:66:cd:e4:fe:77:3f:d1:
                    0e:a9:2c:ec:5d:48:84:2a:9d:ed:22:84:da:c6:5a:
                    18:94:f4:ad:19:e7:f7:35:e6:bc:1a:fd:6c:20:c0:
                    8a:a2:fb:0e:bd:bf:fa:18:db:2f:96:7d:4c:40:cd:
                    9c:7f:f1:58:e3:f1:97:97:e8:d6:d9:f8:3a:dd:39:
                    1a:b6:ba:05:b8:1d:1a:1f:00:e1:88:bb:3f:74:73:
                    22:65:91:5b:f9:d1:a5:9b:78:90:92:b0:78:b2:49:
                    2d:88:e9:02:64:44:1b:9b:9a:6d:04:63:73:fa:3f:
                    8d:b0:27:9a:a7:b4:d3:9a:e1:b7:b8:ee:2a:51:f2:
                    28:58:3e:ac:18:8f:47:fc:71:73:ec:f6:9f:ed:07:
                    4f:bf:1f:c4:a9:d2:f1:e4:6f:a6:76:24:dd:24:a9:
                    87:c0:02:2c:32:df:36:5a:5b:44:95:2a:a3:ec:61:
                    45:91:97:aa:ec:b1:ad:34:5f:d1:fd:0d:88:e6:d7:
                    f8:0d:d9:7a:e7:03:6d:2b:25:fd:48:3c:93:65:0b:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CC:4F:97:B9:06:7C:FA:57:DB:BA:D7:9C:03:62:B8:09:DD:0F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0d2b0c-cf8c-3471-b154-d5b4143773ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.184.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:85:64:8c:95:2f:25:be:ce:21:d9:2b:34:fe:35:1f:97:9d:
         00:76:f1:a0:a7:65:53:69:52:67:2a:31:e6:46:24:7a:6b:47:
         d6:5b:e6:c1:05:bb:a7:b5:0f:31:03:3a:bd:95:3d:35:9a:b5:
         34:70:0b:60:d9:8d:00:78:fe:0a:ab:53:ac:ce:89:98:92:a6:
         fe:81:c8:40:4a:c8:24:b0:22:6d:30:f9:a3:06:f3:d1:2e:1a:
         b1:66:4c:4d:cc:cb:d4:b8:2c:ce:d3:ed:83:7b:df:d4:70:f5:
         2a:07:5e:08:24:d9:bf:fc:c6:5d:94:6b:5d:81:df:9c:f2:ed:
         66:ae:8a:a8:a6:ff:18:59:b0:c7:f3:60:b4:04:f2:18:f8:2d:
         1e:32:5c:2e:8d:cc:db:a9:09:b7:29:14:36:27:af:15:e7:b6:
         4e:9c:a3:a5:2b:3f:24:7d:e3:dc:de:d6:f0:90:25:97:4e:fa:
         24:11:8c:fd:26:2b:f4:d7:0f:64:1d:d8:70:2d:94:00:83:f9:
         be:f1:a2:d3:00:20:5a:3e:81:b2:f6:eb:5b:35:0a:75:49:2c:
         28:c2:d1:40:78:9b:17:ea:35:c4:27:3f:c8:82:61:63:a8:9b:
         b9:e2:4f:a7:bd:e9:21:a9:a4:61:07:51:fa:6c:b7:af:ed:09:
         b5:5f:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:06:11 2024 by rpki-client on console-fra.rpki-client.org