Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa
File:                     7d7dc10a-737a-3507-8608-457a37bc28a2.roa (raw, json)
Hash identifier:          v2dbSXmvZwYKRb85b2zeBfZXwAjeLIo3cPUITiUdfpQ=
Subject key identifier:   34:BB:42:A6:FB:FB:4C:7B:DF:55:6D:C2:B0:D6:D1:7D:B6:8E:1D:BB
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F43285847CA3F82884950A4FF5A349900
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     23525
IP address blocks:        66.152.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:82:88:49:50:a4:ff:5a:34:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=07a6e468-a3c5-41c6-96ea-f9cec397413d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:48:af:c9:85:a5:73:74:71:0f:91:05:9f:
                    d0:14:6b:7d:99:76:ee:dc:3d:d7:29:06:01:f1:4e:
                    12:36:a4:5c:b4:ec:33:39:c4:dc:a6:fb:3d:6f:13:
                    6d:28:d6:4d:1f:6a:84:7b:22:60:64:ca:6a:dd:39:
                    09:22:48:a2:40:6d:6c:5b:43:ff:c6:31:1a:b9:87:
                    cf:a6:3c:cb:60:77:7a:6c:f7:32:2b:d1:a5:30:cc:
                    19:63:c7:fd:a1:ea:c8:4a:aa:63:b4:85:b8:98:3b:
                    99:68:0f:0b:27:93:c1:60:f1:6a:78:80:2d:ec:40:
                    63:ec:98:ec:9b:4d:56:09:b8:ff:ab:f9:76:4c:66:
                    a9:ff:a7:98:4e:37:d3:35:b7:03:6d:99:4d:23:c4:
                    e8:4a:a3:52:df:53:a4:3c:8c:9a:a6:27:5a:b2:72:
                    d6:ec:13:57:2c:b4:d5:e9:7e:84:06:c9:b3:09:26:
                    ac:85:56:8e:b8:57:00:0c:5c:c8:6f:00:eb:9e:1f:
                    d8:09:bc:79:d0:00:ae:98:d7:cc:07:bc:06:e7:0e:
                    00:2b:07:35:3f:e0:73:7b:39:8e:b3:1f:88:87:e7:
                    f2:ea:82:b1:cf:1c:63:d1:b2:e5:f0:a1:c6:e4:24:
                    e2:6f:4b:29:45:e8:f0:69:5c:cf:ba:56:ee:42:11:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:42:A6:FB:FB:4C:7B:DF:55:6D:C2:B0:D6:D1:7D:B6:8E:1D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:04:c6:b8:e8:e5:ae:b4:cf:f6:4c:de:3a:ad:5f:b7:7f:
         97:30:fc:fb:dd:3f:7b:cf:26:2e:49:62:c2:f8:fc:18:8e:0e:
         9e:35:8c:ea:99:35:13:af:92:f0:b2:ef:75:d2:48:c7:4e:c2:
         1b:43:7f:a1:70:d9:17:21:5d:14:46:6a:2b:ed:56:bf:a3:c3:
         37:64:c4:9e:4e:e6:93:fd:3e:57:b0:cc:b5:7b:22:5a:25:97:
         9f:ab:1f:ec:15:2a:fb:89:fe:ab:13:d3:8c:24:03:d5:fb:19:
         38:19:54:00:a2:00:6b:ab:0b:79:9d:64:30:2e:b3:ef:f7:a3:
         58:42:75:d0:f6:d8:01:f4:11:da:e6:5e:3e:74:98:e3:81:7c:
         6c:3a:dc:af:98:4b:ac:86:26:0b:5f:61:25:3f:cc:47:64:85:
         af:c5:43:ce:5e:42:8f:82:5d:1f:ba:a3:ba:75:f6:2f:81:ff:
         93:9b:93:f7:68:21:e5:79:fa:61:33:52:76:97:0a:7d:5d:0e:
         44:fe:e9:2b:ab:9f:2a:e4:67:a0:9d:19:4d:a1:e7:48:60:9f:
         b1:c9:ec:b0:ce:4b:00:08:df:f3:d8:3b:b3:df:2f:5d:04:27:
         70:25:d8:31:81:78:f4:7f:b9:2e:ab:97:70:ec:11:e2:b1:52:
         44:4a:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:23 2024 by rpki-client on console-fra.rpki-client.org