Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa
File:                     0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa (raw, json)
Hash identifier:          lMIDZ+RDCKO6q3khOn5d8pIqacDhB5oyCc88u+5cwVM=
Subject key identifier:   E7:95:AB:C0:9D:6F:76:05:83:C9:E3:4F:BC:F4:02:34:DB:DE:6F:C9
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F432858473D2603CCA6ECDB7D105E2300
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     6181
IP address blocks:        66.42.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:03:cc:a6:ec:db:7d:10:5e:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=d46d02ba-c5a5-4380-bfd6-2ff978e35122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:e6:60:f5:1f:a6:8e:13:45:cb:c5:70:6d:
                    39:8b:7f:2c:fa:db:a4:7a:85:58:16:37:25:48:fc:
                    1f:d4:80:dc:e2:6e:04:05:b9:a7:77:6a:e7:3b:ef:
                    4d:cf:1f:00:79:b4:8e:3b:95:4d:48:91:ca:e8:ee:
                    e7:0a:dd:fd:0b:4d:b4:f4:a7:99:be:59:c6:b7:f2:
                    fe:80:df:4e:4e:c1:33:16:e0:51:28:79:26:45:c5:
                    e6:55:a2:b3:bb:34:a9:41:2a:be:0f:84:c0:c9:74:
                    cb:6d:d8:f1:61:1c:51:ea:82:5a:a4:fd:9d:55:bf:
                    fb:84:90:76:43:76:43:35:c1:5d:82:28:da:31:bc:
                    ac:11:92:f3:47:dd:ae:c1:11:c9:7b:dc:af:6d:29:
                    1b:04:53:97:3e:23:13:64:10:85:ab:2c:bf:15:35:
                    65:3d:e5:72:5b:dc:26:b9:4d:93:09:50:dd:b1:b2:
                    e4:9a:da:80:4d:bd:28:cf:6a:a5:28:18:52:eb:9e:
                    e6:fc:f8:d2:5e:1a:52:49:1e:36:4f:fc:ce:b9:7f:
                    7a:d7:40:3d:74:27:7e:75:96:3b:1c:54:bc:c3:1f:
                    17:96:de:1c:1e:e3:7d:13:21:0c:8d:14:23:62:2d:
                    1c:d9:b0:0e:00:19:77:c9:44:bc:00:92:d7:83:65:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:95:AB:C0:9D:6F:76:05:83:C9:E3:4F:BC:F4:02:34:DB:DE:6F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.42.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:9a:24:d3:8e:c9:ca:39:4f:93:1c:54:ba:8b:09:15:4e:
         22:09:f3:43:18:91:01:77:d3:d8:df:69:be:40:7a:d5:9f:61:
         56:f3:b0:1e:69:f6:d3:5e:38:4a:7f:1a:17:83:ab:d3:3e:d6:
         7c:38:9c:90:d5:a4:87:b2:2e:81:75:7b:26:bb:28:fa:2b:3b:
         67:e0:92:68:eb:51:53:06:b5:5c:0b:1b:46:4c:56:e0:ed:bc:
         ba:7e:21:e6:ea:ab:9e:67:ea:0e:03:9b:27:31:1d:0b:fb:ac:
         f9:f9:39:0a:b8:ce:77:dc:67:fd:34:b9:34:46:1b:88:a0:a3:
         e6:d0:5e:b3:60:c5:a1:b0:3e:1e:34:f2:0a:e3:26:fc:05:ba:
         db:9e:26:2f:12:f4:a1:4c:2f:30:3f:10:47:74:2b:0a:25:f8:
         7b:be:56:3b:49:6a:52:07:f0:ef:52:2c:75:96:75:50:2f:60:
         11:e0:4c:1c:ef:60:1f:c7:08:cc:51:a4:3d:e2:94:67:85:ad:
         cc:63:aa:f4:5f:e5:6e:e6:a1:9a:86:70:f2:ae:d9:ad:41:09:
         fc:f2:d4:cd:a0:e2:06:7e:29:de:07:f0:e3:ff:6c:01:3f:7e:
         55:b8:0d:be:c2:8f:eb:4d:f7:8f:fd:84:a0:ce:5a:7d:ea:3b:
         44:3a:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org