Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa
File:                     0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa (raw, json)
Hash identifier:          kaHYQOc5W2dExp8J138c6r+etQzzy0755j2wsWABLv4=
Subject key identifier:   ED:87:D4:77:56:BF:70:75:4B:61:56:9C:23:1F:06:1F:6A:9C:EB:B6
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F432858457D1338D1CF14733D904B9500
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     6181
IP address blocks:        66.42.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:38:d1:cf:14:73:3d:90:4b:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=3602b915-a100-41bb-832e-8e379876e505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:ee:5a:f8:c6:bc:14:aa:15:35:ab:61:3d:
                    92:48:4e:da:98:a6:b1:66:23:11:cf:21:78:ba:ad:
                    a3:e9:25:91:d3:3f:9e:c0:2c:07:49:5f:31:8c:9f:
                    06:a6:00:a2:97:33:5f:93:44:1d:b8:cf:29:fb:07:
                    7b:cb:9e:28:f8:eb:21:9b:7b:4c:8d:8f:48:c8:68:
                    94:3e:2f:f9:cc:d3:da:8f:df:d9:43:94:cc:62:7b:
                    06:b6:fd:69:fe:03:88:b3:c8:d3:fd:d6:ca:d6:d4:
                    89:e2:d2:d7:f0:d4:27:cd:c5:dc:ee:23:8d:ac:f1:
                    a4:8f:2a:61:8a:47:f2:69:26:85:9c:07:02:e1:6b:
                    76:3d:7e:42:e2:a0:a5:df:af:9f:00:61:b6:47:a5:
                    0d:99:9b:e3:2b:ff:50:21:af:93:e4:aa:db:a3:4e:
                    05:7f:a2:aa:1c:4e:59:fa:17:4b:f8:d6:90:54:fe:
                    6a:4a:53:64:12:67:b4:59:6c:d6:90:fa:fb:a0:9a:
                    09:0b:f7:84:a5:f3:1a:6e:b8:0a:ce:46:78:c9:37:
                    43:e4:59:1b:a1:96:9d:a0:14:5f:45:c6:ea:2f:67:
                    66:c0:89:54:55:6c:ac:3d:9b:0d:19:a7:51:d6:a1:
                    96:08:51:d8:63:c6:ed:b6:9a:0b:42:b4:78:e3:9c:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:D4:77:56:BF:70:75:4B:61:56:9C:23:1F:06:1F:6A:9C:EB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.42.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:ac:27:42:66:b6:93:c2:c9:b3:89:4a:d8:c1:58:c3:ab:
         c7:3d:87:ee:d2:f9:5f:9a:a8:60:90:04:fa:cb:ae:f6:01:20:
         dc:fb:00:d7:72:22:0c:00:ab:29:8a:c5:da:8e:13:e7:23:89:
         b6:08:ba:50:ae:76:10:af:af:7e:e2:30:e4:ed:a5:6f:76:dd:
         f4:58:8e:ee:71:8b:91:5f:7b:3f:0f:06:1d:65:1a:8c:c8:bf:
         59:af:41:6e:b4:27:68:48:43:57:5f:d2:a8:90:d5:14:40:03:
         df:35:ca:f6:14:a2:41:69:1f:88:93:9d:d9:e7:98:4f:a9:ef:
         9e:65:6f:83:5b:4e:f2:22:18:82:cd:a1:50:14:85:21:72:ac:
         58:2b:e0:ea:20:b6:48:70:a9:68:08:c7:37:cf:d3:d8:29:9d:
         67:cd:a0:c1:99:33:59:4c:21:8c:84:7a:86:4c:b8:07:c9:52:
         a6:09:95:58:d8:0b:02:ed:e7:c0:da:98:cb:e4:4c:e6:0b:cf:
         dd:77:ec:9e:a1:95:ab:96:25:86:53:33:4e:73:cb:0b:99:14:
         5c:94:ef:78:7d:e4:2f:f6:c9:4e:d6:8e:4e:e9:3c:dc:52:ba:
         e2:31:67:0a:7c:bb:b1:7d:ea:da:c6:21:0b:35:4d:13:77:78:
         e4:75:41:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:08 2024 by rpki-client on console-fra.rpki-client.org