Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d6762437-7c75-3adc-aeda-ae84b9be1dac.roa
File:                     d6762437-7c75-3adc-aeda-ae84b9be1dac.roa (raw, json)
Hash identifier:          b91ou15YPxWFIZWX7KTB0kqb7AqZI94ioS5imzZ+PNk=
Subject key identifier:   63:9C:FA:48:53:DA:35:E3:D4:B0:C9:B6:BC:EE:86:D7:B5:F9:02:9B
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285845A428D50DC12DF3086B1F0C00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d6762437-7c75-3adc-aeda-ae84b9be1dac.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     23115
IP address blocks:        66.161.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d5:0d:c1:2d:f3:08:6b:1f:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=f4dc964d-3181-4f44-966c-7e8762fad312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:30:78:0e:67:25:18:28:14:4b:b5:2c:50:
                    d8:a7:ae:fa:02:c5:bc:26:06:84:53:4e:d1:a0:2e:
                    ef:c4:60:23:d8:10:e9:16:34:86:7b:92:b5:2c:54:
                    8d:a9:0a:ab:63:09:0e:f4:e0:73:43:c6:23:7c:91:
                    93:4e:b7:b6:93:e9:28:7b:ba:80:a4:bc:45:f6:9a:
                    b2:3f:83:2e:3b:52:89:de:e8:c3:f2:3f:25:e8:5b:
                    21:e5:a3:5f:ce:c6:7a:a5:70:22:94:4c:ed:45:f9:
                    39:fd:9b:f0:94:58:bc:c4:ab:01:fe:64:e0:02:ec:
                    d5:07:b6:0f:95:69:dc:e8:38:4b:97:9d:f7:7f:3a:
                    23:01:97:7d:1c:fe:3b:54:1f:fe:b3:fa:0d:d0:fb:
                    44:65:a7:b6:8b:9b:3d:03:19:93:b7:88:45:70:aa:
                    ec:fc:53:99:15:66:e0:67:52:4a:9a:26:44:f2:60:
                    57:02:d5:72:b3:f9:c1:db:e9:63:8f:66:d3:0f:44:
                    d8:02:68:ad:9c:ea:d8:13:40:00:99:70:5b:a5:fb:
                    1d:66:77:5f:3b:24:32:68:67:8b:d7:b4:e4:3b:bd:
                    ba:0e:bc:57:2c:e1:fe:d3:21:1b:8b:2b:f6:31:2b:
                    b0:01:54:ae:a3:1b:86:99:73:b8:7d:47:2b:7a:40:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9C:FA:48:53:DA:35:E3:D4:B0:C9:B6:BC:EE:86:D7:B5:F9:02:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/d6762437-7c75-3adc-aeda-ae84b9be1dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.161.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d3:88:f8:ed:a5:97:f0:a8:28:66:8a:35:1e:59:95:91:26:
         97:ad:11:ac:6e:c1:bf:d8:ff:1c:68:2a:e9:20:ca:46:0d:5b:
         30:e7:7e:00:55:e1:ef:4e:f8:86:d0:e2:3e:b0:b9:fe:ee:8e:
         d1:a9:50:5c:7f:5e:13:5a:be:8f:32:16:78:f7:2e:90:aa:85:
         5f:50:b7:e6:bf:48:4e:bd:75:a2:bd:12:c0:f2:dc:d5:cf:76:
         f7:c0:82:34:39:9d:95:8f:49:82:11:84:03:f5:59:96:c9:0c:
         b0:8c:37:30:58:40:b5:21:8d:f9:fe:87:aa:d8:e9:55:55:8c:
         4c:79:db:42:5d:30:02:1a:50:f9:2f:ed:91:2c:af:06:5f:6b:
         3c:d2:e0:f2:62:3c:f3:bc:53:cf:6b:c7:0c:54:d7:df:40:02:
         f9:cb:58:7f:db:5b:5a:ac:07:c5:76:61:89:d1:7c:6d:b2:33:
         a2:ed:43:c5:79:6b:fe:a8:65:bf:1c:d4:92:84:74:2c:56:eb:
         13:ac:9e:9c:f2:eb:40:2e:a7:09:bf:5a:e8:1d:de:8e:5d:3e:
         76:bb:92:34:2f:3c:57:af:66:f5:32:8f:b5:7b:d6:c9:d0:8d:
         ec:0c:22:4a:96:0e:ab:bd:ce:37:be:8c:17:90:47:6f:cd:75:
         35:ff:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:28 2024 by rpki-client on console-ams.rpki-client.org