Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa
File:                     5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa (raw, json)
Hash identifier:          jXtXF6Sn12tk9ygyFwBKcHo3kl1sCT8eQJb8IQn4ZII=
Subject key identifier:   0E:11:52:26:57:41:A9:BC:46:48:16:38:38:53:D8:80:AF:A9:35:2E
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584589A31BC014BBAC9FDC441380
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     11693
IP address blocks:        66.216.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1b:c0:14:bb:ac:9f:dc:44:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=85bb188a-87e3-48d2-9374-62f9e2744b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:c7:c5:f6:34:9d:2c:5a:38:77:29:d0:f8:
                    27:db:a1:e0:67:38:6e:fd:01:a9:88:ec:b6:5d:91:
                    d7:cc:89:a6:60:89:5c:d9:e9:ff:07:c9:ae:d4:60:
                    27:7d:08:2f:46:1d:8a:4c:5f:87:e8:86:90:ed:38:
                    94:12:8d:09:d4:2a:82:15:9d:6c:7d:66:dd:ec:1f:
                    49:37:c3:dd:29:6a:27:3d:9d:cc:26:00:7d:33:b2:
                    ea:23:2f:d0:72:4f:5f:43:e7:aa:71:89:e8:59:64:
                    0c:d8:59:78:a8:78:fe:e9:78:82:2d:f4:4d:9b:27:
                    64:ec:8e:15:df:db:f2:f5:6e:68:ab:b9:4d:f1:27:
                    04:02:8b:0a:c5:04:84:9a:06:83:e6:36:69:3b:db:
                    64:9f:d2:24:6a:47:13:be:b3:bb:21:96:cb:b3:5b:
                    28:58:f6:c6:11:2b:5d:7e:90:4c:42:ae:f1:96:23:
                    c5:04:88:43:30:f9:78:e3:b7:70:a6:41:64:60:4a:
                    ba:05:77:7a:93:96:a8:d6:31:06:2b:be:3c:bf:02:
                    10:13:74:19:3b:19:fd:50:47:68:a0:8d:55:6b:1c:
                    ad:57:54:3e:9f:21:93:21:a9:7e:d4:53:71:6e:18:
                    e3:77:25:f7:19:e1:c1:43:e5:67:58:82:53:7f:64:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:11:52:26:57:41:A9:BC:46:48:16:38:38:53:D8:80:AF:A9:35:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5f950bc5-1472-3a0f-ab8b-9cda4316a287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:01:01:7c:ab:2b:ca:06:a8:fe:ce:21:96:b1:5e:81:a2:9c:
         5f:4c:9a:b9:7d:57:35:b6:25:dc:a9:a8:b4:38:37:5a:dc:2b:
         dd:51:7e:f8:1a:33:41:57:6c:9d:18:8c:ab:55:bd:03:a6:56:
         93:7c:f1:f9:4d:35:73:e9:79:ad:fb:b3:d1:af:d7:ce:dc:e4:
         08:fa:14:1c:3f:39:cd:2d:27:94:b4:01:7a:a0:1d:0c:06:bf:
         67:53:b8:37:16:e1:5b:17:79:fa:20:47:91:9d:6d:b5:a8:d7:
         8e:df:b0:06:86:2e:85:62:9e:83:3b:12:c0:f7:4a:1e:7b:0f:
         ce:11:b0:4f:45:98:fe:84:b9:1e:e5:f9:6b:1f:aa:e6:10:69:
         a7:65:72:b0:a8:9a:61:04:13:a2:17:14:d1:59:e8:e6:d8:74:
         db:af:92:e9:dd:bf:be:97:ee:be:c0:82:a9:b0:2d:a8:16:31:
         42:8f:ee:b3:d5:04:cb:e3:2a:e3:51:67:34:b3:2d:90:b8:d0:
         9b:4f:47:a8:e7:ab:5b:51:0f:91:44:11:86:1f:06:61:ee:ac:
         92:4e:63:2c:31:80:7c:90:f8:78:76:c0:20:72:88:d2:32:77:
         5c:16:b3:ee:70:04:61:cc:27:b2:39:0f:37:93:ec:88:5c:80:
         15:96:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 17:33:18 2024 by rpki-client on console-ams.rpki-client.org