Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0a5d2846-cd8e-3fc9-9ee1-ef0ac25f8206.roa
File:                     0a5d2846-cd8e-3fc9-9ee1-ef0ac25f8206.roa (raw, json)
Hash identifier:          2xpFgxVUqKL6GfwxjhrB8HRwMsSLpCaDPVWzUtqj9yg=
Subject key identifier:   B8:97:B9:B3:9B:AB:44:CC:A3:8A:DA:B4:73:B9:BA:CD:6A:DC:0F:DF
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE9837D3CAA9D23D42840
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0a5d2846-cd8e-3fc9-9ee1-ef0ac25f8206.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        66.46.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e9:83:7d:3c:aa:9d:23:d4:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=0fbe502f-4646-43f8-ba6f-7f3f280d52a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:31:ea:86:ce:af:06:32:50:c0:1d:ad:22:
                    09:11:9a:11:d8:22:78:4c:37:a6:b5:1c:0d:3e:b3:
                    40:6b:1d:7d:a1:61:2f:22:ab:e0:17:18:f9:83:a4:
                    98:dd:4d:d8:58:1c:52:3e:8b:47:15:77:88:be:66:
                    49:b3:38:93:92:3d:b8:07:1d:a1:51:2e:41:9c:cc:
                    9d:cd:7c:e6:9e:61:6d:f3:0a:88:b5:bf:84:fe:c6:
                    4c:f3:d6:ec:66:8e:fc:db:a1:50:c8:f5:5a:6e:ef:
                    23:c8:86:34:85:33:6f:c7:0e:e2:23:49:d9:d7:30:
                    cf:d8:db:83:f7:8c:7f:1f:25:9f:91:e2:4f:b5:75:
                    16:08:b4:8c:b0:3c:ea:d2:a3:8d:c7:70:df:e0:29:
                    79:b9:0f:46:75:63:e7:7b:35:07:2d:85:bd:c3:8e:
                    15:ea:cd:34:e1:2c:b6:3b:85:ed:5d:7d:0d:6e:a3:
                    af:5d:0c:7a:86:dc:85:02:0a:84:86:a4:b9:75:3b:
                    e1:6b:f2:47:35:7c:cb:5c:0a:81:50:e8:8c:3f:42:
                    09:80:70:1d:f7:ed:5a:75:bc:67:af:08:ed:f4:eb:
                    84:b9:2f:1c:e9:9d:ad:fe:bd:e4:98:59:59:cb:ea:
                    5f:41:f5:86:9f:43:9e:df:e8:82:30:fc:cb:2d:f2:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:B9:B3:9B:AB:44:CC:A3:8A:DA:B4:73:B9:BA:CD:6A:DC:0F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0a5d2846-cd8e-3fc9-9ee1-ef0ac25f8206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:8f:28:46:09:ec:f6:fd:e3:e3:a9:22:a1:fa:5f:07:18:
         db:16:49:e2:48:8f:26:ef:b4:ab:b4:92:72:4b:e9:ac:28:fe:
         a6:8d:0c:61:68:c8:5f:e0:d7:54:07:20:45:87:4c:ad:b9:54:
         26:93:e0:4e:38:f7:27:ec:ee:3f:d1:3e:ea:ba:77:3a:0b:5a:
         a6:00:70:39:ab:6e:c0:d3:d9:7c:87:f5:f7:85:23:5d:1a:ad:
         98:77:ff:8e:c4:39:47:be:25:ed:03:0b:64:be:f2:a6:77:a5:
         47:62:6c:ac:9f:ee:f6:d2:c6:57:5d:63:70:e2:46:1e:42:5e:
         ef:a3:18:13:85:c6:91:73:e6:a7:01:2c:1b:8d:05:73:81:05:
         fe:f8:f0:db:ff:c8:1f:d5:4e:ba:e0:d5:e1:ce:01:f8:6a:b4:
         ae:9a:f9:ec:1d:d6:f4:17:81:47:fc:67:eb:ee:e7:f3:9c:a9:
         9e:7d:7e:53:b8:9e:03:4c:ef:22:03:6a:7d:be:ff:31:ce:cc:
         18:e7:a5:9a:93:4c:c5:5c:14:a6:37:bf:fb:1f:cb:ad:4b:bf:
         1b:e8:f4:43:88:4f:51:ae:5c:9c:d9:9d:dd:ca:3f:a0:4a:25:
         24:02:b5:69:46:d3:f6:ff:62:8b:9f:37:68:96:67:a2:f7:bf:
         a9:d9:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:10 2024 by rpki-client on console-ams.rpki-client.org