Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/493092a8-37e7-3600-a267-48e17c0aa38d.roa
File:                     493092a8-37e7-3600-a267-48e17c0aa38d.roa (raw, json)
Hash identifier:          AxCN6wlSjNYPLK3nzLraccZ/NN05PYwugMK1RTmV+tE=
Subject key identifier:   11:2A:29:65:58:DA:87:D5:A7:F0:6F:EB:FC:D4:AD:0B:C3:99:09:59
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DE927E11E805BE9639840
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/493092a8-37e7-3600-a267-48e17c0aa38d.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     21570
IP address blocks:        66.46.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e9:27:e1:1e:80:5b:e9:63:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=ed0903c8-888e-47f9-80fe-a4e587442046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f9:32:cb:47:15:17:cd:db:9a:8c:60:ca:50:
                    9b:2b:71:d8:f6:93:f4:1b:50:e2:58:3c:f1:5c:2e:
                    fd:6c:48:e9:37:27:5d:47:e9:7b:ea:85:ca:9c:c1:
                    86:42:ee:cb:6e:ed:22:f8:46:6f:58:11:85:7f:c7:
                    e1:fc:cf:7c:4f:c3:b3:b3:d1:63:46:27:29:15:91:
                    c3:38:d9:dc:19:ef:9f:87:04:c9:56:e6:1b:61:34:
                    5b:28:4d:9e:f0:4c:3d:1d:f7:eb:fc:52:dc:71:6c:
                    97:23:a1:1b:d4:f6:d8:a5:9e:fe:fa:aa:37:d2:1e:
                    6a:e5:9e:70:ad:1b:4e:67:7a:69:a2:d9:8b:ca:6e:
                    ff:46:5e:30:7b:f4:c8:04:8f:b1:6f:67:05:17:8d:
                    11:56:ad:57:b0:9e:70:58:3c:43:10:c1:6f:d2:bf:
                    33:de:fe:f9:a7:41:60:97:b0:eb:49:16:b0:91:35:
                    62:21:05:56:c0:19:72:7b:4c:bf:12:dd:36:29:2f:
                    33:78:d1:13:c2:52:ac:63:24:7b:d5:95:ea:d2:b0:
                    61:93:4e:c6:43:f2:d9:21:cd:30:ac:ff:f3:f4:32:
                    e1:89:0f:77:35:91:7d:52:fb:71:69:b9:18:f3:1e:
                    71:d7:57:e0:09:40:14:d4:cc:e9:41:65:19:cc:54:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2A:29:65:58:DA:87:D5:A7:F0:6F:EB:FC:D4:AD:0B:C3:99:09:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/493092a8-37e7-3600-a267-48e17c0aa38d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:25:dd:d1:1f:7d:98:d5:6f:51:04:e9:96:b5:c2:ae:3e:24:
         1f:ed:a7:21:a7:d6:05:7d:c9:b3:df:62:e8:3b:65:34:1e:e6:
         fc:56:03:17:b0:bf:cd:8c:72:73:e6:54:79:77:16:86:39:75:
         19:1c:b9:f2:c0:0c:43:47:02:b2:15:86:be:46:6d:f9:67:5f:
         ae:78:68:9a:05:c2:1c:6b:a3:e4:c1:60:7b:53:dd:d1:ef:7b:
         93:63:5a:bd:a4:95:e9:e4:12:f2:48:c0:1a:35:80:b7:26:2a:
         ab:1c:dd:37:b6:0f:6f:51:65:4e:1d:70:05:ba:3c:08:81:f2:
         54:0d:83:31:4a:fd:a0:fa:e8:c6:f8:27:0d:00:52:49:73:15:
         49:19:ec:3b:85:32:40:70:e0:bf:b7:59:44:5e:a5:67:91:5d:
         1f:bb:90:65:3f:50:bf:6e:a8:17:07:a2:ea:d4:17:15:32:92:
         94:25:fe:5b:d6:8d:56:7e:65:c2:53:2e:17:ec:43:70:4c:49:
         e5:c9:8c:dd:23:37:cf:81:1b:6e:5f:56:48:1f:2b:b8:09:62:
         7e:ae:95:59:c6:81:96:d1:d8:35:06:78:bd:6b:e4:35:55:e2:
         b0:5a:55:ef:8a:47:88:c8:c3:da:dd:8b:6e:99:dc:f1:96:1c:
         42:b2:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:33:31 2024 by rpki-client on console-fra.rpki-client.org