Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ddf1f616-356b-309f-ad20-9aac2f6179c9.roa
File:                     ddf1f616-356b-309f-ad20-9aac2f6179c9.roa (raw, json)
Hash identifier:          V73JNVY5ErlSku/ETRH1Lr0hn10vpgylFNaNYPdio04=
Subject key identifier:   8F:7D:5A:C4:68:80:8B:35:8D:53:19:3A:02:43:52:90:0E:2C:B3:A3
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB81B618FDD252D88EB100
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ddf1f616-356b-309f-ad20-9aac2f6179c9.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        66.46.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:81:b6:18:fd:d2:52:d8:8e:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=51a78197-83e8-4198-b6bc-4a247e6ced69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:de:3d:ed:4d:fb:0b:fa:85:aa:71:47:98:
                    fd:de:13:57:9f:10:c0:6c:8e:1f:89:b9:54:37:b9:
                    f7:f3:61:8d:20:b1:11:1d:06:f6:86:40:68:9f:1a:
                    33:bb:17:71:ad:ef:c3:ad:a5:f4:e4:35:93:df:39:
                    e7:67:76:7a:20:d2:67:e8:98:90:a2:5a:8f:a9:8d:
                    0e:73:85:d2:10:87:2f:3e:38:06:2c:67:80:33:22:
                    aa:e6:18:d6:87:b1:c1:d1:1b:9a:25:b9:68:83:14:
                    06:dc:cd:cc:0d:27:30:75:7e:63:1e:b1:37:f7:37:
                    39:fc:e9:c4:89:23:31:84:27:68:e9:6a:24:29:fd:
                    08:f1:57:92:09:53:8c:89:f2:25:cc:c7:5d:72:79:
                    06:1b:2d:c5:13:ed:98:6d:4f:2d:4f:4b:5f:0b:ce:
                    fb:8b:a6:0d:9d:f6:6b:5d:83:d8:c9:b3:e0:d4:76:
                    d1:17:8d:b0:a0:d5:16:b9:dc:e1:f9:0c:1d:d9:ab:
                    9b:63:d9:57:a0:7e:e1:11:7f:44:ac:d1:1d:f5:ff:
                    7d:7a:b5:bc:85:93:cc:0d:10:bb:15:4f:3a:b4:e3:
                    ca:f0:1d:2e:4a:af:de:06:77:85:87:32:78:75:4b:
                    02:39:e3:ef:a7:71:25:75:b7:b9:7a:18:46:1e:5e:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7D:5A:C4:68:80:8B:35:8D:53:19:3A:02:43:52:90:0E:2C:B3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ddf1f616-356b-309f-ad20-9aac2f6179c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:55:5c:e7:60:17:f9:e0:88:d0:ac:d8:e0:cc:f4:89:cb:a6:
         32:83:bf:74:e8:d7:88:97:10:a0:d7:46:38:a5:66:e8:e8:a0:
         d7:2f:d5:6b:ad:1c:5c:bb:2a:a5:1a:98:ac:e9:67:bc:2d:ca:
         88:9f:31:95:44:48:1b:3c:2d:f2:93:e3:fc:34:31:4c:e6:10:
         39:21:f6:bf:1f:cd:c9:37:b0:52:71:c0:f8:0f:a0:a1:3e:c8:
         f9:65:7d:b3:05:f6:9c:05:81:59:a6:ea:43:08:52:8d:40:1e:
         c3:f4:53:f3:eb:a5:0a:6e:93:2b:8b:ea:cc:6d:fe:f1:ff:da:
         1e:69:59:b6:5e:d4:ef:36:22:a7:e0:78:8b:8a:e7:1e:8c:ed:
         7e:93:32:73:d8:d4:d6:a1:b3:7a:d2:a9:7e:52:b3:65:99:4f:
         a9:b5:d0:36:89:42:e9:04:16:2a:c6:63:f0:ed:6e:28:22:2c:
         6d:5b:72:71:01:78:b1:6b:06:d7:4c:cc:0e:06:09:18:f1:fa:
         03:d5:6f:20:9f:78:19:47:a6:0f:84:99:e3:11:55:1c:c3:1c:
         eb:32:3e:f6:b7:f1:19:e9:43:1f:a7:07:ea:85:00:e0:8c:fc:
         e7:27:80:b7:de:4e:7a:61:e0:69:2d:a5:94:46:22:25:03:49:
         f6:38:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:23 2024 by rpki-client on console-fra.rpki-client.org