Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ea323994-1b2d-39f5-afc1-178e73831872.roa
File:                     ea323994-1b2d-39f5-afc1-178e73831872.roa (raw, json)
Hash identifier:          mo18sb55hzMEe4oggUB6W9/oh/vgpi1WsnYARptllJA=
Subject key identifier:   74:4F:A7:6C:D0:D4:FE:4E:53:A9:FB:48:AE:3A:DF:EF:BC:14:9B:18
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF7C9D23724AB9F390480
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ea323994-1b2d-39f5-afc1-178e73831872.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        216.123.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f7:c9:d2:37:24:ab:9f:39:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=6017a950-71c8-4032-ae8d-b69e9b1ff771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:3c:d8:e4:8f:fb:03:92:02:da:c3:86:8f:
                    fc:ac:52:a2:be:75:49:a2:b9:04:b9:64:ff:4a:1f:
                    94:8b:3b:5d:b5:04:b2:7a:4a:87:de:4a:20:6f:b5:
                    43:b4:ea:65:c1:7e:df:42:d9:27:47:28:c1:af:fc:
                    4c:85:b3:59:1e:c2:bc:f4:ed:ee:0e:ef:bc:5b:35:
                    f1:7f:9b:6d:e7:fc:74:00:79:8a:96:ec:68:43:59:
                    8b:d9:16:cd:b8:ee:f1:ba:c1:af:6c:32:3b:72:27:
                    cf:3f:69:f7:35:11:77:c4:1e:a9:7a:f2:c1:10:00:
                    86:ff:2a:02:0b:0c:85:80:41:c4:d5:55:6c:96:4d:
                    db:72:1d:f8:df:1e:7f:ed:bc:39:dc:64:22:c0:55:
                    5d:c8:d7:6d:61:42:66:42:83:45:04:d7:aa:5b:71:
                    cf:32:81:15:d8:03:26:23:47:b0:58:e5:d4:37:f3:
                    18:5e:95:54:0e:9f:a9:c7:86:44:23:9e:4d:41:a4:
                    52:24:3f:e7:e2:3a:94:a1:c3:4d:fe:26:11:62:8c:
                    c7:f2:ef:63:1d:a3:f1:07:c3:f5:b4:cf:af:7e:db:
                    98:5f:53:bb:e9:63:c1:b4:e1:7b:d9:fd:2e:14:10:
                    a6:2f:ee:4e:d8:bc:cf:46:78:d2:cd:ec:aa:8f:6f:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:A7:6C:D0:D4:FE:4E:53:A9:FB:48:AE:3A:DF:EF:BC:14:9B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/ea323994-1b2d-39f5-afc1-178e73831872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:4d:43:42:b6:01:19:0b:9d:de:42:d1:99:89:54:ab:35:
         45:81:d9:93:52:c9:b7:d5:35:3c:86:f2:c8:96:07:23:e9:f5:
         27:1f:e4:e0:58:ee:57:4c:29:57:79:a7:5c:25:ed:bd:d4:1e:
         fd:3a:9d:ff:1a:e6:c3:f8:67:99:45:56:bc:8f:e2:68:3c:02:
         a1:44:8d:db:3b:05:98:9e:35:e6:27:45:21:9c:cc:4c:ea:91:
         bf:ec:81:5c:3c:4b:bc:eb:c5:ec:b0:b3:7b:cb:52:5d:2f:6c:
         11:58:29:c4:7f:72:75:35:d4:c1:41:d0:88:15:41:3a:d8:b3:
         81:18:e1:14:7d:1b:5b:cf:5f:1b:b7:f6:a7:9a:b0:da:2b:2b:
         fb:ae:ab:9a:0e:03:e2:7a:d9:48:12:08:92:16:4c:1b:1a:9f:
         25:f3:77:b1:e2:c8:3c:ee:24:a6:9f:ea:d3:b7:9a:67:e6:b4:
         42:1a:f2:0e:5c:2b:74:99:ba:a8:83:f5:dd:51:f6:08:09:a7:
         bf:20:26:d9:f4:0b:9f:eb:dc:0e:63:dc:77:05:2e:84:23:33:
         b4:d2:12:30:a9:86:e5:9d:c8:62:48:ca:2e:2c:4e:ad:2e:71:
         c2:cf:9e:b5:3a:5b:1f:65:8e:e1:9c:36:5b:18:22:4c:e4:62:
         03:14:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:19 2024 by rpki-client on console-ams.rpki-client.org