Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa
File:                     7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa (raw, json)
Hash identifier:          xWYDzgkuC4BZzgl2CRSXExalzy514yWAna7LdPpzK1w=
Subject key identifier:   10:43:AF:88:14:61:99:57:1C:29:1B:48:FA:01:B3:93:C4:E7:15:6E
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F432858473A5B962B3F90B66ABF068DA0
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     25899
IP address blocks:        67.59.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:96:2b:3f:90:b6:6a:bf:06:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=e24827d4-e481-457c-b452-35efbc6182b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:76:ad:31:d6:39:30:15:db:d3:83:4a:3e:
                    52:a9:9f:f2:a0:30:9a:f0:d1:ea:4b:72:bc:d5:93:
                    56:97:f4:cc:d1:74:3d:66:66:e5:b1:46:4c:fa:e9:
                    9c:88:8c:d8:35:49:89:41:15:4d:64:e7:bb:b9:43:
                    fa:d1:92:2e:04:24:ef:5d:ed:97:b1:c0:bd:25:f3:
                    b1:4c:87:01:90:68:b3:d7:47:ad:06:79:6c:ca:f0:
                    53:f3:d1:1e:7a:13:b8:7e:bb:49:43:54:4b:df:43:
                    00:0f:f3:b6:60:6d:4b:b4:e1:75:d1:69:9b:68:90:
                    35:7d:dc:3f:5a:6b:7c:c6:cd:19:1b:16:93:6c:9b:
                    a6:ec:d4:53:2b:6b:f8:6a:b4:55:a7:ff:5e:a4:8a:
                    4b:79:1e:14:34:9a:95:29:4f:96:4e:3d:f3:61:fc:
                    56:2d:71:46:14:2c:d1:34:74:49:3a:0a:c1:e5:61:
                    ba:9c:6f:7e:6d:3c:7a:ab:ad:9b:3b:7c:ac:f0:e8:
                    be:15:41:92:48:f9:c3:72:dd:7d:47:40:c4:b3:f1:
                    b7:6d:26:f5:14:1f:cd:96:6a:48:b2:45:74:06:73:
                    a0:2b:50:ed:63:22:e7:45:52:b6:06:8a:7e:05:45:
                    20:5d:9b:9c:ae:96:81:d4:6e:f0:4c:f3:1f:ef:66:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:43:AF:88:14:61:99:57:1C:29:1B:48:FA:01:B3:93:C4:E7:15:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/7a5e3c76-62cc-3f71-9b45-ce5ef876ead4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a4:36:eb:ea:4c:4a:d3:21:33:d0:1f:76:aa:6f:10:d3:25:
         1a:2d:66:c0:e1:5e:c3:5f:7d:a3:4a:ce:d4:90:1f:23:05:e2:
         dd:1f:e5:05:78:96:42:70:48:c7:ee:8c:2a:a0:29:3c:18:bf:
         57:13:02:bb:5c:f6:df:c4:94:f1:99:ac:cb:78:37:9f:ce:90:
         5b:dd:c1:92:1a:0a:50:a2:f4:41:c9:6c:44:51:42:12:c9:4d:
         7c:19:21:9c:11:ae:2b:59:1e:86:1c:b1:6e:ed:44:00:74:e0:
         10:95:f0:81:e8:62:26:e7:27:1d:57:6a:61:90:2a:0c:15:c7:
         4f:27:7c:d8:41:c0:3b:7c:8c:3d:bf:28:07:d0:12:5f:ba:df:
         f5:ab:86:fd:6b:4f:8a:0b:ab:fc:7a:5c:d8:90:8f:40:01:e6:
         86:7b:59:cb:67:7f:9c:35:52:8c:46:5b:b4:bb:9e:cc:dd:af:
         65:b5:c4:e3:4c:eb:02:50:f5:a8:46:f7:c4:bd:18:5d:3a:da:
         d3:1c:93:55:84:7f:92:93:6c:2e:f9:d1:5f:7f:9e:f7:0e:19:
         cc:56:7a:73:d1:5b:de:51:c1:28:21:85:6b:58:8d:0b:dd:b2:
         fe:98:70:47:9b:d8:82:22:eb:4a:47:0b:53:c9:60:15:be:94:
         d2:84:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org