Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa
File:                     24e9780f-da80-3241-86e2-93db72785a5f.roa (raw, json)
Hash identifier:          dvxcfS3vR+jD2e5Ma0VPh6yRGXp4HAx3dMzPVhtBHiM=
Subject key identifier:   75:B4:E0:D3:15:53:CA:CF:F5:4A:C7:E4:4F:5E:A5:B1:5C:16:E7:C2
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285845CBCF27BD3A2F3D6654AA4080
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa
Signing time:             Tue 07 May 2024 17:52:34 +0000
ROA not before:           Tue 07 May 2024 17:52:34 +0000
ROA not after:            Mon 05 Aug 2024 17:52:34 +0000
asID:                     25961
IP address blocks:        209.237.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:cf:27:bd:3a:2f:3d:66:54:aa:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May  7 17:52:34 2024 GMT
            Not After : Aug  5 17:52:34 2024 GMT
        Subject: CN=87ba6095-05af-4d40-8941-ae966edbcbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:e5:22:08:24:08:b0:81:4b:9b:9b:5f:42:
                    fd:8c:63:e0:68:21:d8:8d:de:ac:07:40:d7:5d:b6:
                    01:e5:90:f8:13:7e:f2:ea:85:45:d4:33:17:58:da:
                    76:7a:e4:18:5e:ec:b3:5e:6b:6e:80:62:e9:41:93:
                    97:6b:60:65:db:19:90:96:a9:f5:06:5a:e1:7e:40:
                    00:3f:09:91:c2:44:f7:90:13:e2:74:dd:9c:1d:a4:
                    a9:0d:b0:39:da:78:75:0f:58:97:3e:10:27:48:a0:
                    5c:33:9b:eb:45:f5:f2:7d:1f:65:c2:36:d8:a9:b5:
                    13:c6:6e:18:8e:b4:a4:0b:90:ce:f6:ac:a1:f8:75:
                    f0:7f:49:82:bb:fb:b5:e8:ea:29:94:91:e8:81:f4:
                    9d:67:c0:ef:fe:77:44:74:24:2d:ec:7d:33:cd:8d:
                    86:5e:e4:35:5d:75:16:e0:56:10:53:20:81:b7:bd:
                    ca:e4:50:37:72:1e:36:fc:93:bc:40:a0:47:e9:b9:
                    b6:d8:c3:f7:d8:ee:7c:f9:d1:c4:e5:1d:89:2b:af:
                    8b:b6:f4:9b:6b:02:9c:fd:ac:07:47:c1:23:41:2a:
                    49:c8:f8:60:25:e5:c8:77:6d:01:a1:7d:0e:d5:a1:
                    a4:9b:31:95:31:fb:d4:89:a7:02:37:80:ac:82:6f:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B4:E0:D3:15:53:CA:CF:F5:4A:C7:E4:4F:5E:A5:B1:5C:16:E7:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/24e9780f-da80-3241-86e2-93db72785a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:67:a0:86:0e:57:f6:6d:f0:c0:64:df:05:a5:d7:51:f9:c8:
         99:a8:d3:2e:bf:d5:3a:9e:f7:14:2e:39:e9:d9:10:89:9f:cc:
         68:22:8a:cd:4a:be:2e:61:60:f8:fd:8e:70:e7:40:19:b1:9c:
         49:41:b2:1c:15:5e:e6:9f:f5:63:bd:1d:41:66:23:65:95:91:
         c0:50:9f:c1:dc:9e:13:72:5f:1e:15:19:c6:92:32:6a:09:4d:
         29:35:74:b2:57:de:c1:ed:f2:1c:59:5f:0c:5e:15:b8:94:4a:
         b4:ea:16:f7:43:61:c9:77:54:aa:d4:53:52:3a:85:18:43:ea:
         c3:c3:04:49:1d:5c:c4:55:94:39:c3:04:77:c9:be:9f:c2:63:
         04:6d:fa:3e:a5:20:de:6e:9d:20:03:45:a6:ce:7e:1b:56:c2:
         2e:9a:44:c4:02:d5:98:a2:3f:5e:1e:ec:c4:21:3e:d5:95:4e:
         fc:a4:bc:63:91:ca:ad:be:31:c2:fc:e0:6d:f0:f0:d2:79:72:
         46:1e:f5:df:4c:aa:36:bd:9d:99:52:35:6c:08:dd:a0:8c:fb:
         20:0c:50:ce:53:90:7d:96:7a:94:bf:bb:fa:c9:d5:d5:43:96:
         b4:fb:84:cd:20:d2:45:ad:51:c4:5d:ae:39:3d:82:00:4e:cb:
         4e:6b:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:21 2024 by rpki-client on console-ams.rpki-client.org