Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa
File:                     9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa (raw, json)
Hash identifier:          W3c8XnAG7R1538Vm8juGvuLPbAmREvbyvejggA2QAP4=
Subject key identifier:   CA:1F:D9:23:06:84:EF:0D:F1:E4:04:35:81:32:C5:AE:24:62:54:22
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F432858477C5AEBBF15568E9B6CCABE00
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa
Signing time:             Wed 09 Oct 2024 16:23:23 +0000
ROA not before:           Wed 09 Oct 2024 16:23:23 +0000
ROA not after:            Tue 07 Jan 2025 17:23:23 +0000
asID:                     13576
IP address blocks:        66.6.0.0/20 maxlen: 20
                          66.6.0.0/21 maxlen: 21
                          66.6.0.0/24 maxlen: 24
                          66.6.1.0/24 maxlen: 24
                          66.6.2.0/24 maxlen: 24
                          66.6.3.0/24 maxlen: 24
                          66.6.4.0/24 maxlen: 24
                          66.6.5.0/24 maxlen: 24
                          66.6.6.0/24 maxlen: 24
                          66.6.7.0/24 maxlen: 24
                          66.6.8.0/21 maxlen: 21
                          66.6.8.0/24 maxlen: 24
                          66.6.9.0/24 maxlen: 24
                          66.6.10.0/24 maxlen: 24
                          66.6.11.0/24 maxlen: 24
                          66.6.12.0/24 maxlen: 24
                          66.6.13.0/24 maxlen: 24
                          66.6.14.0/24 maxlen: 24
                          66.6.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:5a:eb:bf:15:56:8e:9b:6c:ca:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Oct  9 16:23:23 2024 GMT
            Not After : Jan  7 17:23:23 2025 GMT
        Subject: CN=aa691f22-a132-4485-bdcf-ad9ff2d80640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:3b:f8:46:ed:9b:83:91:67:7c:e0:8a:10:
                    55:74:41:52:b0:01:4a:b0:15:69:fa:da:0b:2b:30:
                    81:86:b9:fc:13:94:0a:43:9c:5e:bc:b5:78:ca:12:
                    13:85:44:9e:61:cc:87:86:55:ae:86:be:c7:99:00:
                    d3:2d:4f:aa:0e:db:f2:fb:ee:9e:f8:3a:7b:bf:36:
                    09:7d:37:f6:88:6a:1d:58:d2:0d:82:e6:9d:22:3e:
                    9a:11:9f:02:c3:d4:07:f9:98:6f:d7:16:cb:91:62:
                    78:16:43:86:02:e0:c0:12:85:72:2f:2b:39:62:35:
                    8c:a5:7a:03:f3:73:82:87:4d:27:86:c6:d2:a8:70:
                    5e:6a:5f:4a:30:67:77:20:d0:e9:ef:e7:2d:5b:dd:
                    05:cc:2e:7f:8f:a4:1d:87:a2:e0:5b:04:11:89:2e:
                    ee:86:22:60:a8:de:05:83:11:ff:f1:8a:b9:00:df:
                    92:7e:da:bc:0c:0d:8a:dd:04:9d:ed:a9:68:0d:57:
                    7e:f7:1d:31:ad:0a:11:41:9f:b7:48:51:bc:32:0f:
                    5c:db:b0:68:51:c3:10:4f:fb:65:af:86:80:2e:05:
                    7e:a6:e1:a4:86:ff:71:ae:5d:3f:ed:97:23:ac:77:
                    65:3d:f1:bf:65:86:2c:b4:61:b6:76:33:ac:d4:79:
                    0c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1F:D9:23:06:84:EF:0D:F1:E4:04:35:81:32:C5:AE:24:62:54:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/9e07ebcc-88b0-3deb-b217-f13d91087b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:57:5c:5a:e8:cb:01:96:f1:9d:67:81:e3:b2:c8:0a:be:02:
         ee:8f:5f:36:d8:51:f4:1b:73:f4:03:c0:12:4a:28:2c:e1:f2:
         5a:54:ac:ba:29:a9:16:36:80:a4:0c:9f:d4:c2:89:47:67:fa:
         d2:93:e5:ab:2f:c9:19:29:6f:0c:57:72:d1:0e:58:ac:de:7b:
         1a:80:2d:a7:c8:66:33:cb:e1:f7:eb:53:f1:8b:e1:75:a8:10:
         43:2b:a7:da:33:c6:54:1a:4f:cd:f3:2c:12:26:d9:0e:ad:aa:
         1c:40:00:9d:3d:0c:78:74:a7:67:09:41:a0:7d:02:10:d0:4c:
         c5:a4:a5:89:19:2f:fa:0d:e7:8c:09:0b:0b:81:7a:05:d0:fd:
         3e:4d:53:a8:34:1c:0b:5b:8f:4f:a0:af:45:41:26:b0:d7:55:
         26:ef:a0:90:ce:31:17:45:e8:55:3a:1b:d5:c8:25:a3:2e:34:
         72:0e:cb:58:cc:90:41:8f:de:7e:76:93:85:15:f9:5f:6d:96:
         15:40:2b:37:ff:c0:56:d7:0b:8b:c7:7c:20:0a:b8:ee:82:5c:
         d6:0e:a9:9c:d0:ed:6e:c3:8d:15:22:78:e9:58:02:41:c8:2e:
         dc:56:98:fc:db:c0:69:d7:af:5b:14:3a:d8:42:2a:46:69:9e:
         fd:97:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:26 2024 by rpki-client on console-ams.rpki-client.org