Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa
File:                     80500266-8498-3e87-8f03-0ab380bfd9ee.roa (raw, json)
Hash identifier:          wDDzdcCort8KPzl5OxEnprAa4JbFQnsEcxPKRGDFInE=
Subject key identifier:   E5:C6:CE:44:F2:00:23:93:8A:C6:C9:D3:37:AB:55:79:1F:A2:63:0E
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285847E1F6A5F508D588A748B4AEE0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa
Signing time:             Fri 15 Nov 2024 01:53:48 +0000
ROA not before:           Fri 15 Nov 2024 01:53:48 +0000
ROA not after:            Thu 13 Feb 2025 01:53:48 +0000
asID:                     213122
IP address blocks:        66.118.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f6:a5:f5:08:d5:88:a7:48:b4:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Nov 15 01:53:48 2024 GMT
            Not After : Feb 13 01:53:48 2025 GMT
        Subject: CN=9f7866c3-6c9b-4917-b4b8-ac35d564770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:88:96:0f:50:7e:22:6f:97:15:19:8f:73:
                    56:5d:a1:3d:d6:9f:4b:c4:cf:06:da:52:2b:a4:a0:
                    70:0f:4d:c2:d5:d3:00:21:4b:ec:e6:50:36:3e:d5:
                    1f:26:8d:1e:65:1f:8f:23:da:46:28:33:25:f3:d2:
                    37:c1:a4:4f:79:4c:b4:96:7e:51:61:c8:a8:2f:cd:
                    26:40:b3:55:17:53:ab:e5:23:dc:bb:c5:36:34:b6:
                    1c:45:91:32:73:2e:49:6c:1e:40:2e:33:9f:5f:a1:
                    ea:af:a1:a6:59:e4:62:6a:86:98:51:85:20:d1:ee:
                    ad:3b:f3:c9:36:4b:ca:9d:51:a7:75:02:82:1d:14:
                    d2:7b:9d:65:77:4c:0b:b2:73:63:f8:e5:46:ce:62:
                    5d:bd:92:c0:12:14:9e:87:d5:da:8f:22:50:5f:0a:
                    66:5d:2d:b2:be:57:07:2b:7c:ad:9f:43:46:03:00:
                    0c:a7:92:53:cc:b1:e3:d0:74:50:19:71:3f:83:de:
                    b9:70:f5:36:8d:2e:f3:57:28:e6:d2:78:f0:65:e2:
                    08:7c:87:4d:76:cd:a4:6b:cd:91:14:06:90:64:53:
                    ee:78:15:a1:1a:32:d3:96:1c:8f:3b:42:30:f4:f6:
                    ae:9a:07:e1:61:86:72:d8:95:cb:d3:58:82:11:09:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C6:CE:44:F2:00:23:93:8A:C6:C9:D3:37:AB:55:79:1F:A2:63:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:f1:39:aa:80:64:4b:be:88:73:5a:00:cd:58:3a:e0:71:
         c5:c1:8d:1b:dd:30:bd:23:84:82:35:95:34:c3:61:5f:d5:07:
         68:0e:95:04:3b:f9:2c:2c:e9:13:12:00:e7:00:6d:cd:98:14:
         8f:ba:47:11:a1:9d:51:f1:24:19:65:8a:84:08:99:ab:c7:e1:
         fa:33:a9:5b:3a:9e:b2:db:27:a5:56:7c:22:3c:0b:da:95:45:
         32:ed:81:86:ee:8a:71:15:61:5f:a9:71:38:63:33:b1:83:2e:
         40:f3:72:9c:92:99:c8:b9:44:13:62:12:d6:ab:37:a9:bb:a3:
         60:f0:e9:e8:74:c5:68:6a:19:b6:0f:49:d8:36:48:2f:ae:92:
         33:c6:67:11:40:9b:d5:5a:58:4f:93:97:48:a2:ed:4e:5f:fa:
         d2:db:66:ec:f0:fc:65:82:64:16:38:86:4d:be:af:7b:c7:4c:
         63:03:99:bd:ec:82:fd:1f:1f:bf:78:8f:3e:17:95:78:49:de:
         db:d6:78:3c:c1:5b:de:bd:45:35:c8:67:20:19:e9:d8:3f:64:
         1c:a3:b6:26:79:ba:69:ce:5a:ee:d7:d8:02:d6:39:a1:37:3b:
         68:62:bb:82:56:61:43:42:f1:94:61:d3:fe:f1:8c:c1:43:aa:
         1f:0c:38:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org