Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa
File:                     f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa (raw, json)
Hash identifier:          cv8755XTMOe6ymK37/gdDRHqfYyOcaNzzX0sj4z7zmA=
Subject key identifier:   AC:2A:B6:70:AE:F7:3B:3A:47:8C:E1:9C:2B:8A:BA:C0:FA:20:55:55
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F43285846E0ADA0D497BAA48D3A7CEF00
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa
Signing time:             Wed 14 Aug 2024 22:03:55 +0000
ROA not before:           Wed 14 Aug 2024 22:03:55 +0000
ROA not after:            Tue 12 Nov 2024 23:03:55 +0000
asID:                     22611
IP address blocks:        66.33.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e0:ad:a0:d4:97:ba:a4:8d:3a:7c:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: Aug 14 22:03:55 2024 GMT
            Not After : Nov 12 23:03:55 2024 GMT
        Subject: CN=1a8e7dc7-dcc5-4d75-953b-fb287cf4cb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:a8:da:8b:96:0f:f8:5b:9e:ad:c2:10:3a:
                    0d:ef:c3:46:79:af:36:eb:cf:fb:c0:26:4d:51:c0:
                    7b:cc:4f:d7:db:8e:29:55:9d:8c:48:b4:21:2b:06:
                    25:1b:14:e7:f5:25:85:24:41:4a:52:fb:2f:68:8c:
                    bf:ef:d3:97:a3:61:08:4e:b0:97:2b:54:d4:d3:67:
                    92:d2:10:77:2d:87:c6:bf:77:b8:f6:27:86:3a:7e:
                    5a:5e:e4:4a:58:a7:07:bb:08:fe:fc:c1:86:fd:e5:
                    c7:c3:0d:28:aa:ad:c9:25:cc:17:14:4d:29:5c:7c:
                    5b:f8:19:df:9c:14:86:9f:31:8c:c2:ae:a4:cd:23:
                    60:35:d1:49:53:63:b6:23:1d:92:d8:63:05:7e:d7:
                    e3:4b:e6:91:38:88:cb:d8:fb:df:65:59:6e:09:b5:
                    4b:3f:84:28:ce:83:bf:71:28:3f:cf:96:ae:18:06:
                    d6:15:73:b2:08:b7:a6:21:60:18:0f:a9:0f:9e:e5:
                    6e:f0:fd:b3:0f:c0:e8:78:27:4b:8c:c7:9e:01:06:
                    d3:1c:12:2a:54:cb:27:7b:b9:27:a2:e4:be:08:ef:
                    e2:76:bc:11:cd:78:b8:bd:fd:f0:93:1f:d9:45:1a:
                    eb:37:55:42:ff:fd:4e:fd:fa:e3:41:87:1d:71:f3:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2A:B6:70:AE:F7:3B:3A:47:8C:E1:9C:2B:8A:BA:C0:FA:20:55:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:94:d7:67:2a:16:12:9e:54:69:9c:6b:4e:74:b0:ad:55:81:
         93:59:de:5b:c4:1f:5a:a7:7a:f8:bd:48:1e:28:10:2e:13:b3:
         cc:dc:63:c4:7d:81:10:14:92:fc:48:e6:4c:e7:45:ea:b9:56:
         56:5d:23:77:0d:0e:3d:1a:81:6d:85:10:be:c7:ee:8e:06:71:
         24:66:fb:c0:51:c4:53:7a:58:50:14:f4:4a:29:c6:25:d7:05:
         d5:0e:ff:60:3c:b4:28:c3:bd:02:51:e2:76:fb:6e:5b:90:c3:
         8e:02:e9:52:24:b6:97:dd:6f:00:79:64:3c:31:cd:06:03:e3:
         0b:f8:86:50:7e:1b:97:89:63:b1:63:2c:17:7b:f5:93:4e:fa:
         dd:84:93:7f:b5:b1:66:65:d0:64:8b:24:63:db:95:d5:23:c2:
         8e:0f:84:96:7c:52:43:24:b4:c0:4e:17:bd:14:ed:7f:d5:63:
         c0:db:ff:50:19:b5:51:2d:d7:62:3d:4d:cc:33:24:ae:b8:eb:
         59:0c:04:20:57:18:ed:5c:21:88:1d:df:7c:1c:5a:a7:92:4d:
         30:33:54:45:e7:30:c2:00:83:77:86:91:6c:28:63:65:51:af:
         ff:e5:f6:da:ff:c8:bd:30:26:35:f7:a3:33:02:63:1d:46:94:
         c6:ff:1f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org