Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/d9b83237-2c4f-3fad-acf2-4108b2026a88.roa
File:                     d9b83237-2c4f-3fad-acf2-4108b2026a88.roa (raw, json)
Hash identifier:          L2+NKpaFe+bHnxYIaWTDPHYaDk/ckGJp3rJi1fWFWSY=
Subject key identifier:   84:40:3C:21:63:6A:AB:11:27:26:F0:91:7A:75:32:1B:48:57:3B:3C
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F432858477BF66739EFC3EEF8BBF98340
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/d9b83237-2c4f-3fad-acf2-4108b2026a88.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     16992
IP address blocks:        66.37.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:67:39:ef:c3:ee:f8:bb:f9:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=a1d04a30-0662-4500-9b18-456d4ec4c459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:58:f9:f2:3d:ac:85:d9:50:1f:b1:4e:a7:
                    91:67:94:46:c6:f8:ca:ee:80:ba:6f:b8:22:f8:37:
                    e0:3a:b7:72:d5:bb:74:4c:05:f3:f6:60:90:1a:c5:
                    fc:2d:9e:fc:93:b7:4c:3e:e0:27:e7:09:25:52:87:
                    ad:0f:ed:92:2e:6e:d2:ca:fc:1d:ae:a4:07:79:aa:
                    38:5e:42:4d:d4:4a:1b:4f:28:c6:c0:d6:b5:c4:ae:
                    f8:03:0c:42:cb:81:b3:70:a3:cf:20:0f:5d:53:0c:
                    bc:f9:f2:68:bf:c1:6c:96:a6:76:c7:0f:52:9b:3e:
                    a1:d8:fc:5f:3c:b5:86:7a:2e:c0:24:11:07:63:b2:
                    11:9e:51:48:c5:7c:19:ab:c8:6a:9d:0c:a2:1d:03:
                    13:b4:90:89:17:6c:fd:9c:17:91:a6:0f:da:b2:57:
                    f2:ff:b0:c1:66:e6:ff:4a:8e:b9:0f:c7:df:b6:7b:
                    65:d6:f1:1a:6b:a0:f7:15:ec:50:e7:1e:05:9a:de:
                    5d:2e:22:ab:99:07:72:66:90:2f:e8:9b:97:8f:9a:
                    08:bc:f0:9d:5e:ab:55:7c:56:5d:ca:e2:47:4a:11:
                    78:f8:1a:40:16:62:a1:81:bd:02:73:59:5f:65:87:
                    3c:72:07:e8:58:ae:26:59:1a:5a:0e:e1:50:31:fd:
                    07:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:40:3C:21:63:6A:AB:11:27:26:F0:91:7A:75:32:1B:48:57:3B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/d9b83237-2c4f-3fad-acf2-4108b2026a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:23:0b:b5:70:7c:aa:13:ad:20:70:0c:8c:b0:27:d7:71:7e:
         18:b8:57:6f:bd:8c:c8:4e:99:c0:18:a6:34:27:cf:7d:c9:f7:
         4a:b3:16:b1:6e:83:27:df:97:ee:4b:d7:df:10:22:80:a0:2a:
         32:f5:63:e8:1e:b2:a1:44:cc:80:1d:3a:ae:49:a1:62:56:fb:
         9f:7e:e3:c4:5c:57:eb:ab:b7:58:ac:b0:5c:95:90:d9:30:14:
         ff:fa:50:53:73:67:36:06:47:fc:a2:e2:72:cf:01:10:17:48:
         12:de:3f:ef:df:7b:28:ff:78:54:51:ed:66:cc:18:7a:97:42:
         90:ba:e9:1c:21:7e:73:e2:c5:95:2d:68:c8:1e:42:80:f9:86:
         7e:cd:85:50:eb:bb:97:a2:48:56:50:4d:73:b7:84:87:11:ae:
         58:72:a6:38:d4:bc:15:8a:c6:8c:d5:f8:01:54:0d:68:9a:a1:
         8d:17:a1:57:0c:de:84:be:00:80:cf:37:bf:1b:e8:72:51:d2:
         a9:96:a3:36:95:a1:31:c4:2d:fc:45:9a:1a:52:5c:89:fe:28:
         fe:e3:16:3d:7b:f7:cc:e2:1a:8d:3b:e7:a2:e7:0a:72:28:6a:
         e0:a7:ae:6b:bf:03:68:8a:fb:5c:34:bd:48:81:02:34:3a:b9:
         03:1e:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:40 2024 by rpki-client on console-ams.rpki-client.org