Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
File:                     70b491ba-5507-36ed-97d1-864053a80150.roa (raw, json)
Hash identifier:          7x18sMWadDJQQQyudFq2Ag3smYjOmt52upSsHz/W81A=
Subject key identifier:   F5:A9:9A:03:0F:E7:93:C6:3F:CD:47:3B:C4:94:C8:D4:6D:52:48:04
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285847DBEADF2584014CD4E79EE980
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa
Signing time:             Tue 12 Nov 2024 21:55:13 +0000
ROA not before:           Tue 12 Nov 2024 21:55:13 +0000
ROA not after:            Mon 10 Feb 2025 21:55:13 +0000
asID:                     394437
IP address blocks:        66.249.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:ea:df:25:84:01:4c:d4:e7:9e:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Nov 12 21:55:13 2024 GMT
            Not After : Feb 10 21:55:13 2025 GMT
        Subject: CN=79f06e65-3831-4567-9055-3066c9f9cc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:69:4c:a1:70:61:c3:f6:85:90:d2:40:c7:
                    97:af:07:01:8f:2a:2d:ae:e1:d9:c0:1d:e3:57:f7:
                    d4:66:c8:a1:68:5a:56:cb:41:92:fd:a6:8b:8a:ce:
                    84:bb:e4:9e:6a:b7:ed:44:35:70:66:26:11:a8:85:
                    6d:f2:3f:53:3b:8f:26:3f:e0:2e:b0:67:83:67:81:
                    21:8d:83:a0:c6:65:ce:7a:b2:f3:c3:87:3c:ac:9a:
                    1b:81:4f:8d:5d:67:26:e5:6b:fe:10:7e:c1:c1:45:
                    68:7e:af:d7:c2:86:fc:0c:45:12:ab:b7:d7:6f:3f:
                    7e:8b:ac:eb:a2:bd:27:87:cf:e5:85:bd:1a:c8:74:
                    b7:b5:5f:a0:0f:4a:0a:dd:9b:b6:e6:3d:5f:97:19:
                    46:ba:47:dc:2d:0b:7f:af:a1:7a:f5:5d:ba:93:ba:
                    25:18:df:cd:eb:3e:9f:2b:11:a0:01:7a:e9:6a:a7:
                    dd:59:39:a1:2a:d2:2e:e6:cf:40:11:08:6d:a9:55:
                    df:a6:62:5f:a3:d1:df:e4:c0:c2:6b:8f:ad:bc:0a:
                    35:a1:47:76:6a:5c:4c:4a:83:75:01:eb:d2:d5:55:
                    15:25:ec:53:d4:a2:41:79:f5:8e:d0:7f:a6:fc:88:
                    c9:eb:9a:ba:d7:54:58:db:7e:c0:35:7e:20:29:df:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:9A:03:0F:E7:93:C6:3F:CD:47:3B:C4:94:C8:D4:6D:52:48:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/70b491ba-5507-36ed-97d1-864053a80150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:50:4f:14:85:39:2a:4d:91:ff:f0:9a:5a:3b:2e:26:6b:ff:
         6d:fe:c2:79:db:2a:96:ef:ca:58:7c:88:a9:b3:f1:88:01:17:
         69:c2:91:be:28:c6:09:d7:0b:5d:e4:08:0c:be:4b:2b:19:03:
         83:60:56:29:f9:d8:c9:31:2c:87:7f:c1:84:5e:8a:6b:8f:4a:
         d4:45:5f:c8:b0:c8:51:a2:a5:71:5a:95:08:8b:a2:e5:c3:68:
         cb:e9:e5:97:61:ac:ca:c5:3c:e5:83:4b:36:6f:78:98:ce:96:
         17:e3:c3:c4:fe:08:19:8a:42:17:17:f7:5e:b0:66:4f:fd:f5:
         9b:22:bb:40:96:ec:5e:b0:0e:13:08:96:a5:e2:1b:b7:91:c1:
         56:a1:19:5d:a5:e6:d5:19:b3:9b:fa:fb:18:60:2f:cb:ba:f6:
         05:cd:29:ed:bf:65:54:6f:23:a2:4e:cd:00:b0:2b:74:5f:43:
         47:fd:b8:3f:9e:5c:15:dd:53:fa:67:a8:20:45:fd:59:cc:50:
         8a:62:04:e5:6f:4c:02:c2:6e:a9:ea:05:56:fc:8e:45:ca:f4:
         08:74:00:97:ff:46:45:eb:9c:e6:3f:78:0d:f0:dd:2f:dc:41:
         4a:9b:5a:b7:ec:de:e9:95:76:85:9a:f5:ef:4c:0a:08:1d:57:
         c3:82:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:40 2024 by rpki-client on console-fra.rpki-client.org