Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e7721b89-0dbf-3901-b075-a775eb3984a6.roa
File:                     e7721b89-0dbf-3901-b075-a775eb3984a6.roa (raw, json)
Hash identifier:          3cmnX4jFpeVYYxAqA94xpkix6A7Vw/nGMcefq0uO1vM=
Subject key identifier:   6F:EE:34:54:C9:8C:1A:A9:5C:E8:49:E7:C7:50:52:CB:E1:B9:75:65
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858456F1DBF4E0E809E3394F11640
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e7721b89-0dbf-3901-b075-a775eb3984a6.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     394437
IP address blocks:        66.60.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:bf:4e:0e:80:9e:33:94:f1:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=46ba72bf-db41-4ee2-b6b7-eff965909da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:1b:58:52:a5:81:9b:c5:8f:1a:c7:24:dc:
                    23:2d:e4:f7:61:8e:4e:1d:58:4c:4a:65:00:01:b5:
                    5d:35:7a:be:e8:70:b6:d8:89:35:e2:7c:0c:3f:9b:
                    b5:82:cd:d7:b9:c0:65:ae:3c:aa:15:bf:bb:b7:b4:
                    44:8d:58:6e:6a:45:d9:b8:71:c6:26:2c:3f:cd:a8:
                    74:4d:d2:86:9f:4b:5f:40:45:88:8e:f7:a3:44:0e:
                    03:81:d6:53:ff:98:51:24:e3:5a:1f:b8:45:b4:32:
                    fe:f3:8a:b5:20:2e:3a:18:a8:4c:eb:ce:2d:53:f7:
                    f1:e4:5d:99:01:06:d2:d8:96:23:46:0d:70:2d:a5:
                    bf:e8:a4:e0:e4:7a:c0:d4:5f:da:47:4e:d5:ea:4c:
                    2f:ff:4c:aa:b2:8e:cc:f5:20:ee:38:93:b6:28:d8:
                    e3:0f:4e:bb:67:be:8a:b8:4d:48:8a:4a:45:ac:81:
                    b1:3d:3c:79:3b:71:78:61:12:e4:eb:64:62:c6:c9:
                    b9:b2:a6:7a:76:5c:2a:cc:ab:a3:61:d3:43:c8:af:
                    42:74:28:2c:66:21:e8:4b:60:7f:96:40:c5:0d:c0:
                    37:c9:33:a1:6e:82:3e:c2:09:e5:e9:d5:fa:6f:42:
                    0a:99:2e:27:21:fd:b1:77:09:e0:a6:8b:c7:ab:3d:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EE:34:54:C9:8C:1A:A9:5C:E8:49:E7:C7:50:52:CB:E1:B9:75:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e7721b89-0dbf-3901-b075-a775eb3984a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.60.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:25:ff:19:a4:ba:6d:70:20:0b:64:2d:d7:fe:08:56:71:
         40:2b:c1:0a:78:69:69:79:82:fb:5e:a3:c3:7a:e6:f8:46:70:
         de:60:25:73:74:91:c8:64:fc:0f:a3:47:bc:c8:b2:aa:74:22:
         f7:32:fc:b2:22:c4:c5:dd:39:ef:09:fa:72:ae:68:b0:0e:4d:
         fd:b4:ad:9d:0e:6f:53:f5:cf:2d:35:ca:b3:18:8b:28:94:89:
         b7:bb:32:4d:01:d5:a4:10:7c:96:97:38:2c:e8:a5:bc:ff:0a:
         94:05:53:7d:fc:fd:88:a1:89:d6:f3:30:40:0a:94:98:00:af:
         cc:4a:37:2b:6d:ea:0b:81:4e:27:6d:b4:0f:5f:ad:fd:31:33:
         4c:9f:7b:f0:87:b0:90:96:53:3b:ee:bc:7d:40:c6:6e:73:67:
         0e:58:3e:d2:b7:ff:1b:77:5b:cc:67:e6:11:19:e4:48:2e:15:
         ba:e8:92:5e:dc:fd:d5:eb:61:48:c6:b7:eb:87:d8:84:2f:86:
         a0:09:84:21:d3:ed:80:e4:10:65:11:c6:3e:d8:dd:b8:4a:99:
         85:df:75:13:f9:47:2e:7c:27:22:8e:60:b6:6b:42:38:b7:f6:
         a1:86:b8:34:f2:71:2c:17:6a:f0:74:19:dc:80:4e:2c:b6:5e:
         db:6b:45:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:22:35 2024 by rpki-client on console-ams.rpki-client.org