Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa
File:                     4352fe98-6e7b-3d25-979a-a24f98bda45b.roa (raw, json)
Hash identifier:          nNQG1/cQiNY2v+LhCxxb56D9LW9+OhRymOFXBeOYTbc=
Subject key identifier:   1E:36:8E:A0:BB:18:0D:B6:DC:73:1D:44:0C:95:14:E8:C6:CA:D6:36
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845734DB6D04B599AE3D36ACAE0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     7029
IP address blocks:        66.110.39.0/24 maxlen: 24
                          66.198.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b6:d0:4b:59:9a:e3:d3:6a:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=89b99951-d995-4cb0-b9b8-80579a8484bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:c2:d2:b2:da:8e:09:ae:a6:c3:f3:60:2a:
                    65:b2:dc:d7:ed:26:8e:d4:c7:87:88:75:6b:83:3b:
                    6d:a4:f3:92:d2:68:7d:58:03:3a:0f:48:00:ce:92:
                    b4:c5:ee:08:fe:1e:6f:98:b0:9f:74:80:ee:b4:d7:
                    20:dd:84:30:65:08:23:71:7b:d6:5f:4a:fb:07:e2:
                    f0:d0:e7:30:be:fe:19:17:31:ef:e6:05:7e:07:a2:
                    ee:b0:65:43:0e:35:1a:19:08:b2:ca:0e:69:2f:ed:
                    6c:90:6e:f0:cd:48:f3:25:c6:44:a4:e4:14:6b:71:
                    92:26:5e:00:6b:ce:bf:58:9e:34:ab:4b:09:09:6f:
                    9e:c1:ec:e9:87:3e:74:55:d1:6d:1f:55:37:bf:5a:
                    c2:be:73:6e:45:e8:62:92:e8:bc:2f:ee:0f:38:20:
                    72:b6:6b:02:e9:10:03:b1:e9:60:6d:be:0f:66:d2:
                    73:49:c1:1a:4f:a0:19:2d:36:9d:61:79:c1:04:5d:
                    6d:e8:f8:c4:e4:41:0a:a9:e1:d2:3d:4f:87:6d:5a:
                    9d:07:6a:f8:8d:2f:5c:1c:76:7d:a4:71:2e:5d:b8:
                    68:53:00:2e:1a:71:4d:24:4c:3b:c7:8d:3d:ca:ba:
                    13:cb:f0:17:96:a2:88:f7:8f:c0:a8:36:38:05:e1:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:36:8E:A0:BB:18:0D:B6:DC:73:1D:44:0C:95:14:E8:C6:CA:D6:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/4352fe98-6e7b-3d25-979a-a24f98bda45b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.39.0/24
                  66.198.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:81:25:55:be:52:31:30:98:87:8c:be:62:be:85:bb:fc:
         64:75:81:1a:d4:a8:f2:9d:4b:61:16:4e:58:54:12:80:26:f3:
         9e:71:aa:8d:d5:19:36:5d:3a:e6:a8:50:02:1b:1e:91:bc:c8:
         e0:12:17:b6:4e:ae:3c:be:16:f9:7b:1d:80:02:b1:e3:a4:7d:
         a8:b4:bd:bd:7b:dd:8e:6b:53:c4:ea:61:a5:d6:57:39:53:de:
         48:39:1a:2c:c3:6d:e0:76:cf:68:aa:03:75:35:25:23:52:8f:
         4d:20:12:77:a8:ab:50:f9:20:1f:fa:09:8b:70:84:d5:18:fc:
         d0:a2:8f:9e:64:6b:01:b0:2f:7a:29:ff:4f:95:71:dd:43:3e:
         34:44:1a:50:96:5a:98:97:18:92:fa:ed:8c:38:1f:fa:c1:a9:
         96:98:f4:df:6b:55:bc:e6:3f:ac:db:14:75:ea:31:6c:8a:8e:
         2c:29:5c:8b:d3:18:05:af:68:ef:65:d1:d1:7d:75:42:03:68:
         73:c0:58:c3:7f:d3:cc:10:0b:c1:46:0d:e2:e0:91:b7:ba:26:
         69:75:4a:80:50:4c:ca:d2:bd:9b:63:5f:a6:8e:5a:7e:cd:e6:
         63:65:f9:f2:8a:cf:41:44:ce:af:52:b9:93:1f:2b:51:7d:41:
         9b:d2:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:03:49 2024 by rpki-client on console-ams.rpki-client.org