Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa
File:                     a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa (raw, json)
Hash identifier:          iy/kndSUW5aQt+4YZQq3uc6CJT6ZsRPcbL5IAew9CXw=
Subject key identifier:   49:34:87:9C:DD:42:B4:27:A4:31:78:C0:07:33:4C:A4:A2:49:F4:CC
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845734DB140C06F0AAB29701940
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     6453
IP address blocks:        66.198.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b1:40:c0:6f:0a:ab:29:70:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=7995ff19-496b-4aeb-b4dc-6b1aaef3d497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:3e:59:1d:e4:33:1f:52:0f:2c:e6:2d:f9:
                    cc:45:43:54:eb:59:83:d0:a8:fd:14:14:04:fa:b1:
                    65:4e:a5:8e:03:83:c9:c2:9a:09:2e:d0:79:31:82:
                    cf:e8:dd:c2:bd:62:1d:a9:fe:1c:3d:f1:01:78:fc:
                    2e:fa:e0:34:b0:75:ad:2f:8b:d7:83:61:c8:28:72:
                    ea:40:e3:3b:81:28:cc:18:c1:38:52:6f:0a:07:92:
                    85:a7:7b:c0:66:f1:64:8c:23:53:ce:bf:ad:7c:04:
                    6c:70:5b:04:d0:2c:70:dc:83:8f:63:e0:04:94:77:
                    23:5b:e7:8c:25:ce:5d:6e:ae:e3:97:2f:23:9a:e6:
                    5f:b3:1b:b4:11:36:57:9b:f7:d0:e6:96:26:9e:06:
                    99:f7:d8:89:2b:46:e1:d1:30:b9:31:4d:7d:b9:be:
                    94:9b:ee:8d:0f:70:c2:ec:bd:50:4f:5c:2a:3d:dd:
                    de:76:1a:05:8c:e7:81:a6:e9:7a:5e:e3:a7:e8:02:
                    0c:6a:c2:2f:51:20:e4:4d:1e:83:10:9c:4f:ad:cf:
                    73:b7:91:9b:6d:e9:59:e2:36:29:0c:b3:5d:73:68:
                    9b:a7:e5:b6:61:b6:68:9a:76:f9:f7:0a:73:e3:fb:
                    7a:18:a0:e6:a1:89:ed:01:ae:81:43:a8:b1:7f:9e:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:34:87:9C:DD:42:B4:27:A4:31:78:C0:07:33:4C:A4:A2:49:F4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:96:ed:9e:63:2d:80:e0:70:22:57:e2:fd:8b:19:c7:86:
         69:3d:31:a0:62:11:47:40:f7:01:eb:6a:15:eb:ba:5f:1e:3d:
         00:78:86:de:2a:e7:4b:b5:ad:6c:26:88:a2:70:e3:72:4a:5c:
         b8:d0:63:9e:dd:f4:c1:03:31:f4:17:ce:ad:c8:6a:9e:df:42:
         83:7a:75:11:8b:56:39:13:3b:4c:e6:c5:39:76:af:51:b4:a1:
         8c:bb:ef:d0:1c:c8:21:51:f0:a6:3b:24:3d:49:d6:e4:91:22:
         ec:91:bb:e2:2d:4d:c7:62:61:10:58:97:c8:8b:df:b1:72:ba:
         5f:99:f2:8e:49:f4:12:fd:5c:4d:6c:8b:ee:66:79:5f:4c:1c:
         8b:7f:3e:3b:57:f7:75:91:c3:de:32:f5:19:53:50:7e:6e:25:
         1f:7d:89:c8:31:7c:0e:ae:a5:b6:fc:b2:46:a0:b2:1a:e2:03:
         cf:f1:b8:87:d3:80:5f:4b:fc:45:03:20:85:82:4f:7a:89:15:
         45:4c:d9:06:ed:43:c1:87:c7:20:b1:69:fb:2a:cb:40:16:9c:
         56:8e:1c:76:72:aa:2b:44:51:71:65:b1:53:14:d9:ba:bb:79:
         50:5a:11:6b:77:98:0e:48:d9:82:00:05:7b:00:f7:41:44:1b:
         f1:8a:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:06:11 2024 by rpki-client on console-fra.rpki-client.org