Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/3bd4f872-e26f-35f8-a13e-e77138c765f8.roa
File:                     3bd4f872-e26f-35f8-a13e-e77138c765f8.roa (raw, json)
Hash identifier:          dYACKQu60pToAv0Gv4ddL/0tDGDkoHCLwGFmRU1POV0=
Subject key identifier:   23:65:DD:5B:5D:45:8E:DB:65:42:C6:3D:ED:30:81:1A:83:82:32:FF
Certificate issuer:       /CN=736df059-86cb-4a7f-b49e-44e0134dfbca
Certificate serial:       010D0C9F43285845CE08FA962590268A0EE88580
Authority key identifier: 59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/3bd4f872-e26f-35f8-a13e-e77138c765f8.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     23260
IP address blocks:        66.9.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:fa:96:25:90:26:8a:0e:e8:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736df059-86cb-4a7f-b49e-44e0134dfbca
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=940c40b9-f0e0-415d-9935-05e80237a46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:f2:84:f4:80:99:e2:3d:18:67:58:bc:3f:
                    18:83:f2:d5:16:b6:34:b0:9a:ce:71:0e:48:32:e3:
                    88:a8:ad:e6:4c:4c:c0:3f:fc:5a:d9:bc:fa:a5:17:
                    48:c9:ca:c9:b4:19:4e:41:3d:77:80:49:2b:70:7c:
                    bb:fd:f6:aa:a6:9b:13:6c:d9:b6:1e:fc:e8:9f:05:
                    21:4b:83:38:06:71:5a:2a:b3:3c:4b:34:8d:82:71:
                    32:d3:50:e4:86:72:ee:a3:a4:9a:cb:7f:85:56:75:
                    6f:f8:f2:77:b6:4d:20:a5:12:f2:da:df:fc:73:13:
                    b3:2c:49:d0:8a:58:cc:db:6f:a5:ad:19:a6:9b:9b:
                    03:d8:91:ec:7d:42:3b:3c:59:c6:25:ef:d5:1f:d4:
                    34:b2:f4:12:53:f5:95:50:05:e7:2a:d8:fd:1d:14:
                    39:ce:4c:26:64:62:6a:65:ba:0e:44:8d:1b:54:26:
                    dd:57:67:bd:60:d7:07:a4:23:4a:0c:7e:ed:d7:4b:
                    7c:27:31:b8:06:99:76:7f:6b:d4:99:fe:cd:34:40:
                    b0:12:be:f1:a4:de:36:9c:f2:f5:17:3e:35:17:a9:
                    be:be:ae:13:90:07:2d:9d:bc:a7:2e:1f:e8:3c:47:
                    e5:db:5e:1c:20:e8:f9:a6:75:12:9f:99:01:57:d0:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:65:DD:5B:5D:45:8E:DB:65:42:C6:3D:ED:30:81:1A:83:82:32:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/3bd4f872-e26f-35f8-a13e-e77138c765f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl

            X509v3 Authority Key Identifier:
                keyid:59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.9.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d6:7c:0f:66:66:9d:b4:ab:3c:10:ba:ee:d9:20:ac:7b:d7:
         c6:c0:21:94:af:45:6e:cf:5a:22:3a:a4:a7:97:6a:4b:d4:de:
         0e:5c:5b:9e:0c:39:76:ab:ce:d7:7e:3b:76:0b:a1:46:52:7a:
         0c:9d:90:00:f2:1a:fe:ba:a6:d9:f9:ba:ee:20:4f:4c:c5:ec:
         7b:24:b7:d5:9b:a6:c5:95:23:81:08:5e:53:b3:e0:9a:7e:6f:
         1e:23:d0:8f:48:e5:17:52:43:c8:56:ce:d4:67:4b:0a:34:be:
         b6:3d:5c:37:85:dc:aa:4d:ac:ac:23:c4:f9:37:41:a8:be:a6:
         ec:13:e4:17:11:c9:6c:d2:0c:9f:50:7b:b8:fc:c0:e7:57:6e:
         1b:87:28:f7:25:7c:5b:87:1d:bd:9c:a9:d9:7e:93:29:f1:97:
         1b:52:2d:7e:0a:ca:55:be:42:32:33:5c:fe:15:96:75:3d:9c:
         35:b4:29:e4:54:93:5b:1e:65:29:65:9d:4e:8e:f3:17:b0:41:
         f6:49:61:f2:f3:d0:e7:d4:5b:cf:20:af:8f:da:6a:5d:f7:c1:
         24:99:d3:fb:d6:81:fa:71:e6:8e:a7:2e:d4:f2:7c:a7:09:52:
         b3:bd:c2:9d:08:d4:ea:21:cb:3d:3a:18:ce:3a:d4:6c:59:ac:
         1f:cc:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:48:39 2024 by rpki-client on console-fra.rpki-client.org