Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/642208e9-7780-39b0-9fec-fbc66818ca60.roa
File:                     642208e9-7780-39b0-9fec-fbc66818ca60.roa (raw, json)
Hash identifier:          fK+5DrRlCO7m6LXoqgGHfub1Tb/9SW7FBfWjCqWInx8=
Subject key identifier:   04:F8:E4:89:82:F6:28:30:F7:34:22:10:05:23:C3:50:90:93:EE:48
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584733856F3793733867B990D080
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/642208e9-7780-39b0-9fec-fbc66818ca60.roa
Signing time:             Fri 13 Sep 2024 14:15:02 +0000
ROA not before:           Fri 13 Sep 2024 14:15:02 +0000
ROA not after:            Thu 12 Dec 2024 15:15:02 +0000
asID:                     8560
IP address blocks:        66.175.232.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:85:6f:37:93:73:38:67:b9:90:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:15:02 2024 GMT
            Not After : Dec 12 15:15:02 2024 GMT
        Subject: CN=b7ac89c1-acda-4cc5-aa3a-8cd7475f4a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:29:e4:a9:36:95:9f:1f:e8:a1:e4:9a:f1:3d:
                    3f:0f:6a:6e:4d:39:b7:4c:82:00:56:36:ff:aa:f2:
                    20:3e:c2:28:8f:ea:19:4c:cf:df:db:46:62:cb:70:
                    30:fb:f4:31:b5:b4:8f:80:c8:e2:8c:98:40:73:8a:
                    dc:bd:45:02:8a:92:61:da:7e:32:21:65:8a:d6:2c:
                    22:80:2c:91:46:2b:5e:5e:c2:9b:e7:fc:a7:ea:3e:
                    1a:9a:6a:47:83:7d:a7:99:97:ad:65:28:e8:cb:08:
                    a6:b1:1f:6a:d5:8d:4b:f5:82:cb:3e:ac:91:78:04:
                    b2:02:46:54:9f:c8:a9:3f:57:c1:81:22:82:cb:1c:
                    bc:c0:13:e0:ad:22:31:82:a3:13:20:25:67:7f:cd:
                    92:11:0b:d2:05:4d:13:ce:c8:e5:0c:26:c3:49:bc:
                    bd:52:bd:e6:24:7e:92:cb:40:70:79:b8:11:ad:38:
                    0b:78:2e:37:2f:7d:c7:56:02:0b:f8:e5:df:a4:03:
                    43:c0:d4:a7:21:0c:d4:0e:96:81:fc:8d:e3:7c:b0:
                    4c:95:b1:30:02:82:e0:d5:88:7b:0f:fd:95:94:37:
                    38:c4:82:fd:9c:c5:3d:4a:87:49:bc:9a:d5:25:19:
                    22:f1:71:97:ce:e3:c1:8f:16:f0:b4:d5:f9:66:21:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:E4:89:82:F6:28:30:F7:34:22:10:05:23:C3:50:90:93:EE:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/642208e9-7780-39b0-9fec-fbc66818ca60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:e8:e1:19:65:46:66:17:d9:d2:d3:a6:da:30:0d:54:7f:
         1e:07:46:c2:38:41:56:dd:60:e6:48:87:0f:ad:bf:be:cb:4a:
         08:62:71:2f:58:72:11:a9:68:5c:e4:2b:85:0d:bd:b9:5b:c1:
         89:20:71:50:fd:db:40:1f:7c:27:c6:50:7d:28:83:18:aa:a1:
         38:32:80:46:63:99:68:d7:e0:5f:be:18:b6:2d:ed:da:df:67:
         dd:6f:c4:9f:28:c7:14:5b:de:a4:89:e6:03:4b:88:56:b9:fd:
         af:77:f4:ba:79:03:57:c4:fb:a5:fd:cc:25:f4:db:16:3e:46:
         3e:65:2d:03:97:39:20:7b:63:62:9d:b0:b9:12:42:56:f9:4c:
         1c:d9:d6:21:a9:33:ca:13:12:01:84:e8:34:18:02:31:ef:a4:
         14:f3:74:71:50:b8:f7:7f:d1:df:d4:08:54:e3:08:79:2d:db:
         7f:99:53:38:8d:76:08:5e:c2:08:18:51:19:54:1a:23:9e:28:
         66:b2:cd:53:9b:66:8c:07:ce:14:06:25:0f:8e:72:c5:cc:64:
         c6:cf:4e:a1:11:83:47:aa:0a:c5:37:6a:b6:50:93:57:ce:dd:
         14:36:d2:0e:a3:7b:04:e0:dd:d7:78:fe:b7:bc:89:e5:21:f3:
         a4:56:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org