Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa
File:                     a1599c49-20bf-390c-9d21-4c927a2074e3.roa (raw, json)
Hash identifier:          bmSgKxM5uYFUkKhfPVLOsXHaKKEgXk8G33nZtlQgTqE=
Subject key identifier:   9D:48:59:71:A6:BD:AA:77:6A:83:8A:9B:11:DA:61:06:F4:42:DA:E6
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285845840DC8ECA28AD8347CC97E00
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        66.178.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c8:ec:a2:8a:d8:34:7c:c9:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=a52cf6bc-e285-4bd2-abb6-0e03868a4344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:27:c8:35:18:f3:c2:9f:24:2d:64:ad:36:
                    e0:35:e2:84:27:6f:cf:a8:c1:4f:8d:ea:ea:31:cb:
                    02:69:26:d0:a5:74:cf:75:71:7d:fe:20:21:71:64:
                    ad:09:73:77:b9:9c:50:c1:3a:fc:98:fa:63:6b:6b:
                    ca:74:0d:88:4e:9d:71:a9:4c:2f:d4:f2:61:00:46:
                    c5:5a:86:b0:b6:dc:60:ee:ac:1f:bd:c6:51:38:19:
                    89:f4:d7:e4:6f:51:cb:92:d4:bf:7d:46:61:25:0b:
                    ed:46:02:97:84:44:ae:4f:43:bb:d5:f9:5a:d0:48:
                    49:73:28:24:fd:06:17:3f:f6:f8:03:c4:85:ca:23:
                    6f:49:07:da:59:f5:3e:d0:fa:b5:1d:d0:8a:bd:ab:
                    66:3c:39:6b:80:17:73:9c:68:e4:28:2f:1b:4f:e8:
                    05:74:87:97:f1:cd:5a:1e:a1:2a:50:08:09:7a:0f:
                    e0:ce:bc:49:0b:a7:bf:5e:36:6a:47:05:23:47:95:
                    c4:ba:5b:f5:25:38:d5:ec:59:b3:c9:c1:39:67:e8:
                    3e:b3:67:16:03:ab:a1:f5:98:ce:76:75:61:27:12:
                    eb:d4:75:30:d9:7c:76:a5:3b:2f:b8:1c:eb:d6:d5:
                    56:46:da:36:af:c3:83:c1:0c:71:b6:b0:32:19:10:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:59:71:A6:BD:AA:77:6A:83:8A:9B:11:DA:61:06:F4:42:DA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:46:04:1a:c1:95:3e:df:86:18:9f:cf:40:67:48:78:04:
         2a:68:ca:06:02:fe:74:37:eb:87:7d:92:bb:4c:3a:e7:37:b5:
         b6:a8:88:df:e0:2e:58:8c:02:6d:b1:fd:5a:d6:44:f2:8f:86:
         e2:ac:e2:57:12:e6:1b:80:34:41:8c:1b:ca:60:7f:e5:b0:ac:
         1d:63:d4:37:05:b8:9d:81:80:9b:77:4b:81:44:c1:6c:6d:8e:
         4d:c3:b6:10:39:55:5a:5a:18:ba:88:05:3f:4b:5e:f4:96:fa:
         ef:00:8f:a0:92:77:d8:b3:64:8d:0d:0d:e4:13:83:52:1e:c5:
         9b:4e:ec:0d:bc:6a:b8:cb:1f:c6:b1:17:dd:52:c1:9e:a9:8f:
         36:f3:91:f3:3b:14:55:54:a9:14:2b:cf:f2:36:18:4e:8c:d3:
         15:9a:35:84:92:3a:40:ea:7e:4b:73:25:f2:34:ea:8f:eb:6e:
         0f:d7:d9:0d:c6:b9:3f:98:0a:b8:85:87:9c:af:ec:8a:6f:1a:
         e0:9d:c8:9a:78:63:2c:57:b6:af:9b:c5:12:aa:89:84:f9:f4:
         b4:29:14:a1:33:d6:76:fa:d0:08:15:80:9a:74:ef:1a:49:c9:
         77:4f:79:b1:9d:3d:e2:bd:1d:d2:e1:ed:9e:d8:47:74:5b:c6:
         a3:6c:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:32:37 2024 by rpki-client on console-fra.rpki-client.org