Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/bbac5273-5591-3b9d-9ee5-aa25ca9852d4.roa
File:                     bbac5273-5591-3b9d-9ee5-aa25ca9852d4.roa (raw, json)
Hash identifier:          yWJ+DDmDc7VHbdDmePtfSWLoF1r6z/i1EtPTCPVDQNY=
Subject key identifier:   7F:04:26:FC:73:10:43:03:4B:F8:9B:2E:49:D8:95:C7:24:ED:81:5B
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285844E03C73FA1990ECEDCD6F5EE0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/bbac5273-5591-3b9d-9ee5-aa25ca9852d4.roa
Signing time:             Tue 13 Feb 2024 08:42:01 +0000
ROA not before:           Tue 13 Feb 2024 08:42:01 +0000
ROA not after:            Mon 13 May 2024 07:42:01 +0000
asID:                     14618
IP address blocks:        66.178.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:3c:73:fa:19:90:ec:ed:cd:6f:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Feb 13 08:42:01 2024 GMT
            Not After : May 13 07:42:01 2024 GMT
        Subject: CN=53eebb04-449b-4884-8ef6-099da0c9d553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:b3:2d:22:fa:ac:32:70:4a:81:b7:00:59:
                    69:92:02:34:74:3c:76:f6:a1:66:b0:d5:b6:ee:ca:
                    7b:c6:1c:1c:0b:ea:ff:3e:4e:fb:da:00:b2:ac:32:
                    53:9e:42:c0:a6:44:73:81:c7:a0:14:b5:fc:af:b8:
                    df:80:0c:ad:25:20:54:27:9e:08:e5:a4:40:8c:61:
                    5f:ae:9c:7e:55:30:eb:96:a2:53:f9:bb:fd:ec:99:
                    58:40:00:f4:8f:cb:3c:7a:3c:44:32:4b:be:84:80:
                    04:9a:3b:b6:15:f5:06:2e:26:5e:7b:5f:3a:db:25:
                    80:17:44:34:35:c3:c5:14:23:3f:51:ac:9a:e3:40:
                    99:56:ce:41:0a:9c:f2:fc:d3:d9:bd:a7:c3:88:2f:
                    ca:8f:2d:e6:56:73:bb:fc:59:c1:02:f9:2f:f1:fd:
                    23:95:79:c3:99:09:85:cc:d5:67:e0:5d:67:e1:6a:
                    e9:8f:14:56:ce:67:0a:43:eb:05:2f:e4:e1:6e:ec:
                    25:d5:36:84:16:4a:f4:a4:d2:e6:b6:c2:b3:f5:3e:
                    74:ac:8c:04:68:b7:7e:a2:da:e6:6f:df:5a:35:03:
                    de:a3:1d:cd:44:ce:5c:8e:d7:e7:8f:6f:84:a1:67:
                    c9:77:8d:86:8a:e9:a1:32:84:86:7c:18:da:2a:23:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:04:26:FC:73:10:43:03:4B:F8:9B:2E:49:D8:95:C7:24:ED:81:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/bbac5273-5591-3b9d-9ee5-aa25ca9852d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:43:dd:13:58:0c:b4:ef:e5:2a:72:70:3e:62:ed:ea:26:00:
         6a:49:9b:7d:13:9d:3e:76:c2:f2:c9:0d:fa:05:2d:a8:cc:28:
         d0:69:74:e8:6f:5f:c7:1d:e7:d9:d5:71:bb:9e:e8:fb:3d:db:
         b3:b4:ec:e8:60:e3:45:c8:23:98:7b:d1:39:93:fb:2a:23:6f:
         ab:2a:fb:ce:d4:d7:eb:55:e5:da:32:4a:09:e0:04:cf:27:53:
         17:76:39:ae:e5:5f:53:44:ff:a2:33:cd:4f:af:44:05:48:25:
         98:58:33:31:c9:73:bb:33:25:30:b3:18:78:78:11:98:99:0f:
         fe:60:54:3d:aa:f7:17:b2:73:08:24:1c:35:35:2f:bb:79:93:
         05:c9:f1:4b:eb:a3:4a:e3:28:48:8f:65:44:a3:6d:f9:e5:52:
         4b:14:98:fd:39:14:3b:8e:00:8e:aa:1a:c8:fe:31:02:02:62:
         94:3f:fd:4d:76:75:4a:dd:c2:c9:cb:17:e8:66:a9:00:5a:ea:
         7e:10:84:16:5e:39:9b:15:1e:04:d6:b3:48:90:b6:cb:32:3e:
         4e:2a:a1:e4:4b:7e:ac:98:22:d5:94:d3:55:26:bf:a1:a5:c7:
         7e:31:7b:dd:6f:37:6c:15:7e:0a:c8:8a:b9:73:79:bd:fd:15:
         74:d0:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:20 2024 by rpki-client on console-ams.rpki-client.org