Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa
File:                     f55c43bd-0625-3da5-9763-c49f70e415ea.roa (raw, json)
Hash identifier:          6L+VOqbwO97Y763Yrqo4l6291uODS6OyBPAnZu5rYYc=
Subject key identifier:   5A:27:6B:8B:0D:C8:D3:C2:54:7C:5C:64:1C:44:F2:36:41:5E:FC:F8
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285845068ABC6DB64795827D82DA40
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     198949
IP address blocks:        66.178.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:bc:6d:b6:47:95:82:7d:82:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=6543c12d-245d-4c10-a4fc-94aa9ecffad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:84:a0:6c:15:99:67:20:46:c2:e1:33:8b:
                    7a:b1:d3:7f:03:56:3f:82:e1:3e:12:fb:9b:f7:1c:
                    1a:3b:94:cb:a6:b4:f8:0e:71:34:bd:df:e4:93:07:
                    94:f7:68:38:96:a8:1c:70:b2:94:6b:6e:85:b8:98:
                    50:89:cf:c3:38:90:69:63:24:2a:01:a3:e1:d2:bb:
                    ca:83:97:66:3c:54:56:81:3f:6e:8e:13:d1:33:85:
                    7a:3f:49:48:49:81:65:41:37:5c:43:15:83:13:ae:
                    77:77:22:ef:d8:fb:a1:71:a1:a8:62:1a:ce:f6:ae:
                    bb:95:38:ef:2e:9f:f8:23:c9:74:1f:a2:44:1e:47:
                    80:f3:e3:c3:3d:8f:60:8a:30:ca:d5:00:d6:44:e2:
                    c7:75:ae:83:50:c4:bd:fa:f9:51:06:bd:e2:1e:ea:
                    af:31:2b:10:18:bd:ab:bc:a5:35:ae:6f:73:a8:85:
                    71:a4:b4:ee:f0:ce:b7:da:6e:7b:ce:7b:b9:ba:69:
                    f3:53:d6:67:15:85:24:17:10:78:1f:0a:61:46:30:
                    45:2d:cb:a8:7f:c4:11:18:da:b7:52:71:eb:2f:1d:
                    78:06:04:41:e2:93:43:39:94:fa:47:b8:26:eb:b8:
                    e1:9d:77:1f:07:84:33:3d:91:86:58:ba:5f:14:b3:
                    dd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:27:6B:8B:0D:C8:D3:C2:54:7C:5C:64:1C:44:F2:36:41:5E:FC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f55c43bd-0625-3da5-9763-c49f70e415ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:e6:ee:d6:04:62:8d:b1:9e:88:08:69:58:bd:51:a9:02:f5:
         d1:fc:d7:23:39:9b:b8:fa:ee:06:be:29:7e:80:76:58:55:d5:
         90:dd:79:20:c1:50:a2:4c:3e:0a:b0:f2:51:ec:b2:23:8e:01:
         ad:16:71:63:30:1f:42:71:ee:64:d9:17:54:e9:14:b6:a1:8c:
         ac:bc:1f:50:cd:2e:b9:81:53:49:83:3c:2d:c4:fe:39:f3:bc:
         5f:e6:f4:60:5c:4b:28:d0:dd:db:d7:ed:07:44:a9:34:b5:04:
         8b:4a:e1:47:1a:b2:a6:30:02:e3:42:3c:ae:3e:2b:ba:ba:c3:
         b4:b2:4e:0e:8f:97:76:91:55:66:0a:e7:4a:1c:a2:e3:ce:71:
         ad:a4:b7:3b:be:2f:4d:fb:73:24:8a:dd:f8:1b:2a:6a:da:53:
         b0:d3:65:f9:e4:bb:b5:6a:ae:88:1f:3d:92:0c:73:52:de:a2:
         b7:73:41:d0:82:07:f2:d0:70:4c:33:eb:7a:83:cc:7f:44:8d:
         47:1c:29:84:41:de:92:47:21:19:82:4a:1d:7f:73:31:a8:26:
         96:68:18:4e:14:2c:9f:37:3c:e2:b8:66:79:97:85:3f:6b:8a:
         01:43:fc:c7:04:38:e6:03:1e:a4:f3:41:be:ec:a6:ea:b7:d6:
         17:53:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:13:37 2024 by rpki-client on console-fra.rpki-client.org