Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8aa49c-2bfd-33af-9d7a-a67f749a7712.roa
File:                     2b8aa49c-2bfd-33af-9d7a-a67f749a7712.roa (raw, json)
Hash identifier:          bbMlhYvLuZcyKG2bWuJkRKeJDynGzaGmzLjwy9OprQw=
Subject key identifier:   28:18:13:BB:B4:A9:E4:12:5B:F9:4F:9A:90:16:89:48:18:74:37:F6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858475EA6167D4781E884E7B69040
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8aa49c-2bfd-33af-9d7a-a67f749a7712.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     174
IP address blocks:        66.78.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:16:7d:47:81:e8:84:e7:b6:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=90dc1e79-5b4d-4342-900f-a2f10648b6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:0e:20:6b:37:b1:ff:8a:20:be:5b:7c:b2:
                    1d:97:bc:97:49:b4:87:bf:db:e7:4b:de:be:4e:d7:
                    7f:61:46:4a:52:32:e0:6b:5f:13:b4:62:95:5d:95:
                    c8:5d:b6:e0:fd:9e:b7:6a:17:c1:b6:8f:81:d5:ac:
                    d2:5b:80:2e:be:fa:c2:6b:8f:41:c8:fd:11:26:31:
                    a2:4f:a0:48:48:16:a8:3d:70:b9:9a:a1:6f:22:c0:
                    13:37:a4:cd:8f:d1:fb:8d:36:6d:95:02:a5:a6:4e:
                    5a:d7:3d:51:a4:1f:2d:c3:b5:18:8c:c9:86:11:8b:
                    2f:90:b2:a1:b9:d3:e6:c5:5c:e4:fd:aa:40:ea:99:
                    84:e6:09:04:13:a8:57:70:39:03:fe:53:0a:ad:ec:
                    af:73:a4:50:dc:28:e9:1d:52:f8:c1:e9:85:bc:ff:
                    2a:9b:76:d8:ae:68:44:4d:32:4b:68:a9:a2:66:b6:
                    be:11:74:2d:34:35:1f:c3:22:ce:f5:17:2e:ac:46:
                    42:db:fc:41:dc:7a:79:1d:10:56:20:14:8a:75:12:
                    fb:36:86:b7:4f:94:c5:3b:03:44:05:69:df:4b:2e:
                    db:e4:e9:b9:f3:0b:a6:10:6a:97:10:e1:e0:2a:7f:
                    e0:0b:95:06:0e:2b:07:e4:58:3a:5f:bc:06:4f:48:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:18:13:BB:B4:A9:E4:12:5B:F9:4F:9A:90:16:89:48:18:74:37:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b8aa49c-2bfd-33af-9d7a-a67f749a7712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:5b:29:db:d5:7c:30:92:1a:d4:3f:06:27:da:d8:71:f8:b1:
         13:de:1f:da:17:ce:28:d4:5b:4b:7e:38:eb:ab:ca:2a:77:91:
         10:49:ef:9f:c2:db:33:e7:ad:8c:49:ea:65:61:70:8a:79:b7:
         2e:5c:71:e7:50:a1:a1:c0:98:12:bc:9f:23:ab:57:2e:f2:6a:
         80:72:a5:c5:f6:b8:7f:9e:66:a8:26:1a:2a:20:53:f6:83:5a:
         a8:3a:dd:53:a7:60:51:ac:9c:96:84:64:04:8f:93:af:10:83:
         f5:0a:0a:d7:00:58:97:67:2f:41:f3:9a:7c:de:e5:c9:98:73:
         fd:d4:3a:31:d2:3d:b4:b3:f2:73:6d:fe:92:f3:c5:fa:45:15:
         3f:ec:8f:54:7c:00:df:d6:06:03:9e:df:7c:8d:46:88:5d:50:
         e6:c5:a7:ff:a8:5d:05:4c:58:dd:b5:0f:db:46:93:4e:12:6a:
         8e:5f:f7:f5:b0:9a:eb:84:33:3c:4e:1d:db:d4:e8:3c:a3:50:
         e5:b3:1c:c2:a8:97:de:b7:c1:c8:fa:ed:41:09:02:2e:88:0e:
         37:56:34:8b:eb:ac:4a:9d:d6:a4:ca:40:0a:92:5f:25:67:17:
         98:ea:9b:f0:6a:be:ad:07:e2:f1:ed:08:8b:df:a1:b6:92:2c:
         42:b7:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:17 2024 by rpki-client on console-ams.rpki-client.org