Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9906d30c-85f3-36c2-bbbe-4dd00f201859.roa
File:                     9906d30c-85f3-36c2-bbbe-4dd00f201859.roa (raw, json)
Hash identifier:          hHENiuXG86IB3HRjCksT/DC8umoQzeL/T7rPkeoCDDg=
Subject key identifier:   A8:4A:D0:31:5D:1F:05:7B:34:79:F7:11:C5:92:E6:87:F5:21:E0:56
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584565F54DC21D8A5D10DBA87A40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9906d30c-85f3-36c2-bbbe-4dd00f201859.roa
Signing time:             Mon 01 Apr 2024 06:16:58 +0000
ROA not before:           Mon 01 Apr 2024 06:16:58 +0000
ROA not after:            Sun 30 Jun 2024 06:16:58 +0000
asID:                     40065
IP address blocks:        66.78.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:f5:4d:c2:1d:8a:5d:10:db:a8:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 06:16:58 2024 GMT
            Not After : Jun 30 06:16:58 2024 GMT
        Subject: CN=e428e08b-ad5c-4786-812d-2362a423b31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:d6:79:43:aa:76:12:33:9b:e4:79:d2:75:
                    f2:ae:a4:7d:c4:71:44:f6:cf:f6:27:f3:03:04:07:
                    53:e1:f0:c9:17:05:0d:09:74:12:ba:ff:b5:6a:c9:
                    32:72:61:e0:2f:ff:b5:d2:5e:89:85:f6:20:66:c3:
                    21:0c:9f:ab:b3:35:15:f4:1a:43:2f:00:54:46:f3:
                    4f:e6:9f:4e:3c:e4:7b:13:16:80:46:7b:f9:50:07:
                    8e:51:63:91:06:5e:1a:23:25:1b:a2:7e:da:84:36:
                    50:d3:17:20:5f:bb:87:0b:b3:d1:f5:a7:fb:41:d1:
                    65:a0:fc:06:b7:ed:88:aa:26:db:a6:49:4b:87:7b:
                    46:c2:05:36:72:3a:da:bf:e8:1a:42:d7:c7:37:89:
                    0f:6a:31:3a:a1:89:d2:3f:7f:92:f0:10:bf:0d:60:
                    57:4f:43:60:63:25:52:46:63:93:bc:db:0d:f4:64:
                    13:48:1d:52:c4:3c:0b:d3:e7:5e:b5:76:fb:cf:57:
                    43:62:03:26:a7:fb:16:1d:22:c2:36:d8:8e:94:2e:
                    7b:7f:50:75:e3:1f:20:cd:b6:54:97:44:df:70:f1:
                    ca:ba:be:38:0f:b7:90:cb:8b:14:af:45:87:c9:0c:
                    1d:b3:0f:1c:a1:d7:d5:c9:b6:c4:e2:c4:e8:06:66:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:D0:31:5D:1F:05:7B:34:79:F7:11:C5:92:E6:87:F5:21:E0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9906d30c-85f3-36c2-bbbe-4dd00f201859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:90:20:e5:3e:1d:d6:a2:6e:8a:c8:a6:66:b1:00:a3:55:92:
         42:95:bf:17:bf:d4:62:48:da:f1:db:2c:58:a4:3c:ec:33:49:
         12:b0:85:04:9d:cf:d3:0b:0e:bd:99:ba:a8:1f:6b:7a:68:0e:
         33:06:b8:67:b6:ab:5c:db:fb:d2:fa:db:80:60:89:d1:c6:fb:
         e7:1b:8d:35:2e:43:d3:ae:a5:b1:02:f6:36:71:66:5a:d9:37:
         4b:c7:aa:29:bb:e5:73:23:a3:db:75:7c:77:85:cb:44:77:80:
         05:93:3a:a3:3d:9d:eb:5d:98:67:02:f1:a6:dd:73:31:e3:3a:
         a5:a4:1e:08:b7:83:ba:72:b3:e9:67:e6:41:f0:ac:e6:a9:18:
         ad:6a:15:cb:8a:ac:d4:ef:89:45:03:e4:f4:eb:ea:e5:8b:2e:
         77:f2:0b:73:70:3c:11:56:f8:71:5f:25:7e:86:8a:3e:32:dd:
         6c:44:c7:09:6d:81:22:19:b3:90:cc:1c:44:bd:cf:31:b6:c1:
         e0:11:e6:98:db:ab:29:05:e6:a5:ca:66:0c:f0:5d:ce:3d:29:
         6f:67:96:ee:ce:27:0d:0e:78:cd:da:69:22:94:e0:17:08:41:
         18:98:20:fa:41:e1:6d:79:1a:71:ff:ad:d4:31:6b:99:36:e0:
         43:a2:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:06:37 2024 by rpki-client on console-ams.rpki-client.org