Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/47b50dee-89e9-3a5c-be89-6ee154128f4a.roa
File:                     47b50dee-89e9-3a5c-be89-6ee154128f4a.roa (raw, json)
Hash identifier:          JI3o8HPD5DvcQt5AcX9OPk63PXxc/SXkhsZR+TborBE=
Subject key identifier:   6F:4B:E7:19:B5:F5:1B:C6:A5:09:3F:D9:29:B3:D9:B2:DD:4E:F5:D3
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858457D131E1E6EFC4190DE967740
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/47b50dee-89e9-3a5c-be89-6ee154128f4a.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        66.22.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1e:1e:6e:fc:41:90:de:96:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=78705226-5cf3-452f-b731-fabddbea356d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:4a:29:2b:f9:28:2f:c4:bc:55:42:d1:88:
                    b8:3c:63:30:48:7b:08:09:50:da:ed:1a:8e:76:e5:
                    37:14:3f:21:c0:af:cd:28:5b:e6:7d:33:9d:a0:15:
                    98:ee:0d:85:8d:75:95:bd:0a:82:7a:7f:43:8d:f5:
                    11:76:44:0b:1e:92:91:48:c5:40:10:c5:dc:a0:1d:
                    a6:a8:18:cd:28:b6:3e:02:b2:b5:0c:7a:e6:e7:13:
                    89:71:f5:f7:fd:07:22:65:bf:93:6c:ce:22:18:b4:
                    9f:93:fd:6f:10:14:1f:71:80:72:c0:36:9d:3c:d5:
                    3a:1e:21:08:45:31:1c:d7:9b:9c:ee:26:1c:7c:eb:
                    c0:68:18:ff:bc:ec:ef:81:28:f5:c6:99:b6:99:f2:
                    95:0f:2c:55:6c:17:03:df:46:cf:5f:ee:b6:31:32:
                    c6:30:46:b4:f4:9d:d8:b5:d9:6b:5f:15:d5:d1:11:
                    78:71:64:77:45:89:10:99:e9:c3:c3:05:fc:2e:e3:
                    2e:17:c9:c4:97:77:ad:f4:39:af:32:d5:e3:e1:f6:
                    73:22:90:6b:1e:a3:f9:17:62:85:80:6c:19:b2:26:
                    b5:59:e4:0d:fc:79:09:5f:3a:75:a6:8f:1a:9c:5d:
                    7b:59:92:bd:d4:d9:47:ec:c5:97:db:f8:68:e6:f2:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:E7:19:B5:F5:1B:C6:A5:09:3F:D9:29:B3:D9:B2:DD:4E:F5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/47b50dee-89e9-3a5c-be89-6ee154128f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:50:b7:a6:e0:56:fe:dd:70:70:70:a6:23:dc:58:67:6f:7a:
         2d:83:0d:4c:e8:17:87:eb:d3:b0:bb:74:4f:ee:5b:d7:8e:58:
         ba:ae:32:c9:85:75:d5:ff:94:6a:90:eb:9b:17:6d:d1:88:7b:
         ad:02:f6:f8:a5:41:a2:2a:26:15:b1:e2:90:c4:a0:b0:ac:f8:
         95:8a:f8:dd:3e:ca:3d:90:f2:79:94:a6:02:07:ea:84:1f:9d:
         4e:dc:9b:09:17:76:b5:34:f9:44:39:50:8a:16:21:d5:38:42:
         39:e2:27:37:c4:3f:fd:c8:80:c5:08:d3:19:98:90:ac:dd:61:
         20:c3:76:47:2c:e9:9d:11:bf:17:a4:e7:7b:9f:df:fd:e3:8d:
         f6:5c:f8:04:a0:cf:63:c0:c3:71:60:2b:f0:c9:7d:d2:68:13:
         b8:c1:17:45:30:1d:6d:f6:5c:d5:c4:70:84:2b:2a:93:c6:21:
         64:37:cd:5c:0f:d0:69:f5:85:46:86:52:40:cf:27:b5:1a:5d:
         0e:14:0a:66:b5:af:36:5c:b1:c6:15:47:61:66:41:f8:c6:0e:
         b9:9b:18:8d:a4:6d:50:3f:3e:7c:b9:cb:94:b6:c3:50:91:3d:
         69:7d:5a:20:05:17:2f:44:95:eb:a4:4f:f7:d3:e9:b8:d1:ee:
         6e:32:39:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:59 2024 by rpki-client on console-fra.rpki-client.org