Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
File:                     5acde123-8b2a-32d5-8223-e6b8a8424390.roa (raw, json)
Hash identifier:          GYf2whioXq8vGhDrGjOtPCRdpvLdgZhVOnVjCqvCT6E=
Subject key identifier:   EB:76:DA:AF:04:69:2C:06:66:AE:46:03:52:7B:6F:9A:E2:EC:F1:1D
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F4328584789EBF746BE10F3FF245ABC00
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     27768
IP address blocks:        66.249.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f7:46:be:10:f3:ff:24:5a:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=3bcbbedb-b7e7-4b8c-ad32-d70d2c661038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:94:1c:c2:8b:79:2c:3a:96:55:f3:cd:9c:3c:
                    c9:18:1f:70:3e:63:a3:e0:72:b3:f1:3d:d9:9c:fc:
                    19:88:92:4a:ab:9d:78:74:ab:3e:92:f8:fe:0b:0b:
                    32:5f:76:19:88:75:7e:c1:27:e3:93:49:29:47:1c:
                    b5:1d:0c:cf:5a:e9:bc:64:b3:0e:50:42:0b:66:43:
                    76:e0:98:e2:e7:8d:f1:0d:2f:7e:b6:7b:41:20:ad:
                    26:16:32:b2:2f:0c:bd:53:05:0f:d9:9c:6b:69:50:
                    72:ea:65:04:28:e7:c9:17:6f:8d:8f:43:0b:69:69:
                    4a:49:b5:2f:5d:e3:34:3c:cc:00:85:03:f1:66:3b:
                    fe:a2:d8:39:b5:6a:e6:97:6a:ef:97:67:c7:57:d8:
                    e4:bc:e3:40:27:e3:15:16:1a:aa:52:1e:af:df:ed:
                    81:b7:ed:d4:9f:5a:de:bb:e6:40:44:9a:81:c2:a5:
                    de:b7:20:4c:f6:ee:f2:bc:58:ab:45:8b:74:e1:01:
                    56:04:dd:cd:6b:52:c1:f9:ae:82:23:32:14:10:76:
                    84:42:07:4a:f8:94:6b:be:44:8c:b6:8c:88:9d:ac:
                    5c:df:37:08:31:ab:ea:61:03:06:8f:c3:1c:ad:a2:
                    b4:b5:7c:e3:aa:37:33:bf:f9:2f:3a:13:15:8b:f3:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:76:DA:AF:04:69:2C:06:66:AE:46:03:52:7B:6F:9A:E2:EC:F1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/5acde123-8b2a-32d5-8223-e6b8a8424390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:26:8f:5b:de:cb:87:25:1d:cd:74:82:e8:2b:a8:cf:cf:53:
         b9:3e:4d:66:06:49:70:39:dd:1b:97:ee:55:8d:41:12:b8:2a:
         01:b9:1e:bb:ea:02:b3:98:14:92:ed:9e:1f:a6:f6:95:f6:ec:
         cf:f5:80:4a:45:5f:23:ca:c7:6c:63:cf:26:7a:30:7d:f9:77:
         a8:b8:70:db:10:83:67:68:b0:1c:b9:50:07:49:d0:66:05:21:
         e4:83:f3:83:f4:dd:6e:e4:41:49:28:8b:77:4d:14:29:fb:6e:
         b2:6e:c1:04:b1:f7:5f:1c:64:d5:23:94:db:bc:80:f0:e4:e5:
         7f:bf:e0:1f:0a:b8:83:98:0e:58:55:a2:f3:a3:be:cf:34:99:
         fc:b3:f3:18:da:1d:33:44:25:09:b4:88:64:e4:55:a3:3c:34:
         d6:d9:b8:2a:80:03:9c:5f:86:9b:b7:cb:a6:21:1d:c0:31:7d:
         ea:67:52:a6:23:d2:e1:24:a0:e7:07:2b:ca:a2:91:b7:17:00:
         cc:87:87:3d:b8:e3:d6:b3:d8:50:21:89:b8:05:b9:e6:6c:be:
         23:95:7e:95:c1:29:8e:9c:ec:5f:3a:d7:a1:52:35:f6:58:51:
         02:01:b5:17:b8:e9:52:a9:8c:03:15:38:e5:d0:66:cb:bc:fa:
         5b:20:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:45 2024 by rpki-client on console-fra.rpki-client.org