Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
File:                     7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa (raw, json)
Hash identifier:          arI2R92gkC9QVWG4ED1RwqPi4TtsFUf6itpwzDbMFrM=
Subject key identifier:   7D:AE:99:56:19:D5:0B:C0:62:A3:74:D2:1D:04:3A:3A:16:35:49:0D
Certificate issuer:       /CN=a05c180d-6db0-4307-bc39-264e11bb765c
Certificate serial:       010D0C9F432858478F812CFCC746D9DDF7EE5040
Authority key identifier: FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     12684
IP address blocks:        66.119.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:2c:fc:c7:46:d9:dd:f7:ee:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05c180d-6db0-4307-bc39-264e11bb765c
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=d33c51fb-bb12-47fa-9b7a-748ec4fcbe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:8d:7b:7d:51:ac:4f:e3:44:83:3e:73:ca:
                    29:3b:44:43:0c:f7:83:a0:83:76:90:61:5c:91:a7:
                    6d:60:4b:f7:c4:32:04:96:ef:f4:94:7d:de:38:1d:
                    56:01:5a:ff:d3:45:e9:61:7b:49:27:48:17:34:ce:
                    43:96:9b:15:42:59:e7:06:d2:77:af:93:5b:77:07:
                    a4:3b:e0:bf:9d:5e:0f:62:e4:e8:8f:f3:97:35:dc:
                    93:5a:ff:38:41:7b:ec:cd:f8:28:07:d9:68:a9:ff:
                    9a:93:cb:83:85:8e:a1:7c:62:05:f6:b6:f0:db:aa:
                    7b:e4:3b:a1:c5:54:47:c0:a0:1f:f3:ab:33:de:80:
                    df:24:b5:4e:f9:ce:d4:08:6b:1d:36:18:2f:8b:cd:
                    7b:82:7e:db:4e:b0:47:69:3b:48:04:0f:b8:89:76:
                    7d:40:e7:0a:ee:c8:27:31:ed:0a:6f:ea:51:4c:2e:
                    c1:66:d8:aa:99:b6:a3:98:6d:c2:4c:33:89:01:89:
                    c6:ad:05:e0:22:3a:f3:2e:f7:4e:62:fb:c2:5f:75:
                    7d:9b:4f:11:3c:a0:6f:f9:2c:05:1b:18:4e:2e:19:
                    30:71:fd:fa:05:e1:43:f6:a5:61:ee:cf:e7:57:7e:
                    57:01:f7:06:fb:eb:95:1b:08:96:9e:96:31:c8:85:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:99:56:19:D5:0B:C0:62:A3:74:D2:1D:04:3A:3A:16:35:49:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/7fab2202-8ae7-3fe8-b290-e87605fb2cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c/a05c180d-6db0-4307-bc39-264e11bb765c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:96:F4:82:9C:8D:63:83:5B:FB:C0:EA:74:85:60:F5:E9:31:65:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a05c180d-6db0-4307-bc39-264e11bb765c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:0f:9d:b6:ad:ce:f1:ec:e7:9b:c7:2d:b7:01:78:9d:09:
         93:3f:c3:35:66:39:9b:a3:f2:65:e6:44:81:9b:2a:94:3e:e4:
         e5:42:69:75:3a:26:3f:0e:06:6a:b2:0a:ed:8b:68:c7:63:d9:
         41:e2:29:be:eb:a2:b3:7d:34:8b:93:de:d1:07:47:7d:30:f7:
         ca:37:6b:64:7e:c3:27:ba:1c:50:d0:29:36:8e:bf:5d:30:4d:
         20:0e:44:87:b0:80:a0:bb:85:5c:3c:50:dc:3a:47:04:a4:56:
         d3:52:47:76:dd:34:b8:48:90:1c:07:e1:0a:15:56:2a:5c:da:
         b3:d0:d3:4e:5e:ca:05:b3:be:92:f6:9a:10:59:89:84:29:2f:
         11:29:bf:6d:b0:9d:69:40:3e:19:ff:73:4c:34:bd:2b:56:f3:
         0a:ed:bd:f3:82:01:10:ca:c4:46:6d:ae:fd:fb:52:c2:a5:d0:
         32:fc:16:7a:6a:46:56:93:c9:6c:b0:9b:b1:6d:c2:eb:41:55:
         1e:3c:e4:db:f4:45:d8:61:60:38:4d:64:9d:9c:d7:38:ea:5b:
         29:81:77:20:aa:6a:bc:f3:59:18:1c:48:01:8c:f3:52:ee:96:
         ed:e0:2c:43:a2:14:14:bb:32:77:97:1a:df:7b:1e:14:5d:4b:
         51:65:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org