Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa
File:                     b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa (raw, json)
Hash identifier:          BfAA3BitcHhp9+dbzhu4KBV65TZSdOH6zejsI7ISFrY=
Subject key identifier:   C8:E8:C4:76:36:81:9B:F7:47:D2:F2:CD:F0:1C:12:3C:A3:95:5A:0F
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584566BDBCD88DC2731DE5333E80
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        66.117.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:bc:d8:8d:c2:73:1d:e5:33:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=3c3289c1-38e0-4284-8252-fae718d75fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:df:4b:e2:73:e4:db:cc:b3:86:d5:4b:8e:a5:
                    08:5a:e4:72:ee:b4:93:42:46:bf:05:b0:d8:77:bb:
                    31:a5:57:7d:ea:08:ed:3c:d9:b1:ae:d4:36:02:f7:
                    7a:d4:16:50:c8:04:5d:05:67:03:3a:09:c1:32:9d:
                    de:a6:5b:ef:01:da:5b:25:13:99:b3:cd:fa:fa:f4:
                    df:bd:97:6e:fb:5d:58:aa:93:ec:22:9d:63:bc:cc:
                    8e:97:bc:65:0d:a7:85:1c:62:01:99:81:ae:12:44:
                    9f:a1:e9:20:d6:ba:7a:7a:e7:d4:ca:74:32:49:c2:
                    29:bd:aa:d4:b0:0c:fe:06:95:dc:2d:00:84:64:6b:
                    78:58:2e:f7:00:e8:14:ab:54:18:ea:4a:76:be:d0:
                    70:3f:a5:29:5a:6c:f1:b4:1d:d2:67:df:47:18:4e:
                    69:0f:b4:5d:20:7f:9e:11:5e:c4:23:34:01:0c:7a:
                    14:bd:9d:93:ea:34:45:a5:ce:b0:a5:f8:11:4d:63:
                    89:56:ef:75:a0:9b:70:9c:6f:46:ab:6d:25:70:3d:
                    3d:b5:c5:b4:14:98:1f:a0:95:d7:29:e7:1b:c4:a1:
                    89:90:99:73:82:87:c7:32:f4:5b:d7:77:8e:c0:e7:
                    47:5f:9c:12:e1:70:ef:61:a8:a7:23:04:27:14:7f:
                    3e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:C4:76:36:81:9B:F7:47:D2:F2:CD:F0:1C:12:3C:A3:95:5A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:b6:d0:a9:be:4c:7c:4b:37:eb:f2:bc:2f:91:3e:d5:a8:
         b8:12:7d:8a:33:a9:ba:ed:77:57:a4:04:16:75:e1:dd:09:27:
         63:dc:71:62:ea:d8:89:12:0c:3a:f0:da:78:68:a3:ec:f8:22:
         f9:42:4b:17:4e:d8:54:10:b1:4b:20:38:d5:ed:7c:75:db:7f:
         75:43:00:03:fa:5d:20:5e:27:fc:3e:11:d6:81:29:c1:72:8f:
         61:de:92:45:84:a8:44:d6:5d:d1:21:56:65:af:80:40:29:1b:
         47:8a:32:f8:14:3b:b6:34:74:17:91:75:b4:10:20:de:6c:a5:
         4a:6e:be:d6:9e:fa:17:cc:7e:93:36:40:80:a7:9e:97:f4:5b:
         96:d1:09:12:32:61:4a:e5:37:80:cf:a3:42:b3:33:0d:a3:d7:
         d6:8c:28:ad:24:d4:0d:33:df:07:ee:e4:fa:86:45:87:db:c4:
         0c:52:ac:af:b8:e5:61:df:52:69:32:01:ff:a8:1c:4d:d6:68:
         a8:c1:2c:1b:04:3a:e2:40:3a:ff:5a:06:30:95:b2:ed:23:67:
         9f:3f:2c:d6:ab:a2:bb:8f:27:98:a3:f4:74:96:2b:b2:19:b3:
         29:04:0c:f0:ec:c8:38:4f:e2:f1:ad:b3:d0:af:17:f5:da:82:
         6e:59:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:50 2024 by rpki-client on console-fra.rpki-client.org