Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/e97df7ef-515b-3f39-b99f-41e045dfbea9.roa
File:                     e97df7ef-515b-3f39-b99f-41e045dfbea9.roa (raw, json)
Hash identifier:          i5ZCVXYExkFz5IlupgIU6qoBtYbH+eqcOf40eihmidY=
Subject key identifier:   38:45:92:94:F3:EC:43:C2:5D:BD:6C:12:D2:EE:12:82:C9:3B:0E:DB
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584529528E00447A28AFF9A21340
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/e97df7ef-515b-3f39-b99f-41e045dfbea9.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        66.235.154.0/24 maxlen: 24
                          66.235.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:8e:00:44:7a:28:af:f9:a2:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=9585c0b0-8b72-4b9e-9588-9e5e7eceaf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:98:56:e7:b5:cc:51:17:9c:cb:72:b5:f8:
                    a3:70:8f:dd:60:4b:28:29:5b:d9:bb:2e:b7:f5:ab:
                    39:9f:64:31:76:db:ec:93:45:38:9d:51:16:50:77:
                    d4:99:78:e8:32:fb:70:2c:ab:14:32:74:90:a0:f8:
                    d0:89:3d:3c:99:6e:60:99:ed:3e:b0:cb:2f:eb:17:
                    33:7b:e4:a5:4a:a4:a7:21:ab:a5:af:89:2c:5a:58:
                    0c:e3:d4:ca:d1:1a:1b:03:02:14:5d:fd:ed:48:d7:
                    ca:0b:d2:2b:ba:56:04:b1:e0:55:a0:e3:3c:78:6a:
                    9b:ef:2f:ae:41:7a:5f:48:18:53:15:7d:c8:32:d5:
                    09:0a:7c:a0:f7:f6:19:78:1f:76:37:03:10:bd:a4:
                    cd:9a:a0:e8:81:98:7b:89:50:6f:ca:49:2e:d7:4e:
                    e2:eb:5a:70:b5:ad:b6:5b:70:a2:27:dc:8d:84:f1:
                    12:89:7e:91:66:25:1c:60:6d:80:51:84:dd:ef:7b:
                    d2:6c:f8:a0:57:d4:f9:a8:68:5f:63:61:52:d9:ba:
                    35:66:99:cc:0a:94:86:c1:0d:12:9b:25:c5:54:a9:
                    b7:17:51:ee:ed:88:67:c4:11:d6:ac:91:9f:e6:f5:
                    56:12:b2:b8:2e:46:01:b6:d6:ed:cd:bf:e3:14:91:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:45:92:94:F3:EC:43:C2:5D:BD:6C:12:D2:EE:12:82:C9:3B:0E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/e97df7ef-515b-3f39-b99f-41e045dfbea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:60:c5:c2:a0:ea:c0:a7:dd:4f:db:fa:0f:c3:4d:fe:88:
         34:48:79:17:65:c4:43:c5:2c:44:42:b2:15:bf:89:70:c2:72:
         af:d2:46:4d:f2:18:28:31:17:c5:5d:cd:7b:c7:79:37:5a:38:
         5a:7d:8e:e6:e8:42:ee:48:ba:df:2c:80:6c:c6:42:87:6e:90:
         d6:64:57:ef:e4:9d:43:91:e6:70:50:76:9f:9a:72:c3:16:02:
         1c:13:9f:af:7c:f4:af:21:02:fb:37:73:20:79:da:91:cd:d2:
         d4:6b:51:8c:7a:1f:0b:dd:3d:f1:aa:6e:c4:72:2d:43:07:0c:
         93:11:92:82:38:23:b9:b3:47:5f:1a:ac:bf:05:b8:da:d4:25:
         f7:8d:69:1e:23:ca:ab:3e:c3:6e:5b:4e:65:72:fd:ba:76:41:
         4a:b3:27:cf:43:c9:4f:39:58:0a:ab:57:5f:d7:a2:fd:de:aa:
         01:c7:52:5b:68:20:4e:77:b3:df:5c:6b:c0:70:ba:48:7d:a4:
         7b:d6:a4:cb:d2:cd:c2:4c:83:a5:81:6c:4c:02:ed:dc:4e:90:
         79:09:f1:01:09:29:ac:37:44:81:b3:07:d9:d3:de:93:e8:75:
         6b:0f:99:52:08:e3:f1:7b:3e:d2:6a:a4:43:46:91:5b:e4:f8:
         90:53:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:00 2024 by rpki-client on console-ams.rpki-client.org