Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa
File:                     46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa (raw, json)
Hash identifier:          QwEEeP5dQFexTL0h+vnmHyenK5GzaSaJ1vNB0FRfhck=
Subject key identifier:   47:C9:29:CF:50:47:6E:DD:9B:B7:7D:D3:9A:87:C0:B8:87:71:37:23
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED00AA83B57635975C5D540
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     54858
IP address blocks:        66.235.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:0a:a8:3b:57:63:59:75:c5:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=75a66bce-3d18-4913-8a63-39e16963260f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:25:47:90:d5:f4:90:c3:64:e4:ef:cb:b0:
                    1d:bf:24:41:b3:9f:40:0b:b2:7d:66:bc:e5:c2:d1:
                    99:4a:67:b8:1e:ee:b1:5a:ae:1a:ec:92:de:90:8d:
                    26:43:b8:ca:12:ee:d5:15:e5:6e:7f:68:3e:b6:53:
                    cf:70:f2:23:a6:25:f3:e9:f8:04:ba:fd:9a:68:fc:
                    75:28:43:19:27:9c:a0:a3:c4:16:47:90:e4:f1:f6:
                    13:43:d0:b8:a2:09:fd:c2:83:49:3f:e2:86:da:b9:
                    12:8a:0e:41:4e:85:b9:0d:8c:81:84:8a:79:8c:20:
                    2d:02:c2:f1:69:4a:45:ca:66:bd:29:fb:7c:93:eb:
                    dc:f2:17:01:ac:e4:f5:9e:49:70:af:aa:81:de:3c:
                    19:19:c2:62:75:ee:c2:98:d8:6b:47:84:5a:c2:99:
                    c1:da:6a:9b:e1:89:80:3b:98:fb:7c:73:f2:eb:e9:
                    66:2a:0a:ba:68:02:a7:77:af:31:8d:cc:31:46:8f:
                    12:d4:1f:6e:63:02:a2:5e:c9:27:d4:4d:45:36:c0:
                    9a:cb:13:0e:35:ab:08:77:3e:7c:21:db:77:82:ed:
                    95:1d:70:a7:39:1b:f3:fe:b8:d2:6e:e4:e3:a4:bd:
                    d5:3a:0b:26:49:a9:33:76:d0:db:3c:71:a5:67:74:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C9:29:CF:50:47:6E:DD:9B:B7:7D:D3:9A:87:C0:B8:87:71:37:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/46a50e31-3c52-3ac0-a8d7-56fc1bf0157c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:f7:bf:5f:72:58:e4:77:a9:88:1b:2e:c9:c5:28:00:8c:
         e5:07:9c:8d:31:03:5a:e0:09:d3:9c:cc:8c:95:84:5c:5d:30:
         a1:9a:e2:b8:a1:d0:dd:81:08:42:1c:70:25:08:7d:35:7c:45:
         0b:7c:d0:1e:e6:13:49:a4:0d:1c:03:31:32:0c:a0:3f:a8:b1:
         55:64:67:21:d3:53:1e:80:96:5d:48:d1:19:43:00:8f:ee:be:
         a1:c6:9b:59:5d:09:90:fa:1f:da:48:21:82:01:0c:e9:9f:6a:
         b3:11:2f:ec:92:b1:fe:cc:f9:c8:b1:ce:4c:94:c6:a7:b5:f8:
         7a:64:fb:b7:70:5d:b9:d9:df:01:13:73:0d:f9:02:21:b8:f4:
         d0:68:ca:10:98:19:8b:03:fd:49:44:67:47:ad:c0:ec:c8:a8:
         0c:19:15:47:86:9f:65:44:77:5b:e8:d8:96:12:5f:ce:a1:79:
         f3:33:9c:12:c4:d3:ec:45:b2:3e:9f:71:8a:2c:c3:0c:8e:b5:
         6f:e9:7e:7c:96:26:a8:0a:07:b4:9f:e0:90:f0:b7:9f:47:ce:
         78:cd:d4:81:a7:f8:25:d4:3a:9b:45:26:a9:36:12:7d:53:d5:
         cc:2f:49:63:4c:fc:8c:00:b6:5d:74:ef:70:5b:c5:bd:9e:d4:
         ee:d4:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:11:04 2024 by rpki-client on console-fra.rpki-client.org