Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/46b3aa8c-dd52-3f2a-9c7f-8f01f983da99.roa
File:                     46b3aa8c-dd52-3f2a-9c7f-8f01f983da99.roa (raw, json)
Hash identifier:          8tEQ7ONUIiJ/7j7fJwLkE5Z+zPniQQmqRxWL7CbdXWw=
Subject key identifier:   53:21:75:A3:AC:BC:7B:0B:D3:14:DD:FB:71:35:35:E7:A9:2E:8F:CA
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F432858474B1B4FFDCDB624FFA2243B80
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/46b3aa8c-dd52-3f2a-9c7f-8f01f983da99.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     16509
IP address blocks:        66.129.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:4f:fd:cd:b6:24:ff:a2:24:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=7a3aea58-1952-4a93-ba9d-51b8ffdf9964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:46:c1:d9:18:93:8a:fa:89:76:b2:06:c2:8c:
                    e4:f2:bc:58:e4:39:04:3c:94:91:54:db:f6:7e:b4:
                    30:aa:1b:f5:57:6e:c2:52:89:da:94:28:11:f0:f1:
                    af:1c:f7:66:79:7f:61:a4:14:9c:e1:d4:7b:0d:2a:
                    d7:d7:07:62:76:08:79:c7:90:bf:dc:79:d4:ea:ae:
                    83:b6:26:a7:b2:76:b1:3a:a6:ca:5e:67:a1:7e:89:
                    ef:0d:cf:ad:f3:f9:f9:f4:db:9f:a2:85:45:29:87:
                    6f:1c:95:e3:e4:40:78:1c:cb:4d:85:51:ff:e1:e5:
                    6c:7f:d7:64:de:56:be:06:be:7b:10:7a:5c:36:ce:
                    6c:bb:42:ad:2d:c2:ce:3e:27:ba:25:44:a3:7f:e7:
                    a4:b3:72:07:8a:70:c8:48:b7:48:ef:ea:b5:fc:b6:
                    cf:5a:8d:d9:5a:d8:81:a1:19:42:97:f9:bd:9b:da:
                    c9:d4:69:44:80:76:40:90:00:73:7a:93:ce:06:d8:
                    db:db:f0:3b:e1:85:68:09:1f:91:32:dc:cc:ee:0e:
                    74:54:3f:29:51:a3:52:50:17:4a:2e:7b:30:eb:b7:
                    86:8c:18:12:73:e4:79:68:47:df:9d:5a:29:c4:fc:
                    ee:0d:40:c7:b2:bd:cf:59:1f:d4:20:cc:3f:5e:81:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:75:A3:AC:BC:7B:0B:D3:14:DD:FB:71:35:35:E7:A9:2E:8F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/46b3aa8c-dd52-3f2a-9c7f-8f01f983da99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:c6:48:69:bb:b8:62:84:0a:9b:b7:98:10:a1:79:ad:32:
         49:42:0a:59:8f:46:2c:c4:67:6a:cd:f9:44:be:98:4b:be:71:
         ba:f4:dc:3a:b3:da:88:69:9e:ae:e3:74:bd:b5:92:33:f1:6e:
         65:00:98:b1:ed:3e:58:e8:f6:bd:84:ef:47:c5:81:73:f4:e5:
         a9:9f:9c:12:82:4a:09:58:2f:39:a0:70:c1:52:8e:4d:bb:c1:
         2f:88:35:48:54:3b:52:41:62:ad:be:c8:1c:e2:9d:8d:47:d2:
         47:ee:0a:cf:d5:46:af:e3:f1:3e:e6:46:31:87:67:f6:8c:30:
         48:99:3a:fd:e0:d6:f6:a3:f3:2a:06:df:85:89:41:c5:55:e0:
         68:2d:91:5d:ac:a8:ca:11:0d:ef:6f:cd:00:89:07:a6:29:37:
         fa:52:19:33:d0:27:f1:9c:4e:9b:12:9c:89:40:08:c0:8f:2a:
         c9:04:05:87:37:2a:15:4f:28:0d:a1:dc:3c:ad:e4:cf:03:e8:
         d4:14:2a:23:0a:70:b1:8f:c9:f3:e0:d6:86:bb:d8:e9:31:44:
         5f:26:e9:40:aa:6e:38:db:c1:81:1a:aa:a3:a0:88:ce:e6:47:
         f0:34:f5:d2:18:fd:c0:a9:5c:b8:10:3e:38:11:8f:12:1d:88:
         57:ae:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org