Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/702c173e-87d0-3dcd-9854-c8702cd1c708.roa
File:                     702c173e-87d0-3dcd-9854-c8702cd1c708.roa (raw, json)
Hash identifier:          oF5l7pMnyDSThPJg1kCACD4PA3XazudzJmerOkkL3rY=
Subject key identifier:   A9:4C:FE:4B:CA:C9:68:70:4B:71:A8:50:7F:C9:3A:9E:63:CA:99:01
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F43285847D404A69A2F905B13950ECA00
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/702c173e-87d0-3dcd-9854-c8702cd1c708.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     16509
IP address blocks:        66.129.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a6:9a:2f:90:5b:13:95:0e:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=3c4b244c-6ff9-4445-9e90-7d7f6fe4e29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:27:cb:20:c9:aa:c1:39:81:dc:6b:37:a1:
                    07:5e:66:b1:f5:fd:8b:bc:0b:2c:b8:71:ad:50:b5:
                    c0:0e:5d:47:60:60:86:f0:2d:a7:69:cd:80:51:cd:
                    ef:d0:63:a0:a2:4b:cb:63:48:3d:2d:bf:6e:39:1d:
                    d3:88:9e:dd:ae:a2:41:de:dc:e7:52:0d:6a:e4:58:
                    58:16:5b:a9:32:b8:24:29:32:84:6e:bb:d1:46:60:
                    6c:eb:4b:dd:06:af:db:e8:15:e9:ae:f4:fc:f3:ff:
                    c3:6e:27:a6:30:80:39:c0:23:04:ce:0a:0c:f1:6d:
                    d2:f6:10:ec:51:60:e6:4d:8d:b4:b5:88:83:f8:9a:
                    bb:eb:e5:00:d9:1c:4a:88:41:ff:9a:f3:73:19:94:
                    57:d2:47:64:4c:af:e7:3a:91:90:22:56:e7:54:e1:
                    d7:f7:9d:fa:e1:42:01:55:93:37:73:31:8f:b7:c3:
                    65:52:b0:89:e8:f4:84:52:9d:7e:b7:79:53:fa:94:
                    35:b7:b7:c8:62:9f:10:28:1b:4c:2a:a0:cb:8a:6f:
                    5e:49:9a:e6:7f:59:e1:ab:c1:c6:08:c0:38:1e:47:
                    c2:eb:1a:82:89:64:da:7e:55:a4:53:7a:b3:ad:78:
                    e0:54:6d:9d:ba:5b:58:bd:b0:33:79:a6:4d:1d:2c:
                    63:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:FE:4B:CA:C9:68:70:4B:71:A8:50:7F:C9:3A:9E:63:CA:99:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/702c173e-87d0-3dcd-9854-c8702cd1c708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:3d:da:9c:35:22:e4:fe:f6:5d:cd:f9:16:f6:51:d3:58:
         81:83:ab:3f:1d:1c:dd:c7:16:91:cc:97:15:9c:99:6c:93:00:
         66:cb:72:c0:dd:b7:6c:88:9e:14:1b:ad:65:5d:aa:b7:48:88:
         a0:87:a4:fc:49:c9:85:00:19:ec:35:1a:27:ce:0e:7e:09:db:
         65:87:60:a3:b8:a7:cc:bc:35:00:80:32:fe:22:1f:96:c7:e3:
         4b:b3:d6:f0:07:1e:e3:dc:13:1d:41:9d:aa:e4:66:77:ca:b6:
         7d:e0:3d:3b:5f:6e:4d:63:fe:10:3d:5a:84:65:12:27:1d:2b:
         dd:2f:88:af:9d:1c:78:ae:93:30:ee:d3:4c:8e:fd:e0:5c:b3:
         bb:bb:4e:cc:ca:e9:2c:66:1f:b0:09:4c:cd:66:25:21:0b:1d:
         a1:f0:27:4d:23:ab:ea:a1:90:45:03:59:e7:63:9f:6a:51:c9:
         dc:16:9a:4a:02:87:f1:b5:56:c8:11:e0:c0:2f:a9:08:73:60:
         3a:dc:f6:7c:1d:eb:07:d3:1b:8f:65:7a:f2:4e:aa:cd:de:95:
         5e:a5:b8:4c:fa:19:20:c5:7f:61:fb:1e:14:47:a8:e8:7a:02:
         a5:02:56:20:b0:fc:7a:4b:fc:bf:fb:9b:96:f7:aa:65:e8:5e:
         d6:f1:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org