Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa
File:                     db4643c8-62dc-3411-a667-146682d9742b.roa (raw, json)
Hash identifier:          YNYL/l9uFJH2uFblOvDuQ2ZFnS2PtcjX7ju1rrG2jYY=
Subject key identifier:   C8:34:BB:9E:FE:86:A1:82:68:17:9A:40:6E:C4:1D:C0:B9:A4:BB:3D
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F43285845734DB2FD4C236EADFA916400
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     62537
IP address blocks:        66.85.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b2:fd:4c:23:6e:ad:fa:91:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=cd74c5dd-39dc-40f5-905f-8366a78c0b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:fc:59:e5:68:15:01:b9:60:18:99:03:86:
                    8d:f7:fd:ff:75:da:be:4c:0b:69:cd:04:d7:b3:cf:
                    08:0b:c5:d2:1b:b7:0c:9b:69:49:d3:58:9a:cf:ed:
                    1e:56:a4:ba:49:d2:08:93:0d:55:d8:96:9a:43:a0:
                    6c:b0:bd:1b:90:ca:a2:24:5e:6f:1e:15:6c:5b:64:
                    ec:43:c2:e8:da:f4:7b:16:32:33:ac:76:5d:5f:88:
                    28:cb:76:82:08:a8:05:85:b7:13:fb:81:c4:9a:c9:
                    70:75:b8:59:6f:2e:9e:4d:7e:9a:a2:79:3d:1c:6a:
                    28:91:61:c3:05:6f:91:40:59:bb:72:ed:75:c6:bf:
                    d7:62:c6:79:c3:fe:03:1a:7e:78:e1:6d:bc:d4:4a:
                    58:5e:d4:79:2f:2d:4c:a1:42:d4:78:80:bc:8a:e1:
                    bd:ec:83:8d:ec:e1:fd:8c:12:39:43:01:51:99:3f:
                    40:67:b6:5e:a8:99:2e:8f:64:ce:c1:01:e3:87:2c:
                    d8:df:83:6d:9e:97:8c:03:f2:e8:78:27:a4:25:0c:
                    a8:ab:8d:24:0b:77:d9:32:f3:ca:44:aa:b1:e9:66:
                    fc:93:b2:c2:44:ee:93:4d:3d:96:ea:f1:a5:88:ce:
                    a9:e6:f0:35:f0:b1:3f:16:d8:fa:ab:92:c4:39:37:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:BB:9E:FE:86:A1:82:68:17:9A:40:6E:C4:1D:C0:B9:A4:BB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:69:66:c7:da:ab:72:6e:e2:8f:b0:1e:a8:83:d7:72:a2:
         de:1b:af:7d:bf:d3:d6:70:af:bc:4f:61:56:62:23:a6:48:2e:
         00:90:b9:32:2a:b7:c6:82:f6:5b:11:7d:08:38:c5:3b:19:61:
         e4:48:ab:98:79:1d:7d:bb:41:2d:dc:d1:8e:06:13:a8:52:80:
         c6:f0:dd:3a:28:12:54:ff:3e:b0:af:81:09:a0:38:b2:05:fd:
         88:f4:a4:f1:37:ed:04:50:20:a8:de:ce:d6:4b:e6:9b:d1:5b:
         78:c7:3d:23:ff:e8:be:47:35:18:fb:7f:cb:4e:e9:c9:4e:99:
         b7:20:a1:54:d3:93:08:f2:7b:01:e5:74:80:1e:a2:fa:5b:b2:
         d3:28:cd:07:46:1b:59:86:6d:d9:db:75:0b:6e:0f:e1:a5:3c:
         b3:d4:88:55:4a:b6:91:7b:f5:d0:92:28:8b:ff:c6:d3:7a:26:
         2d:61:38:d3:a3:9b:fb:e9:4e:f0:d7:c1:9a:db:58:b7:6c:8b:
         b8:f8:e7:61:46:c9:c4:70:c2:d0:c1:32:fa:52:35:77:db:19:
         16:8b:de:37:b3:84:81:96:b0:c9:8f:65:36:5d:36:42:b4:ec:
         ca:73:ac:83:76:58:eb:3e:8d:d8:56:86:13:a1:e4:3d:b3:ce:
         77:5e:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:20:37 2024 by rpki-client on console-ams.rpki-client.org