Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa
File:                     c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa (raw, json)
Hash identifier:          gJNa4LmiOPPIG3WED8wP6Z3/FOIkxCtcPHNLzTrgt6k=
Subject key identifier:   7B:77:F0:76:C1:A5:35:8B:D3:24:E6:0A:9A:1B:CC:EA:DD:2C:E2:B5
Certificate issuer:       /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Certificate serial:       010D0C9F43285847872134986AC40C24E74A5580
Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     394056
IP address blocks:        66.33.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:34:98:6a:c4:0c:24:e7:4a:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=ababd260-d806-4f48-b599-7e7814c3c0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:ed:71:e9:4f:19:9e:2c:e6:ef:7b:c1:e6:
                    ff:28:62:e3:42:3b:cc:77:2b:e6:83:07:4f:e0:52:
                    67:08:20:7e:85:5f:f4:fd:4c:7f:01:97:a4:d3:ad:
                    f8:bf:1c:67:a5:87:40:2f:05:02:2a:fb:1a:1d:0c:
                    60:6d:b7:57:7b:0c:b4:b6:01:c7:88:46:7f:f1:1f:
                    5c:8d:c4:b1:59:e9:70:94:51:8e:1b:d8:06:3e:da:
                    42:1b:96:4a:1a:4d:4b:7a:8b:b1:8f:b7:17:3d:c4:
                    94:c5:23:ea:61:01:dd:da:46:f7:bb:eb:00:1a:25:
                    2f:cf:4e:3b:3c:5f:5b:f4:ad:fe:1e:dd:83:ca:86:
                    86:5a:c4:5a:d7:6f:48:80:2d:ac:b8:c4:3f:30:4f:
                    e6:ab:61:55:57:15:2a:ea:5e:a0:8c:1e:ea:cd:99:
                    a6:8a:f4:76:89:c7:7c:7a:3c:97:34:f5:c7:d5:bb:
                    e8:bc:d9:f8:e1:0c:1c:5c:02:82:05:ad:e4:39:8e:
                    db:14:0d:7a:a9:7f:a4:b4:91:70:0b:88:ae:78:6b:
                    d2:6f:24:9c:5e:f7:df:0f:97:56:fa:60:70:50:4a:
                    af:47:73:df:80:83:dc:b5:62:25:33:b1:ce:2c:88:
                    21:79:1f:09:3a:07:0a:82:f3:13:2c:8c:3d:82:35:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:77:F0:76:C1:A5:35:8B:D3:24:E6:0A:9A:1B:CC:EA:DD:2C:E2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/c6e6b201-872c-3a94-87a1-dd20073fe2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:a1:6e:a4:0d:96:af:35:48:1a:d4:71:5c:8c:81:35:45:
         29:19:ac:4c:d2:23:51:7c:1a:8e:6c:9e:56:5c:18:66:8a:e1:
         ef:70:d4:ec:0f:c3:ff:af:0b:75:ec:74:2a:3c:90:7a:d9:11:
         9c:01:af:01:5c:23:3e:5c:3a:57:02:3d:a7:40:b4:e1:aa:03:
         b1:33:e9:6f:27:98:78:40:4c:05:fa:ba:31:0a:b3:8e:ce:80:
         65:a8:4e:a0:5a:eb:c2:30:73:1e:c6:fa:8d:3c:74:c7:91:20:
         d9:77:57:f0:40:d1:ff:62:56:96:59:5e:0d:ac:50:b8:df:4e:
         1c:c3:1a:d9:52:e2:4d:2f:0f:57:13:21:82:86:8d:9f:27:5e:
         83:23:f5:e5:ce:18:fc:7f:aa:6a:ea:e8:2c:53:44:a9:4c:fe:
         96:7d:06:e3:02:68:d4:60:0e:6d:65:f8:5b:4c:15:fd:ed:8c:
         da:a6:e8:f5:7e:a1:af:4f:e6:f7:65:c6:04:3c:f5:f5:e1:98:
         58:6c:1a:c9:3a:29:f8:84:a4:cd:e2:a7:81:1f:a3:e7:0e:cb:
         41:18:e1:03:fa:01:23:4a:f6:1a:d3:27:30:b9:cf:96:7f:72:
         33:d0:77:93:86:59:c2:18:00:ab:e5:fe:3a:00:a8:3e:9f:6b:
         0d:7f:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:35 2024 by rpki-client on console-fra.rpki-client.org