Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa
File:                     039bc77e-6087-3093-9191-6772277f3e24.roa (raw, json)
Hash identifier:          +PzVloVvu7T3mLCmcSQGqmLhnkeB4rgFWnFwjchPofI=
Subject key identifier:   2F:8D:92:21:52:B3:27:68:AB:4A:8B:05:5E:45:89:C5:12:98:6D:F7
Certificate issuer:       /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17
Certificate serial:       010D0C9F43285845E72921E13DFAD7AC3EC53E80
Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     33115
IP address blocks:        66.223.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:21:e1:3d:fa:d7:ac:3e:c5:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=49b316f9-777f-4b07-8635-bf4d774c229f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:3f:37:ea:8b:e3:57:c4:18:5a:dd:24:5d:
                    ac:76:2e:87:63:d8:1e:e5:bc:10:bf:f0:ba:1c:57:
                    e7:96:99:40:42:a9:d0:91:40:79:b3:6c:52:dc:ef:
                    09:2f:8d:4d:bd:40:91:7e:29:b7:4b:ca:d9:12:43:
                    b6:87:c9:ee:57:71:c9:57:88:65:98:09:e8:ff:7d:
                    1a:26:86:6f:3c:fe:50:a4:0c:25:fd:cc:3f:bf:fe:
                    ab:b8:19:48:73:04:8f:cc:79:55:d1:10:04:6a:d0:
                    d5:d9:75:eb:d0:b8:67:85:aa:cb:cf:b0:23:35:c5:
                    e1:da:94:1a:d6:0c:52:c7:c8:63:02:94:bb:e5:ce:
                    52:87:1b:00:eb:b5:19:4d:1a:8d:23:77:a9:64:fe:
                    9d:91:d0:3c:c9:05:6d:34:85:9c:94:4a:3a:70:00:
                    7c:bf:56:75:33:f8:72:88:bf:8b:2c:15:38:9e:26:
                    eb:54:60:e5:01:68:5f:bb:71:09:2b:66:8c:f6:1e:
                    a8:8b:63:a2:e3:40:5d:45:0d:03:55:8f:aa:c0:2a:
                    bc:71:18:35:2a:26:02:f0:4e:c9:97:bc:9b:1d:33:
                    81:b2:94:d4:44:82:d1:2a:38:d1:e4:fa:69:c9:3d:
                    96:a1:59:15:22:f0:1a:b8:47:7b:0c:46:82:53:fd:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8D:92:21:52:B3:27:68:AB:4A:8B:05:5E:45:89:C5:12:98:6D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl

            X509v3 Authority Key Identifier:
                keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:43:3a:c5:1b:f8:e5:b5:db:7f:b5:b3:98:72:55:ae:1e:
         ed:b7:66:3c:41:9d:1b:54:15:fc:5d:f8:61:01:f3:63:82:b5:
         46:c2:f8:e3:76:2e:3c:a3:19:b9:fe:53:2c:b1:da:8e:93:eb:
         e1:34:4e:db:39:b2:24:b7:21:cc:40:f2:0d:d7:77:9a:bd:5e:
         b9:a3:44:96:47:c0:3f:64:75:91:34:34:da:5c:17:4e:2b:93:
         63:67:85:fa:c4:77:77:70:43:57:fc:11:d3:e4:2e:b8:5e:a6:
         96:2e:2a:56:28:b8:9f:db:95:52:41:78:e2:70:05:ad:e3:87:
         08:9b:43:08:33:20:fc:bd:b5:11:8f:1f:83:08:ca:af:07:a9:
         0f:5e:9c:f5:c1:01:dc:7d:93:a4:dd:ce:57:20:81:96:c0:ed:
         60:ee:53:f8:19:8f:5c:40:60:8d:08:ad:58:a2:29:6c:fc:3a:
         31:64:03:c5:b5:77:c1:31:f9:14:52:5d:77:84:11:06:f5:ec:
         fa:27:4e:5a:9b:36:59:17:e3:cc:1f:8a:83:6c:6d:1e:68:38:
         df:a2:f2:18:62:7c:4e:27:7f:51:cb:db:3b:da:aa:9e:dd:98:
         2c:ae:fa:4f:5d:7e:ea:63:97:8f:b1:9b:b6:c3:24:ec:8b:d2:
         fa:a4:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:44:56 2024 by rpki-client on console-fra.rpki-client.org