Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa
File:                     039bc77e-6087-3093-9191-6772277f3e24.roa (raw, json)
Hash identifier:          oD5JQGftcu9xAOZSH2K7BBegvGAh4zPl1zxiUb+Re0c=
Subject key identifier:   15:5A:C1:61:5F:EA:DB:BB:15:98:72:EE:D8:AF:4F:27:F7:D8:C8:17
Certificate issuer:       /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17
Certificate serial:       010D0C9F43285847A5D6AE9CE88030F4942876C0
Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     33115
IP address blocks:        66.223.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ae:9c:e8:80:30:f4:94:28:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=d1eaf04e-7dcb-4ea6-9153-cfe130d3ef13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:9c:28:4b:16:7c:da:40:17:7d:38:f9:75:
                    7a:b0:36:6d:c9:0a:47:6a:36:aa:e2:9a:cb:0d:91:
                    04:fe:cb:65:7d:30:2a:8d:cf:fb:cd:c8:54:fd:a0:
                    7f:58:f8:0f:41:5f:19:84:c0:5a:ac:0f:db:06:52:
                    da:32:17:6e:4a:27:24:4e:2f:ed:97:88:88:d8:79:
                    1f:48:b3:3b:99:66:8b:f4:20:2c:ba:40:6b:18:94:
                    53:cf:12:76:7a:92:cb:94:ca:02:89:26:1e:d5:2d:
                    76:c8:6f:7f:1b:4b:df:4b:3e:83:e8:11:c6:0d:f8:
                    aa:16:79:0f:bd:65:06:b7:51:1b:37:c1:f1:b4:73:
                    7a:3c:cc:20:36:b3:c2:21:49:5b:53:87:55:35:8b:
                    ec:a8:cd:31:db:a6:58:73:19:38:e3:e7:37:59:5d:
                    db:7d:4c:ee:b7:c9:51:a4:dc:b7:c3:d3:3d:ba:8f:
                    e5:c3:b4:e9:2a:aa:f1:81:58:32:3c:5f:d2:9b:2f:
                    f3:3d:8a:29:2c:8b:1c:76:8c:fe:ae:b9:eb:41:6b:
                    a1:63:d6:c9:77:c4:d7:46:cd:c8:b4:3d:47:bb:59:
                    40:be:34:62:c9:cc:d3:24:3d:f8:a4:08:ee:4a:62:
                    a1:20:10:d4:4a:35:c8:58:80:64:8e:35:ec:3d:d7:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5A:C1:61:5F:EA:DB:BB:15:98:72:EE:D8:AF:4F:27:F7:D8:C8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/039bc77e-6087-3093-9191-6772277f3e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl

            X509v3 Authority Key Identifier:
                keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.223.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:48:54:4d:c0:8a:ff:ed:e5:ef:44:29:78:ad:1d:8f:53:b0:
         46:15:ac:be:be:8c:d1:a7:ba:03:3b:c1:cf:3d:c5:88:91:3a:
         40:7c:7a:d8:c6:20:df:77:b9:84:9c:43:37:5e:44:92:3f:e9:
         29:60:fd:a6:c8:44:43:73:79:c3:09:95:a4:88:98:57:56:c0:
         57:c1:01:96:b9:e5:75:29:b3:70:6f:25:52:7b:ac:f2:bd:22:
         95:54:46:be:22:63:54:da:49:87:9d:32:56:2e:04:51:d2:e7:
         60:41:28:38:49:5f:6a:9d:e2:f3:82:c0:00:fd:e8:81:ae:7d:
         8a:f3:4f:1e:bb:b1:f2:db:2e:86:e6:c3:5d:54:48:24:79:3f:
         c3:93:d4:a8:b4:92:7c:da:04:87:6f:10:1d:ec:09:45:27:3a:
         bf:c4:86:1a:a6:8f:88:1f:ca:ab:e2:e6:0f:13:9a:2b:4f:df:
         a2:94:80:de:bc:bf:b7:df:3a:15:61:d1:81:71:3e:8e:03:48:
         48:7d:4d:8e:11:9e:bd:11:1c:b3:e1:2b:75:d6:7c:da:4f:e3:
         7d:b2:2a:4c:f7:8d:96:24:f0:42:f1:fb:70:0e:f3:b8:f3:8e:
         cc:0b:77:26:19:3a:b0:45:9e:1f:0f:94:19:6a:23:a8:92:d5:
         9d:f2:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org