Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa
File:                     70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa (raw, json)
Hash identifier:          HyAn+yhdp2azHqVGs9FX6kTvGBbRGrnLT3kXS5Iyah0=
Subject key identifier:   60:C1:33:25:E2:38:B1:55:A0:FC:45:56:5B:86:76:B9:61:F0:0D:5B
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858478E49F0DF9880139A7C2EDC60
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa
Signing time:             Wed 16 Oct 2024 02:33:43 +0000
ROA not before:           Wed 16 Oct 2024 02:33:43 +0000
ROA not after:            Tue 14 Jan 2025 03:33:43 +0000
asID:                     2559
IP address blocks:        66.185.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:49:f0:df:98:80:13:9a:7c:2e:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Oct 16 02:33:43 2024 GMT
            Not After : Jan 14 03:33:43 2025 GMT
        Subject: CN=2a38095a-2391-4c1d-8623-3f3b69636d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:90:de:83:80:2b:a5:b3:ac:32:17:55:59:
                    62:e7:88:e4:8f:4e:6f:ff:52:0a:e2:36:c4:22:69:
                    ce:0e:99:00:63:f1:56:d3:62:67:70:6a:d3:e9:b1:
                    50:ae:9c:fc:48:46:dc:7a:05:75:1b:d9:cb:ca:98:
                    06:b5:79:78:d2:3f:01:86:65:83:a2:64:57:18:f1:
                    2b:2d:f5:fd:49:5b:5a:0d:c1:46:d8:37:25:95:a6:
                    a9:e9:74:6f:1f:3d:f5:7d:dc:cd:6d:b9:6c:f2:e8:
                    6c:2b:13:1f:93:a6:b6:a4:55:46:53:82:66:94:7d:
                    92:3a:09:1d:03:27:dd:5b:a7:84:2c:6a:4e:a2:63:
                    d1:01:2a:e6:a9:53:a7:7e:0e:b6:2f:52:a7:2a:ef:
                    bf:05:48:4e:45:02:78:40:f3:1b:36:50:71:9d:a8:
                    c6:a1:74:e5:0f:69:48:bb:ab:c9:74:44:09:ca:52:
                    32:cf:b9:96:65:a7:8b:7e:97:ba:13:ce:a1:d6:71:
                    d1:71:2b:c8:02:5b:94:73:db:83:ea:8c:00:db:a4:
                    15:43:43:81:d8:75:57:c8:c7:06:3e:59:bf:49:57:
                    af:f8:78:07:69:58:fd:83:95:64:a3:55:ca:e8:a5:
                    a8:dd:40:41:21:40:36:55:aa:e4:b2:76:e4:d0:8e:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C1:33:25:E2:38:B1:55:A0:FC:45:56:5B:86:76:B9:61:F0:0D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/70cfa34f-ed1f-3fd8-92e7-a30bb84a1260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:13:4f:59:0f:41:ab:3c:76:f7:79:5e:fe:57:68:72:62:40:
         f4:a3:b4:a7:5e:54:37:a7:84:46:d9:04:dc:bb:60:64:ca:6d:
         7e:28:99:32:95:e3:8a:3d:71:98:2a:2b:5b:59:a4:06:99:7a:
         dc:e8:65:ec:d6:fb:51:b4:64:3c:ab:27:e4:91:a1:d5:a5:49:
         c6:bc:92:a8:b1:91:8c:48:6d:29:27:5e:b7:ff:72:ba:36:8a:
         02:c3:ad:7e:99:49:5b:d0:ab:6e:11:08:41:f5:72:b8:ee:26:
         41:a2:69:6f:c2:67:d6:b1:81:da:20:45:0c:fe:19:d6:9c:e4:
         14:0a:94:cb:ac:61:12:5d:e0:ee:2e:c7:cc:e0:fa:51:ba:41:
         9f:ca:69:0d:6c:31:5b:a7:f8:ae:72:96:f5:68:7a:f3:4c:7a:
         0c:fa:4c:5e:8c:1c:5e:e9:6a:9f:29:17:c8:43:39:1f:74:d9:
         39:45:03:f4:1d:c1:cc:17:22:21:c4:c8:8f:7d:98:08:74:d7:
         6e:e5:3f:4c:d6:ae:1e:73:e5:a4:9a:72:f6:31:d2:d9:53:d1:
         7f:4b:2e:de:cf:b6:c6:8a:49:8f:b6:a0:21:7b:6a:64:f3:cb:
         8a:04:9c:ef:d3:f0:c9:bc:1e:9e:08:3f:80:7c:e5:6c:12:a9:
         41:4f:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org