Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa
File:                     4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa (raw, json)
Hash identifier:          kwpW48pzYRPjBY3AapljTR6dTmTQx5dGXo0C3wtBvpA=
Subject key identifier:   30:EB:B5:C4:C2:52:02:99:51:1A:42:77:B4:26:37:7F:8F:6E:1C:44
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F432858459368D0374B59B785E578DB00
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     6954
IP address blocks:        66.181.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:d0:37:4b:59:b7:85:e5:78:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=0b160ba6-4fd7-4dcf-94c2-18aa8e338bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:b9:18:1f:eb:5f:42:ef:fe:ab:85:c3:d5:
                    2f:e6:9b:cc:84:34:55:80:81:d2:5c:71:f5:72:92:
                    a6:89:5c:ca:35:c0:e3:1d:af:4a:ef:d0:46:20:43:
                    75:5e:28:20:46:51:f7:5d:e6:78:1d:78:c3:5b:6c:
                    f7:c3:11:43:ce:95:39:77:e8:7f:5e:d9:42:2d:d2:
                    43:5e:a2:ce:60:a3:23:bd:e4:51:15:68:19:8a:85:
                    8c:e8:cc:ba:34:59:7e:ae:79:1d:84:6e:90:f2:cf:
                    00:22:5d:53:2b:bc:7c:4a:93:a2:45:e1:db:e2:4d:
                    30:f6:10:43:64:df:58:1e:c5:ee:af:4b:08:29:d3:
                    25:0b:e4:6f:bc:d1:5a:9c:4a:a6:be:48:fa:1d:8d:
                    6b:22:2e:98:d4:77:00:8a:4e:54:58:04:7e:1a:f7:
                    77:2d:a3:99:66:b4:eb:02:6f:ed:d3:cc:b9:ec:b6:
                    85:c4:4e:6e:11:87:fe:5f:65:fc:18:90:99:39:a3:
                    69:3e:1c:a0:2b:c6:b3:a1:be:c3:6d:cf:7c:a5:08:
                    f0:82:d4:1e:2d:bc:e2:16:15:21:1d:39:84:e5:7a:
                    a8:2e:ed:0a:bc:01:9a:78:b5:04:a7:4b:bf:2a:be:
                    cb:60:3d:a9:0e:c5:3a:c4:40:de:8b:7d:10:42:f0:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EB:B5:C4:C2:52:02:99:51:1A:42:77:B4:26:37:7F:8F:6E:1C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/4813f2a7-c5a3-3d8e-bbc1-363a5eb7a802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.181.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:88:f5:66:6e:9f:50:8f:c1:c5:8f:0c:02:67:fc:fc:86:
         66:ba:4f:f1:76:44:84:f2:34:08:c8:fb:c6:86:cd:3e:dc:d1:
         33:f8:d8:8e:aa:56:c4:a4:88:87:f9:38:66:5f:ea:98:29:39:
         7e:25:3a:20:7c:1e:23:9f:8c:bd:fa:25:0f:b0:e5:b9:20:11:
         ba:9e:d9:74:31:ba:92:0a:67:60:c9:8d:8d:13:2b:d6:fc:ae:
         1b:39:5f:80:8a:bb:41:b6:7a:81:38:64:b5:1d:30:bb:a2:ed:
         fb:ea:3e:c8:20:76:db:ba:31:13:80:e7:cb:79:6c:6d:46:ab:
         84:cd:d4:96:27:47:68:2f:38:d0:9e:80:20:c5:56:5e:79:c9:
         88:e0:cc:0a:75:3c:3f:01:bd:30:31:77:4c:ac:30:75:07:b3:
         29:ed:bb:e8:db:a8:b3:b7:15:a7:e1:62:7e:6c:dc:67:04:5f:
         0f:a4:82:68:22:8f:1c:14:ba:00:df:22:56:f9:59:ec:99:9b:
         03:dc:6b:ed:a6:79:3c:ed:e1:6f:01:de:77:a8:c5:d3:0c:b0:
         9e:ed:02:a9:39:a9:f7:aa:21:be:33:42:e4:5d:3c:73:00:31:
         b7:9e:8b:d3:cc:06:38:3c:2d:df:a1:ab:3b:95:bb:23:43:c3:
         2d:28:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 20:58:55 2024 by rpki-client on console-ams.rpki-client.org