Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa
File:                     66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa (raw, json)
Hash identifier:          hQyS4prRsexJGMrgsmQZdlaMhT/Bb24vgK41aNTOHig=
Subject key identifier:   26:B4:C8:DB:CE:99:11:3E:17:46:E0:61:00:66:AF:8F:D0:69:C4:F9
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285847B7FBF6AA50065B0EE7364688
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     26480
IP address blocks:        66.254.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:f6:aa:50:06:5b:0e:e7:36:46:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=ebce4250-e69f-4ea0-bd37-f09d68c19680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:61:44:59:d1:cb:cf:84:c7:bb:20:ca:1c:
                    ac:1c:b6:d3:eb:07:79:ea:f3:79:91:ae:6e:2a:5d:
                    0e:ea:a9:34:79:58:d9:96:05:b4:bb:4c:a6:f9:b6:
                    78:b1:de:a3:d9:14:62:d7:38:91:b0:78:9c:6a:10:
                    1a:e8:cb:55:12:24:6b:b1:31:29:71:56:18:2b:87:
                    07:e5:c7:e2:f8:db:94:93:86:a8:36:fb:2e:3a:b9:
                    c8:a3:81:ee:67:c2:47:03:4f:44:2e:7b:69:d0:84:
                    e3:3c:1b:55:60:fa:16:f3:3d:ff:85:03:87:77:9c:
                    05:75:be:b1:eb:92:ee:8d:45:1b:e1:f5:78:50:13:
                    de:a0:8a:d3:ef:91:80:a0:ef:3e:e3:1b:a5:63:e4:
                    82:1a:75:aa:0a:f1:41:c0:45:14:65:36:f2:dc:17:
                    cc:2a:a4:74:b1:9b:cf:8e:51:35:3c:be:76:23:cf:
                    28:bc:0f:3c:8b:64:9e:cb:32:0e:74:29:9d:78:ea:
                    1c:38:44:4b:74:80:39:26:bf:ed:07:bd:6b:96:b9:
                    01:58:6c:2f:3e:17:db:65:ea:f9:db:4b:9e:26:71:
                    b6:a8:1e:75:07:8b:22:f0:0e:9b:39:43:c7:a2:10:
                    3d:b7:8a:d8:df:55:33:9b:63:38:70:fb:07:aa:e4:
                    4d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:C8:DB:CE:99:11:3E:17:46:E0:61:00:66:AF:8F:D0:69:C4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/66d3cdb8-f9de-35b5-9d87-c2f42faf8c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:98:a4:37:b4:8f:7f:60:df:e4:f2:37:a7:06:fa:c8:fe:10:
         6f:21:ac:e5:c8:8d:85:14:93:85:b6:8b:c3:c0:87:dd:2a:64:
         b1:e2:2d:44:6f:17:0b:38:5a:f5:3c:25:80:26:9e:cd:09:7a:
         4a:56:bf:b2:62:d4:ba:0d:6d:e3:9d:04:48:0c:45:61:2b:85:
         46:d6:ad:68:39:ac:20:4c:6e:69:f2:c0:e5:fd:5e:35:b0:26:
         af:82:82:1c:66:e5:75:3c:4b:b6:1a:bc:88:18:3f:3e:1c:33:
         70:fc:35:92:f9:63:43:09:a1:d0:b9:4c:6a:56:fa:4a:26:8b:
         a3:65:28:90:87:cf:d7:b7:32:bf:c0:1d:04:1b:92:b8:df:7c:
         43:fa:d9:72:66:f0:0f:51:6c:63:cc:ec:e0:3c:7e:2f:10:32:
         9c:b2:e9:07:8c:c1:28:0d:d3:7f:94:d7:67:fc:21:5b:9d:f2:
         61:09:74:0b:13:f2:ed:2a:f2:a8:bb:47:f4:7f:95:90:f0:48:
         db:42:e8:00:79:b3:8a:32:4e:9a:8d:f3:62:00:cc:52:e0:1b:
         61:2e:f7:8f:57:21:9e:47:1e:89:5b:44:07:c2:4b:d7:25:b1:
         38:37:af:e7:67:a9:61:e2:14:70:17:1e:15:b8:de:84:c5:68:
         d5:b9:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org