Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa
File:                     58025c98-ad3f-3b15-8090-1fa374b27453.roa (raw, json)
Hash identifier:          0ZphKObd2ZJ138bhL9iOQVvhshOyyBkhw159Tt/4bvM=
Subject key identifier:   A6:56:DE:59:EF:7E:7D:2E:EA:70:D7:4B:25:17:67:3E:9D:6D:7C:DC
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F432858471D93C7BFF4B4285F7835F3C0
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa
Signing time:             Thu 05 Sep 2024 17:36:09 +0000
ROA not before:           Thu 05 Sep 2024 17:36:09 +0000
ROA not after:            Wed 04 Dec 2024 18:36:09 +0000
asID:                     400610
IP address blocks:        66.219.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:93:c7:bf:f4:b4:28:5f:78:35:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Sep  5 17:36:09 2024 GMT
            Not After : Dec  4 18:36:09 2024 GMT
        Subject: CN=d8db71a2-dde8-46e3-a3bf-e92ecc52806e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:bf:04:5d:45:c4:e4:90:17:96:84:0a:2c:
                    c5:e5:f9:3e:23:b2:2a:ea:bf:08:97:35:99:7d:48:
                    5a:ea:a4:d1:78:a5:cd:67:61:63:f4:ca:98:97:9f:
                    62:ab:1f:25:0c:ae:98:0c:39:9d:49:97:57:b8:a6:
                    66:61:6a:a8:d0:b0:d7:f5:ce:94:da:ca:6d:17:4b:
                    70:94:73:da:bb:53:ca:18:ab:2f:67:3f:02:b0:14:
                    56:08:8b:b7:78:d7:19:d8:00:d5:12:f2:6e:94:84:
                    ca:f4:99:fe:dd:47:89:3c:ee:92:dd:1d:4f:96:cb:
                    4d:05:82:81:6d:eb:9d:c5:20:46:2d:6d:2f:cb:44:
                    4e:a1:73:f3:9d:7e:27:85:62:ea:0a:21:34:f4:78:
                    ae:70:e8:bc:e6:a7:3d:ef:5d:9f:5a:37:9f:93:e6:
                    0a:31:06:e7:01:c2:24:0d:27:e2:d3:0c:11:e6:10:
                    27:a1:00:00:ef:f5:07:76:1c:5b:6b:01:95:3d:6c:
                    f2:4c:ce:29:8e:6e:85:e2:6c:78:64:af:53:40:cd:
                    a8:11:61:46:a3:86:a8:c4:67:0e:06:3d:3d:d1:d4:
                    d8:e2:8c:4a:11:7a:a6:92:f2:fc:a9:cb:24:87:6b:
                    3d:6a:e6:56:ab:9e:5b:24:38:d8:15:e1:19:5c:b9:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:DE:59:EF:7E:7D:2E:EA:70:D7:4B:25:17:67:3E:9D:6D:7C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/58025c98-ad3f-3b15-8090-1fa374b27453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:7b:58:ce:31:51:4b:b7:bb:81:aa:ee:1c:a4:fc:2d:0f:
         c6:60:5f:e9:8d:e7:c2:52:ce:f5:91:4c:ca:c1:a4:9b:20:70:
         5d:fc:d0:6d:e5:43:95:72:56:d8:3c:89:4f:d8:14:2a:8f:8e:
         5c:b1:1c:5e:5f:c8:d3:c7:1a:4e:2d:95:65:8f:46:4c:b6:20:
         73:65:2a:9e:0c:32:a0:6b:d4:35:e3:b9:bf:54:aa:55:b3:47:
         da:66:76:c4:67:e4:c0:0f:88:e2:b7:df:73:e2:99:f4:9f:01:
         1a:41:66:ab:2a:f8:64:9a:8a:54:c2:2b:49:e4:fa:ec:9b:90:
         f3:54:15:8c:15:9d:d2:aa:24:b8:a7:81:74:f2:04:d5:a9:b9:
         8b:81:a4:07:cb:82:87:9d:40:1a:6f:3e:e5:72:bb:c3:58:3c:
         d6:7b:cf:3e:c3:94:bf:bc:38:8f:d5:0b:49:43:3a:71:f0:6c:
         aa:ad:64:b6:92:42:19:4a:01:73:fa:26:69:67:b9:05:93:06:
         a1:d3:89:5d:ae:27:6a:33:00:a8:fc:a0:57:a8:b7:3e:b4:99:
         e6:cf:2b:e7:0c:4e:b4:3f:14:8a:b7:52:1c:b7:61:41:99:a6:
         fc:f9:84:b9:eb:8f:9f:68:39:50:cf:d0:4e:4c:b2:b2:58:e9:
         68:17:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org