Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa
File:                     9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa (raw, json)
Hash identifier:          zYwhYKGmWVbHaEoNCKbEnkCuJAdteAq7OViJ3dV1SHk=
Subject key identifier:   CD:C6:99:B4:71:5D:DD:FB:53:17:52:6F:A9:E8:59:A2:69:D1:1C:A5
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F432858471D95C6F265F66D4905C3C840
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa
Signing time:             Thu 05 Sep 2024 17:40:10 +0000
ROA not before:           Thu 05 Sep 2024 17:40:10 +0000
ROA not after:            Wed 04 Dec 2024 18:40:10 +0000
asID:                     400610
IP address blocks:        66.219.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:95:c6:f2:65:f6:6d:49:05:c3:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Sep  5 17:40:10 2024 GMT
            Not After : Dec  4 18:40:10 2024 GMT
        Subject: CN=8056264a-9e93-4ecd-acfa-60f3a62d4c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:f9:f1:6e:50:e3:51:8c:18:f3:04:a5:72:
                    0a:de:37:52:eb:bf:52:ab:88:84:85:f8:6c:a1:d8:
                    ab:3d:14:4a:2b:a7:53:f5:fe:03:29:3a:50:a6:b9:
                    7c:31:5a:83:c1:d2:1f:4f:bf:0c:9e:3a:92:43:a3:
                    bf:c0:e2:d1:e4:2c:7d:38:2b:a9:a2:64:e5:00:34:
                    26:95:c5:ae:77:92:39:f2:c0:d5:fd:ae:ca:1d:b6:
                    60:51:1f:5a:74:cf:ef:7e:ba:84:4a:73:4f:51:0e:
                    81:7c:15:62:e9:f8:b9:a3:6c:54:6c:1e:12:48:e7:
                    49:6c:35:33:05:0f:83:ba:ff:8b:0b:96:d0:e0:b0:
                    c3:66:03:e1:7e:d7:68:f0:dc:5b:3d:ea:fc:c3:22:
                    37:e7:8c:4c:13:58:e5:9f:36:67:fe:98:5a:2d:dc:
                    1b:21:37:f9:d2:1c:3f:b5:aa:4b:a7:49:66:1f:0e:
                    fd:8b:eb:1c:d4:c5:0f:cc:d2:79:d9:c1:f8:30:e6:
                    c4:3b:f8:02:06:a9:42:82:3b:7c:97:de:10:74:8a:
                    51:11:b4:49:bd:9a:88:00:ce:4c:a4:bf:a0:32:99:
                    07:2d:c1:13:73:4a:a8:6a:d2:ad:00:dd:70:34:a9:
                    60:a6:72:f4:88:d7:ad:5c:ab:93:93:c1:8a:78:db:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:99:B4:71:5D:DD:FB:53:17:52:6F:A9:E8:59:A2:69:D1:1C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/9750c184-7f20-36fe-a595-1a4dd6eeef6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:77:d9:b8:02:3d:da:c4:03:c9:eb:a1:4d:f2:9f:ab:8d:
         4f:d5:31:91:cb:22:b5:e5:3c:96:30:76:d9:35:e2:40:99:a8:
         0a:50:f3:4c:23:27:09:d1:c4:d1:64:c9:21:75:dc:bd:c9:73:
         23:7f:9e:a7:b8:8f:e5:ec:94:4a:34:72:43:55:f1:c0:6c:e9:
         78:54:be:22:23:1c:e8:23:41:3a:da:56:97:e4:81:25:69:7d:
         f7:26:20:f6:4b:91:6b:e0:b9:e5:54:e0:af:6c:aa:b8:26:7c:
         b3:ae:0a:d1:74:e2:9e:a1:81:4b:d9:57:5a:d2:54:ce:2d:4a:
         6b:c0:7b:d8:89:40:f0:94:a1:a9:0a:b1:73:72:42:5d:38:bd:
         f3:4d:82:b8:a3:c9:ea:5d:a2:2a:57:41:a5:92:b9:05:81:f7:
         d3:94:bb:fd:43:dc:20:21:22:6b:51:24:f2:62:f4:41:84:9f:
         e7:dc:45:44:6e:b4:c8:9a:ce:82:7e:6e:95:29:4b:ee:02:d4:
         2b:af:47:01:49:fc:9d:ca:11:a6:a6:71:e7:0c:74:28:57:9a:
         3f:c4:d1:ea:10:8b:f8:44:24:dc:28:42:19:92:ed:19:f4:53:
         51:ce:c7:b7:43:04:4f:01:9d:f2:19:79:30:76:19:30:30:10:
         cc:b8:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org