Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/f479998a-2c3e-3951-8579-6a3e9079ce11.roa
File:                     f479998a-2c3e-3951-8579-6a3e9079ce11.roa (raw, json)
Hash identifier:          E0eaiPDjex1zxOAvgjkhxTaLGz69MzkZ8KFmaVFtqlE=
Subject key identifier:   08:75:95:B4:37:F1:8E:A6:55:62:9F:34:83:76:A1:19:84:3E:20:F4
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F43285847739646B0F0A2CC3B985E7A20
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/f479998a-2c3e-3951-8579-6a3e9079ce11.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     396417
IP address blocks:        66.203.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:46:b0:f0:a2:cc:3b:98:5e:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=eed75c43-ec0b-40de-8742-1d28553eb62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:31:35:a1:a8:3b:0b:e4:d2:f7:03:17:3d:
                    23:8e:ce:6f:76:21:aa:de:8a:c4:ca:52:12:91:90:
                    d7:bc:88:98:a7:66:2e:6c:cf:8b:73:6b:74:0a:f3:
                    2c:5a:0c:7b:f0:a5:71:ed:db:5d:77:a4:fe:e7:d8:
                    18:9d:de:f8:b8:50:ea:28:9a:8c:86:ce:d6:dd:f9:
                    56:23:82:49:ec:04:11:be:cf:a6:d8:1f:cf:60:3c:
                    0e:dd:ed:df:30:d5:1e:18:c1:d0:1f:79:f2:93:be:
                    e5:80:a8:ee:b1:11:f3:93:90:68:20:dc:b0:4a:2d:
                    d6:32:74:5f:19:d8:1c:22:39:5c:41:3e:10:0d:cf:
                    48:68:7a:61:9d:60:6d:39:d4:4b:ec:da:f1:ea:2e:
                    be:c7:1a:ed:0f:b1:dc:22:3e:ff:bf:96:b1:e5:35:
                    9a:d6:b6:0b:93:7f:f8:38:d0:ed:05:71:f4:d2:da:
                    0e:0f:8a:7e:09:da:70:e0:66:a4:8f:ab:0f:57:5e:
                    96:b2:91:b6:42:0e:1a:47:94:90:79:c2:f1:49:74:
                    0f:97:94:c2:08:31:40:ed:95:af:51:c8:02:a6:b5:
                    56:1b:b2:45:93:13:1c:ba:17:e7:58:df:59:e8:a1:
                    f5:3e:d5:71:b8:06:89:42:36:98:78:aa:21:de:fb:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:75:95:B4:37:F1:8E:A6:55:62:9F:34:83:76:A1:19:84:3E:20:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/f479998a-2c3e-3951-8579-6a3e9079ce11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:4e:47:e9:6f:cb:47:bb:54:3d:da:c9:12:be:ef:96:57:
         e1:72:77:3b:46:58:06:fa:55:45:de:51:41:f4:93:92:a0:46:
         a1:10:3a:92:8b:d5:fc:b2:30:c1:f7:2d:7b:f5:fc:af:ed:23:
         d4:07:4f:47:b8:86:85:97:8f:e8:24:61:fc:53:a0:13:69:d9:
         e8:69:c8:98:22:db:52:7e:95:83:b7:85:a2:b1:6d:34:5d:bf:
         84:dc:ac:bf:01:7f:20:c7:59:92:1d:3b:af:f9:23:02:d3:56:
         08:1b:ce:4c:3e:f0:22:ff:97:37:ef:bd:bb:6c:7f:10:08:c4:
         be:ef:7d:90:41:db:40:07:e8:2d:ef:f5:39:6a:6b:7d:28:dc:
         e2:03:bb:26:88:12:ba:c0:1d:f3:47:60:3c:31:e7:b3:f8:38:
         a6:f8:ca:bb:19:b1:a5:25:27:34:bc:1f:6a:8e:08:64:06:08:
         50:3c:5e:19:87:da:99:c4:37:1c:be:73:41:1a:b8:df:bd:d1:
         a7:8b:a7:e4:df:29:2b:07:45:c2:18:21:f2:a8:13:1e:03:4d:
         c4:44:6d:cf:24:ab:2a:2c:11:a9:da:cb:fe:89:e6:f6:36:7c:
         69:cf:f2:d0:c8:e4:2c:8d:ea:ed:55:ef:1c:a1:ea:08:18:14:
         5e:40:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:51 2024 by rpki-client on console-fra.rpki-client.org