Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/b1de0819-c12d-3ec5-8904-714ba843d1b3.roa
File:                     b1de0819-c12d-3ec5-8904-714ba843d1b3.roa (raw, json)
Hash identifier:          GefUyhszyDONvkYmTasCcEqrVJ8iwyXLM6PZFbOCiNw=
Subject key identifier:   D8:2F:BC:98:94:04:D0:84:6C:AE:6B:B4:B7:11:8F:92:78:F5:E5:C6
Certificate issuer:       /CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
Certificate serial:       010D0C9F43285847C05C0F1FBC596C1BDF8FE800
Authority key identifier: 47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/b1de0819-c12d-3ec5-8904-714ba843d1b3.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     19935
IP address blocks:        66.45.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:0f:1f:bc:59:6c:1b:df:8f:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=23cb6188-f78a-4e07-bcc9-74a75d83d99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f1:4d:75:87:9d:30:13:d6:ae:32:51:cd:12:
                    71:5a:eb:52:39:05:b2:da:3a:53:fc:80:7b:81:f9:
                    b7:de:20:9e:cf:4c:32:b5:8b:f3:0e:41:a1:ea:29:
                    c8:cd:98:d2:3a:ee:69:d4:8f:9d:54:a2:2c:67:8e:
                    17:f3:3e:7b:6f:fa:92:52:97:69:e5:00:c9:c8:12:
                    76:0d:e1:79:8f:19:68:f5:70:92:76:77:92:f6:35:
                    0d:fc:27:d0:a1:34:07:3a:3d:7e:23:d5:11:97:5e:
                    80:f3:69:7d:fa:fd:2b:28:4d:86:75:c6:a5:64:4f:
                    c7:78:57:e1:de:0c:9f:9a:5d:2d:7f:56:01:dd:20:
                    7c:a5:ce:fb:f3:10:92:d4:0d:41:a3:b1:25:da:f1:
                    4b:7f:df:34:78:d5:eb:a8:be:ce:e6:0f:61:10:90:
                    1a:56:e7:da:33:f9:55:76:6b:55:00:da:75:89:d8:
                    25:c9:3e:24:e0:ef:f0:69:8d:03:fa:a3:aa:e9:19:
                    1a:23:a2:cf:da:f1:93:7f:ac:e2:96:94:46:3f:d5:
                    b9:58:df:28:b8:1e:e5:b5:a7:b0:e0:57:04:a2:61:
                    d9:f2:11:b2:39:1a:62:c2:21:5e:cf:1f:d2:fb:04:
                    d4:b6:4e:0b:92:55:87:f0:f2:ad:d5:3e:1b:bb:e1:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2F:BC:98:94:04:D0:84:6C:AE:6B:B4:B7:11:8F:92:78:F5:E5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/b1de0819-c12d-3ec5-8904-714ba843d1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.crl

            X509v3 Authority Key Identifier:
                keyid:47:99:F5:27:E4:1F:04:74:5A:3F:3B:D7:81:C9:80:18:59:E9:75:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bd8b6863-ef81-4de4-bc9e-ae9d1d2e11e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:04:fa:ab:64:83:ed:bd:6f:ff:07:15:54:93:24:7b:10:26:
         62:fe:f4:c7:3a:6c:a8:61:7c:36:e7:32:a0:3b:eb:e3:5a:ef:
         a8:97:a7:24:fd:40:85:d7:e8:f3:94:b4:99:a0:ee:e2:9f:90:
         a5:30:7a:d9:7a:be:56:5d:a2:33:12:32:80:3c:5b:fa:c0:44:
         f2:50:0e:3d:e7:7b:7e:43:4e:29:c3:fc:71:69:1b:75:3c:01:
         32:5e:20:d5:92:b8:b0:86:a9:95:3b:ca:05:67:cd:a1:25:ee:
         12:8d:05:cd:94:37:52:8d:a8:dc:0b:77:06:66:c2:23:2a:f8:
         a8:30:6d:a8:8c:b5:6a:c4:52:c9:4f:77:18:15:75:38:33:e5:
         47:74:06:22:37:2b:3b:d6:40:36:b2:e6:87:14:07:3f:8b:27:
         9a:91:df:d5:2b:70:cb:f6:59:03:13:54:02:19:10:6e:43:51:
         ba:de:99:10:1a:40:77:90:d5:24:d7:88:ce:51:fd:47:5c:23:
         48:41:f9:a4:90:5a:1b:e6:bc:33:69:ac:7f:b6:65:cc:81:f3:
         82:4a:32:61:9b:af:d2:fa:2a:74:cf:0a:a5:48:10:78:6a:83:
         7d:d0:77:99:62:5d:83:fd:46:9e:4c:2e:6b:e3:b9:d9:bf:4d:
         ae:4a:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:36:01 2024 by rpki-client on console-fra.rpki-client.org