Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/bcc5598b-cc08-3ce3-976f-6d76c1137c93.roa
File:                     bcc5598b-cc08-3ce3-976f-6d76c1137c93.roa (raw, json)
Hash identifier:          W3/5QjmERbswESF6H9yHpJXl1nzaMXgXJm7PQaHOaLI=
Subject key identifier:   4E:D6:17:8F:07:C4:31:1B:C8:AF:0E:7D:16:E7:A6:8E:07:9C:51:DD
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F432858483D9D2FAF4F14E4EB28015540
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/bcc5598b-cc08-3ce3-976f-6d76c1137c93.roa
Signing time:             Tue 17 Dec 2024 21:47:54 +0000
ROA not before:           Tue 17 Dec 2024 21:47:54 +0000
ROA not after:            Mon 17 Mar 2025 20:47:54 +0000
asID:                     16509
IP address blocks:        66.114.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:9d:2f:af:4f:14:e4:eb:28:01:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Dec 17 21:47:54 2024 GMT
            Not After : Mar 17 20:47:54 2025 GMT
        Subject: CN=b58458db-da04-48cd-a82b-7064abc72ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:01:2b:19:3a:70:93:1f:21:5d:6f:49:d5:
                    db:da:a8:56:19:3c:94:79:b5:17:ab:01:55:90:d3:
                    2a:84:15:72:04:a7:4b:1e:7b:ea:45:f7:8e:57:5f:
                    df:e6:91:18:45:06:24:f2:13:d8:16:c5:2e:39:9d:
                    58:58:ad:e1:12:e1:c4:a7:5d:48:58:61:79:63:a3:
                    c6:dd:ba:62:44:8c:b8:58:3a:73:f4:5f:63:32:77:
                    a5:4b:5f:a7:68:c2:0e:22:7c:19:72:48:34:c1:47:
                    4c:65:18:f0:47:2f:1c:d4:d3:cd:8f:6e:12:48:82:
                    32:16:64:30:05:9d:04:0f:f4:46:42:f2:0b:ed:27:
                    71:cf:5d:d9:81:d4:00:cb:27:bc:35:72:0f:0c:55:
                    d5:bb:b3:75:a3:75:ae:b8:ec:9e:c4:ae:9a:88:37:
                    2c:e7:4c:c6:2b:00:35:b2:b3:cc:cb:c7:5f:6d:49:
                    75:b3:85:18:5b:ee:56:60:b2:4d:fc:1b:9d:b9:d7:
                    6a:23:1a:57:28:35:91:45:d0:72:ea:72:66:8a:b8:
                    5c:61:63:18:e6:51:62:40:21:ec:23:ee:83:ba:b0:
                    26:26:b4:f8:a8:9c:d4:43:34:96:53:66:7b:f7:ad:
                    7e:f3:67:95:da:fe:0a:5f:29:b9:2f:2f:2a:6d:d4:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:17:8F:07:C4:31:1B:C8:AF:0E:7D:16:E7:A6:8E:07:9C:51:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/bcc5598b-cc08-3ce3-976f-6d76c1137c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:d9:20:97:19:9d:d5:30:ad:db:5f:be:1d:a8:d5:d5:54:
         93:e9:5c:93:b7:73:fc:6d:dc:3b:c2:88:95:3a:c2:18:67:8e:
         55:ad:cb:db:ac:b4:e6:55:01:dc:63:7c:01:0a:0c:38:ea:9b:
         f8:b3:c5:82:2e:0f:91:dd:71:f8:6a:9f:52:5e:56:9c:1a:35:
         06:f0:38:c9:37:65:3b:4a:14:39:5f:2c:05:b0:ee:bd:f3:d4:
         c2:65:07:14:fa:ce:f7:d7:0f:51:d5:d7:06:71:89:0e:f3:41:
         b8:55:58:f4:ce:65:54:e5:4e:53:b8:0a:b8:3a:ae:ca:aa:5f:
         7e:aa:cc:64:f9:0a:d8:9b:aa:a2:f1:d7:95:2b:75:ff:a6:24:
         8e:d8:08:66:8a:b7:7c:2b:c8:fd:8d:34:ef:2b:07:33:42:59:
         c9:6d:d4:76:08:e2:d0:de:ee:17:17:37:68:e0:db:4a:66:97:
         f1:b5:e6:15:58:47:5b:a8:51:43:06:11:35:ad:44:e0:fa:af:
         2e:e4:af:55:2d:eb:be:94:8e:1b:ee:fa:ad:d4:2e:8b:c4:c1:
         7a:87:56:ba:d2:45:80:5d:a6:aa:24:8e:32:66:b3:2e:08:f9:
         ba:94:fb:e1:b4:5e:4d:63:81:f3:6e:71:7c:4b:1b:03:73:d1:
         32:ed:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org