Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa
File:                     8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa (raw, json)
Hash identifier:          o+MrNxeY9yFIKgstvwmcwL4RhavgbNDXlXplakcFXN0=
Subject key identifier:   54:AB:AD:31:D3:76:E1:CB:6E:6B:79:08:55:E2:70:CC:89:4C:0E:D7
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285845B38374BE9522108914DF4080
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     6079
IP address blocks:        66.44.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:74:be:95:22:10:89:14:df:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=80bfbfcb-87a1-4d0a-9fb7-2bf7130482ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:65:44:55:83:47:d5:4f:a6:c5:18:98:70:34:
                    34:02:f7:69:b0:da:11:9d:91:9c:96:e4:6b:db:13:
                    46:ef:df:f0:4d:29:c8:ee:5a:f5:dd:bb:41:7c:58:
                    09:03:24:2b:cc:58:70:0e:88:7c:dd:d6:49:a7:24:
                    25:be:c9:ff:af:98:34:40:48:7b:87:2c:cf:36:ef:
                    26:f3:69:19:59:5e:eb:47:68:78:a8:15:a5:99:9d:
                    c5:71:c3:f1:33:4f:cc:49:d7:85:0f:42:aa:7b:3f:
                    ea:80:76:9a:ea:d5:96:d0:6b:9b:56:ab:ba:6b:2a:
                    9d:77:da:35:97:71:51:3b:a0:fa:f1:3c:f4:d0:bc:
                    e4:11:5a:fd:51:d5:ec:82:61:61:1f:78:e0:c1:69:
                    ad:9b:c4:4c:15:32:f7:e1:27:1d:68:ae:3e:fc:2d:
                    17:75:0a:51:68:14:9d:b5:58:c7:e9:d4:cc:f8:f4:
                    4a:c7:ac:52:e5:36:76:93:88:82:27:3c:c4:61:7d:
                    6b:67:77:9c:b1:91:83:a1:3e:00:7a:15:2e:37:d9:
                    9c:20:95:74:67:83:3b:c1:bb:ce:ed:6d:da:55:c7:
                    89:9d:a3:fd:5b:d6:61:04:d9:38:d0:aa:42:02:a5:
                    85:d9:5e:50:dc:2c:9e:4b:5e:0a:e1:11:00:3a:4e:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:AD:31:D3:76:E1:CB:6E:6B:79:08:55:E2:70:CC:89:4C:0E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8f20b61f-0a80-331c-8ace-eb8a4d306dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.44.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:1e:3e:3c:19:0d:2f:8e:73:e0:8f:4c:25:66:e0:a9:3d:
         85:e9:d6:3f:8b:5f:c9:42:3a:e0:ab:10:c3:c3:58:e1:5f:3c:
         56:93:7b:b3:88:93:6c:74:98:2e:f8:54:2f:b1:6e:1f:a7:c5:
         37:1a:e2:06:bb:65:35:26:29:94:19:10:01:fd:7f:ea:3c:78:
         5f:2d:8f:01:95:bb:c2:ce:4d:24:15:45:da:40:54:83:bf:ac:
         10:1f:fc:89:ab:81:66:4b:80:98:bb:e0:4d:25:10:04:c5:db:
         8f:d2:04:47:df:b7:f7:ae:f1:c9:64:81:80:c3:c2:9d:8d:48:
         6f:d5:f4:a3:c3:74:7b:f6:09:dd:0f:4b:4b:37:6c:2e:83:46:
         b1:b3:b3:a6:0b:95:4c:23:cf:a0:fc:47:2b:bd:15:a0:bc:d7:
         7c:5f:ee:58:db:e7:b3:b9:e6:ac:31:0d:81:49:f7:92:00:b7:
         cb:e1:64:75:78:e0:53:49:db:3b:55:b3:f1:ce:3d:5e:e7:6a:
         98:08:f3:b7:7c:f8:fb:74:8a:57:39:30:3f:c5:51:1e:72:6f:
         43:90:95:79:d1:d7:52:50:50:15:4a:fe:87:9e:59:91:d4:be:
         db:e0:07:db:53:70:70:74:5e:cc:16:31:08:f4:b1:db:1f:29:
         74:0b:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:09:33 2024 by rpki-client on console-fra.rpki-client.org