Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
File:                     1e204b9c-d198-320b-b509-fd1c19879317.roa (raw, json)
Hash identifier:          uigrKxIXQplDJoYGgxxcCGSZCXe0xdH/ns+X8ZUNoUM=
Subject key identifier:   F9:41:84:1C:35:1B:66:D7:58:8F:FD:65:77:57:C7:EF:AB:84:75:F3
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285845724F87DBA499E6BE94DC09A0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
Signing time:             Fri 05 Apr 2024 16:28:28 +0000
ROA not before:           Fri 05 Apr 2024 16:28:28 +0000
ROA not after:            Thu 04 Jul 2024 16:28:28 +0000
asID:                     2734
IP address blocks:        66.128.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:4f:87:db:a4:99:e6:be:94:dc:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr  5 16:28:28 2024 GMT
            Not After : Jul  4 16:28:28 2024 GMT
        Subject: CN=a7e3aa5b-06a0-46b8-b5b8-ebcb28524a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:71:99:84:27:11:d1:26:f9:99:ef:49:aa:34:
                    aa:8b:bc:7b:60:ce:6a:17:3e:c1:1b:a9:71:b6:34:
                    aa:2a:13:61:60:05:90:e2:19:cb:e0:4d:68:f0:12:
                    bc:55:50:98:0f:41:b9:ad:0b:05:66:77:73:aa:9c:
                    81:f8:22:26:9e:ea:0c:1d:b9:38:16:c6:6d:e8:71:
                    97:d3:41:d6:e7:e4:c6:2a:8f:0f:38:97:d1:93:6c:
                    11:e5:65:b4:54:44:9a:01:65:7b:c6:0d:f3:8c:7d:
                    32:03:84:fb:b4:95:e7:fa:cd:08:d3:50:c2:47:0d:
                    8e:61:e5:3b:19:b7:9d:02:b9:f7:2c:57:57:5d:3b:
                    4c:8e:a1:97:90:ec:aa:f1:22:1b:09:fa:73:d5:61:
                    6b:0b:96:6a:34:f3:57:be:a3:2c:09:d3:ed:ee:e7:
                    ab:ec:39:03:54:ab:46:b3:a3:fe:6b:5a:aa:2e:22:
                    e1:c0:7f:32:16:a6:36:82:5c:6b:84:57:d5:70:4d:
                    3f:74:3a:55:3d:86:80:24:5b:cd:49:eb:3f:76:2e:
                    fd:8b:c7:ff:8c:a0:99:f5:c6:ef:ba:b5:b0:65:88:
                    ad:62:e9:1b:a2:b2:e2:68:11:1a:f5:d6:c6:30:47:
                    0a:4b:06:4d:3c:fa:ab:d7:0b:97:cd:56:40:fc:7f:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:84:1C:35:1B:66:D7:58:8F:FD:65:77:57:C7:EF:AB:84:75:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:e7:52:e9:5f:8f:a6:ca:ca:63:27:60:04:22:7e:c9:da:
         b3:26:b8:ca:54:bc:0b:31:70:24:a6:7f:55:bb:a4:bc:19:31:
         d2:30:16:eb:bf:b6:29:7e:2a:cf:80:0b:45:c1:15:52:71:03:
         d3:40:ef:e6:d6:cb:05:c1:73:24:39:99:24:ac:f1:5d:b3:05:
         e9:38:8d:7d:10:30:34:2f:b7:93:f3:e1:5a:9b:9d:1d:8a:e6:
         a3:38:73:6f:bc:c9:f8:b4:3a:ff:63:5b:08:0e:ca:af:54:4e:
         0e:80:9e:5b:ef:5e:86:8e:9d:97:9f:d0:95:20:63:f1:bc:0d:
         e8:b2:96:c6:94:39:a5:84:eb:93:8d:c0:0b:0f:a6:17:80:17:
         20:58:6e:52:5a:e7:67:85:86:71:0e:88:9a:0a:8d:ca:6b:6d:
         e2:1c:6b:37:f6:cc:07:1b:41:0f:93:22:dc:a1:b7:db:1e:73:
         c6:dd:96:c5:d0:3f:ea:45:86:92:ca:48:63:50:61:07:59:06:
         db:cb:a5:30:48:aa:2e:f9:17:dd:9f:8f:77:66:3d:0e:0a:1b:
         dd:7f:28:6e:a3:70:f2:81:20:95:f5:13:87:db:df:4f:e5:33:
         60:cd:44:7a:65:46:dd:ce:ab:8a:7b:77:d1:86:1b:39:b8:1b:
         b9:91:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:58:10 2024 by rpki-client on console-ams.rpki-client.org