Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c21a78d0-21f9-35ee-87f7-d92298a31c9b.roa
File:                     c21a78d0-21f9-35ee-87f7-d92298a31c9b.roa (raw, json)
Hash identifier:          Cf0YRLRSQSyQUdjMJhf8/rgX5RDEt+pDd0w/VI+iihw=
Subject key identifier:   99:5A:BB:C4:34:3B:53:FF:8F:84:36:39:BC:CB:74:1D:33:BB:9B:37
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858472F307E54BB7292FE8038DD40
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c21a78d0-21f9-35ee-87f7-d92298a31c9b.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     2734
IP address blocks:        66.128.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7e:54:bb:72:92:fe:80:38:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=a0286e99-4ced-4a36-8e08-0cf25b4ab046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:ab:e6:28:e3:ea:b1:b3:71:c2:96:ab:b5:
                    43:e1:15:15:54:2c:ce:93:fd:ed:f1:4b:08:57:be:
                    eb:df:57:53:0d:c4:de:3e:ad:e0:ee:81:e5:93:0c:
                    48:d6:57:ed:1b:61:8d:a9:78:0d:d5:b8:1a:5c:7a:
                    b1:b6:1a:73:af:3d:ef:4c:35:2d:6d:71:ab:38:78:
                    c7:8b:35:55:8f:75:b0:62:22:d9:57:1d:e2:cc:f3:
                    cc:3c:fe:de:39:18:c4:d4:be:07:9a:a3:eb:d3:a6:
                    66:13:23:f1:7b:9c:d6:e1:13:7e:98:42:67:27:fe:
                    87:6e:28:06:5b:e2:dc:3e:dd:98:8b:0f:c3:87:74:
                    08:d7:51:82:d5:49:df:f0:ca:f5:52:24:f4:68:fe:
                    c2:17:3e:99:2e:8b:e0:d3:b4:1b:32:55:64:7a:f5:
                    85:d1:74:69:ef:13:24:b8:e4:3e:7a:e7:97:ce:d5:
                    e6:de:d2:b2:db:5d:97:51:35:e4:a5:5a:a2:2e:b2:
                    28:7a:e4:04:b3:6a:05:35:4c:1a:40:d5:22:38:56:
                    ca:ec:75:14:ba:2a:b4:73:55:06:6c:54:cc:fb:0a:
                    0e:f5:27:5d:6b:92:32:cd:e4:86:66:b0:fc:33:31:
                    9a:59:2c:bf:18:77:35:1d:d1:f0:a7:25:76:f2:8a:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5A:BB:C4:34:3B:53:FF:8F:84:36:39:BC:CB:74:1D:33:BB:9B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c21a78d0-21f9-35ee-87f7-d92298a31c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:f6:fc:da:bb:24:c0:29:3c:2b:0d:50:a8:b3:a0:58:13:
         59:0f:0b:5a:21:4c:a7:a9:0a:63:bc:4b:35:2f:a2:ed:32:5f:
         3f:89:d0:2c:a4:e7:a0:ec:ed:6e:51:8a:92:ab:6c:6f:0e:f4:
         7c:e8:68:63:e0:ca:0a:55:5b:ed:7c:a2:14:a2:a3:2a:f6:8d:
         50:23:90:8e:6f:f9:1b:7b:fb:a4:2b:50:aa:05:03:d8:34:69:
         11:3a:0e:ed:a3:b4:79:08:66:f8:3a:de:11:c7:ea:27:84:00:
         59:b0:9e:c7:c1:dc:da:d8:a7:97:ef:51:7f:1c:ba:df:3d:dc:
         79:8c:23:df:2d:d4:b4:06:a3:47:8e:26:48:d2:93:6b:bf:2f:
         7d:3e:3f:2f:41:50:6e:5f:c6:0c:1b:7e:1c:76:a2:93:db:73:
         5d:de:d4:c2:8b:c4:30:4e:80:db:33:fc:19:71:49:c3:c3:3a:
         c3:9c:c4:d1:91:2f:3a:08:98:e7:6c:4d:ad:e3:81:24:e0:e6:
         60:10:07:22:c1:d4:6d:7e:22:28:b3:a1:ca:08:8c:a6:d3:da:
         88:00:d1:8c:95:94:67:1f:34:3b:64:e6:d8:fd:84:ef:ed:9f:
         0f:10:73:60:d9:50:78:b2:4b:4b:36:3f:60:57:21:ac:e7:b5:
         28:8c:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:00 2024 by rpki-client on console-fra.rpki-client.org