Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c2f6db5a-8665-3884-85fd-5bf243a97001.roa
File:                     c2f6db5a-8665-3884-85fd-5bf243a97001.roa (raw, json)
Hash identifier:          a18J/Ghp4hCNV++q8wh2oRUcxPmQ6NrgmV2TQ9Fviek=
Subject key identifier:   B3:F8:DF:ED:98:58:F9:F8:35:75:27:B5:D8:52:F6:63:80:4D:02:6A
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858457F054233642AB8497DF89200
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c2f6db5a-8665-3884-85fd-5bf243a97001.roa
Signing time:             Wed 10 Apr 2024 05:44:20 +0000
ROA not before:           Wed 10 Apr 2024 05:44:20 +0000
ROA not after:            Tue 09 Jul 2024 05:44:20 +0000
asID:                     2734
IP address blocks:        66.35.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:05:42:33:64:2a:b8:49:7d:f8:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr 10 05:44:20 2024 GMT
            Not After : Jul  9 05:44:20 2024 GMT
        Subject: CN=84ca9993-71dc-4b27-bf51-e4b866d66de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:d5:ef:fd:25:8b:01:d2:f8:6e:ef:37:01:
                    c4:23:3c:c0:fa:e8:ce:65:27:29:5b:14:5f:8a:01:
                    da:50:61:1f:18:20:a2:5b:ee:39:43:c6:e3:8f:53:
                    35:eb:a7:0d:8b:43:b7:87:5d:a9:72:e6:8b:6b:81:
                    2a:e8:8b:5b:ee:d8:ca:34:58:dc:cb:7a:50:5d:ff:
                    ed:c2:9c:45:25:41:32:5f:75:39:25:d7:59:b0:df:
                    96:ea:94:ef:cc:3b:a4:03:45:36:07:45:03:5f:41:
                    c3:55:49:a9:6b:e2:fb:4f:89:02:b3:8e:3e:54:84:
                    15:1e:13:1c:5e:f4:34:6f:06:d9:f9:78:95:1a:b2:
                    e6:05:b6:45:58:c9:ff:b8:21:38:83:ce:fe:5f:06:
                    7f:c7:3d:7e:55:97:32:cc:a0:26:5b:0b:ff:68:86:
                    cb:6a:52:aa:e9:7d:38:ba:b6:8b:b6:11:7d:fd:5c:
                    1b:65:33:50:1f:0f:22:52:ac:e1:7f:09:e3:2d:a6:
                    77:92:2b:b8:36:14:5f:45:ea:13:d9:53:c7:9b:2e:
                    bb:4f:a7:6c:a9:30:af:9c:ab:8f:08:6f:89:4b:fc:
                    02:ff:18:42:96:10:9e:2a:47:e4:a2:9f:48:a6:b9:
                    3e:ce:0f:4f:70:84:0d:59:2d:59:af:ff:8a:52:f0:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F8:DF:ED:98:58:F9:F8:35:75:27:B5:D8:52:F6:63:80:4D:02:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c2f6db5a-8665-3884-85fd-5bf243a97001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:75:1c:30:03:38:cf:ef:5f:de:22:8c:7d:61:44:b9:9e:
         c5:9e:f3:6b:3f:f5:7d:75:24:9a:cc:5e:90:57:d8:db:d0:90:
         d4:68:09:8d:0b:02:b6:6e:9a:c0:46:f2:22:9c:cb:dd:a7:de:
         d3:94:79:1f:6c:76:42:ee:21:d2:d9:fe:d4:95:5f:e9:c0:f2:
         4e:db:ca:9b:eb:fa:58:d9:9e:2b:bd:a4:14:ff:8b:1b:e3:b9:
         8f:b0:f3:11:6c:dc:0a:57:a3:7e:fc:37:35:e1:2c:c5:47:a3:
         30:53:b2:df:f5:18:70:d2:d9:a9:d7:d1:0e:a1:ec:d1:30:cd:
         83:7a:a5:27:dd:b2:d0:c7:bb:15:a2:c4:d6:ed:cb:ac:2c:1f:
         7d:e0:03:c8:b5:6a:fd:46:c2:12:44:f6:1e:7e:5c:9e:9c:27:
         e7:74:88:90:4d:ab:95:56:23:5b:00:68:bc:ef:57:a2:d0:df:
         5a:07:a6:49:50:de:91:65:16:d2:6b:70:5e:83:27:48:14:bd:
         71:72:b4:35:6b:6f:5d:cb:17:63:1b:db:e5:91:00:27:bf:b8:
         33:01:7e:31:e1:ff:5d:3a:1a:dc:0d:44:63:f2:b5:49:41:f8:
         36:d6:d3:c0:67:23:45:bc:5b:e4:8a:86:ac:0e:bd:ad:e1:bb:
         b1:d9:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:50:50 2024 by rpki-client on console-ams.rpki-client.org