Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa
File:                     c4773e03-263c-3fd4-ac68-b27851922a8b.roa (raw, json)
Hash identifier:          KDFsAYcfIWtjMZpEeJhtuDYbJ1Ac6r3r3F+qMGyhFY0=
Subject key identifier:   21:D4:E9:67:4C:E6:C8:56:E1:14:68:3E:83:4B:10:3B:BB:63:7B:CF
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858457F05F7CB48B13B4ADA410D80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa
Signing time:             Wed 10 Apr 2024 05:45:46 +0000
ROA not before:           Wed 10 Apr 2024 05:45:46 +0000
ROA not after:            Tue 09 Jul 2024 05:45:46 +0000
asID:                     2734
IP address blocks:        66.35.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:05:f7:cb:48:b1:3b:4a:da:41:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr 10 05:45:46 2024 GMT
            Not After : Jul  9 05:45:46 2024 GMT
        Subject: CN=44e1f42f-9fa7-4bf0-9445-cf7ce4b6e450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:40:80:39:4f:ce:b1:7f:d1:ba:ba:3d:88:
                    5b:ec:fa:8b:a0:15:c1:81:44:37:3c:10:eb:80:07:
                    f0:24:52:80:da:a9:fb:4a:43:4c:6d:4d:d4:fe:07:
                    b0:86:87:66:88:12:cb:89:fd:82:56:e7:0c:d7:ca:
                    3d:ca:23:1a:f8:05:f3:04:92:19:59:c7:4e:59:11:
                    b8:97:50:2c:c5:06:3d:3c:a2:4d:6a:21:9b:64:e6:
                    2d:53:b4:22:b8:14:d6:3a:e1:a1:f5:4e:30:be:8f:
                    6c:7a:34:c0:3f:b6:d7:bb:eb:45:de:91:98:ea:aa:
                    8e:0b:26:db:02:e4:a8:b7:e3:72:cf:18:00:75:62:
                    05:2b:37:e0:4d:db:c7:17:55:da:bc:a5:f3:4c:0c:
                    a1:fe:2d:8b:ef:da:d6:ef:02:cc:f1:2d:c9:ee:e6:
                    38:d0:d4:c6:8b:da:49:56:dd:4b:10:07:bd:33:2f:
                    82:17:d4:2e:e1:4c:f7:e7:20:24:21:db:01:1c:51:
                    c0:1f:d4:91:63:5a:30:20:ae:5c:2d:77:ac:22:7d:
                    45:5f:67:90:eb:52:d4:bf:27:52:cc:3e:35:6e:2e:
                    77:57:9a:ee:b5:7f:03:15:9f:5b:c7:18:d1:2f:ee:
                    0a:a3:cc:bc:da:b3:0c:22:21:5d:63:06:09:57:75:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:E9:67:4C:E6:C8:56:E1:14:68:3E:83:4B:10:3B:BB:63:7B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c4773e03-263c-3fd4-ac68-b27851922a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:e9:be:38:de:14:e3:80:dc:d1:a4:e7:db:9d:08:45:59:
         e0:ef:c7:a3:a4:c5:2f:b0:8b:63:e1:08:c0:30:e9:e6:68:36:
         5d:da:48:a8:fd:c5:7a:4f:9d:42:40:61:01:ba:58:33:72:50:
         1e:05:4c:f1:99:e5:cc:ef:9b:8a:43:c6:88:cd:2a:39:d8:a8:
         ec:00:94:02:bc:0a:b1:23:fe:63:7f:da:de:97:18:49:a1:a1:
         bf:b8:0c:3f:48:7a:19:71:41:d6:3e:0e:57:09:0f:f2:d8:8c:
         3f:eb:9e:97:51:0c:4e:72:d9:7c:09:45:48:ef:a2:76:d2:cc:
         ab:b8:f4:46:e2:55:18:0e:59:80:7b:2d:bf:28:ee:c7:cf:a2:
         d1:cd:e2:ef:7c:4c:89:4c:9d:30:ec:ec:37:2e:7d:80:1b:5e:
         ab:02:e5:2b:42:93:5b:e6:ae:08:2f:68:d2:0c:28:f3:cf:6b:
         e6:2a:cd:b6:8a:31:df:56:86:8b:b0:0a:ae:43:d9:86:c8:e5:
         4b:da:fa:97:c1:c9:4d:dd:45:ae:bc:47:72:4f:00:4a:17:e0:
         8f:31:3e:8d:da:4a:d8:d3:93:fd:11:5c:b5:01:06:32:a7:00:
         c8:d7:ab:e1:71:d3:53:56:f1:e9:3f:29:92:9e:55:0f:7e:9f:
         14:8f:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 21:39:07 2024 by rpki-client on console-fra.rpki-client.org