Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa
File:                     aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa (raw, json)
Hash identifier:          lCE1I/QG0jF/JgBmwTDyTb7v/PqrBbwI78xsxVzIWMw=
Subject key identifier:   E1:AB:22:41:E4:12:F8:66:22:55:D1:64:EE:0C:AF:0A:CE:8A:72:00
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F43285844ABCF8ED77C48AD8165BBD700
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa
Signing time:             Thu 25 Jan 2024 14:00:29 +0000
ROA not before:           Thu 25 Jan 2024 14:00:29 +0000
ROA not after:            Wed 24 Apr 2024 13:00:29 +0000
asID:                     14618
IP address blocks:        66.81.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ab:cf:8e:d7:7c:48:ad:81:65:bb:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Jan 25 14:00:29 2024 GMT
            Not After : Apr 24 13:00:29 2024 GMT
        Subject: CN=34fb4c4f-6fa3-476e-880a-d81cba626f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:46:a5:46:9c:db:b0:31:1f:e6:1a:4e:53:
                    66:cb:f8:6b:12:2f:77:c2:99:1f:6a:cf:53:fa:a1:
                    c6:96:c3:aa:57:f7:ea:90:4e:f6:15:9c:60:9d:c3:
                    81:cb:49:16:74:29:07:21:25:b1:32:f4:63:3f:29:
                    7d:06:5c:a5:fb:9e:f6:9b:72:7d:5f:95:0a:99:ec:
                    41:78:c9:9b:a5:40:f2:37:a8:37:f1:7e:59:0b:09:
                    30:75:f6:bd:30:04:5b:2a:92:8a:59:5b:2d:0d:b7:
                    6d:cd:2f:58:81:02:78:79:13:59:9b:b6:74:0d:d4:
                    49:ed:28:18:74:49:72:1b:27:16:65:3c:03:5a:f0:
                    88:bb:aa:31:0a:75:c0:3d:f3:2a:88:d0:71:de:1c:
                    57:f2:8e:68:2d:2d:83:0a:a5:3f:a2:4e:c8:49:e6:
                    c7:4f:08:c3:2f:f4:48:89:d8:cd:6a:b3:5b:7b:6f:
                    42:17:02:14:20:ae:25:55:93:79:ce:b7:00:8b:c7:
                    c7:0b:cd:96:19:66:c9:24:57:9d:da:88:76:18:ab:
                    41:57:a5:b6:69:73:8a:23:10:44:10:73:e5:5d:9f:
                    6f:39:80:82:f3:f5:36:45:54:67:bf:a7:be:7f:bd:
                    60:fa:12:64:31:46:a7:4b:cc:eb:84:13:cd:19:ec:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AB:22:41:E4:12:F8:66:22:55:D1:64:EE:0C:AF:0A:CE:8A:72:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:bb:30:01:c1:e0:01:9f:fc:52:1d:81:d5:ad:88:d3:df:
         39:04:8d:0e:d4:cc:a9:83:db:7a:b1:67:37:d3:c8:a7:5b:56:
         3d:ec:8a:98:d2:9e:13:28:49:22:98:92:96:05:b6:b9:92:9e:
         cb:f1:96:ca:64:a7:5b:d1:f3:01:9a:1d:d0:d4:f4:f1:97:34:
         eb:fc:b1:bd:b8:77:a0:6d:c6:30:4b:0b:f9:40:62:6c:22:eb:
         44:ad:3d:1f:0a:93:bb:4b:94:50:1d:0a:db:c6:22:7a:6c:75:
         df:9f:37:ee:8e:c6:ee:aa:86:ac:89:73:2b:ab:da:1e:f4:e0:
         e6:5c:0a:3d:70:dc:e3:15:b6:5d:78:0e:b4:5d:c8:42:ac:c1:
         aa:b7:21:81:33:c9:cc:c6:08:31:9a:53:e6:57:e4:f5:bf:1e:
         2f:39:52:9c:f5:86:a8:e1:dc:3c:0a:38:ce:83:74:12:a7:2f:
         7d:b7:36:0b:8b:06:4a:b5:6c:b6:15:87:b6:c8:9f:5f:c2:4c:
         e6:4f:77:6a:ae:1e:8a:13:b7:c4:9d:74:cd:f1:8a:46:ad:f8:
         73:e4:fd:8c:cc:82:a0:b9:27:ea:bd:44:a6:51:61:18:35:f8:
         c9:a2:3f:aa:36:22:a2:b2:f1:c1:9c:36:3a:c0:1d:4f:6d:01:
         68:65:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:03:44 2024 by rpki-client on console-fra.rpki-client.org