Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa
File:                     167071d7-0649-3013-aa5e-af1ce1d335da.roa (raw, json)
Hash identifier:          7adNEdgvMcHo4TiIkUTrkylLTQ+OzuBkdBVJ7do9I4I=
Subject key identifier:   8F:3C:79:5D:EC:C5:CA:F2:4A:43:F6:34:70:29:2D:B3:B2:22:9D:2B
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F43285845909DE65848EC112E60483C00
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     174
IP address blocks:        66.187.0.0/23 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e6:58:48:ec:11:2e:60:48:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=0a060bcb-1225-473f-a2e5-1577f4386b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:09:7e:0c:eb:ad:6b:36:4b:4e:39:0e:1e:
                    66:7d:6c:1a:8a:b1:5e:6a:6b:ef:ac:79:a2:88:b8:
                    6d:b8:a5:ca:3a:66:fb:15:b0:84:51:74:31:eb:99:
                    b8:02:1e:14:1c:0c:08:93:f0:d1:c2:d9:c5:26:0a:
                    ec:8b:e3:22:4c:23:83:52:9d:3e:f9:82:b4:84:95:
                    98:71:47:fe:c7:9d:f1:69:f0:d9:5b:61:61:cd:30:
                    af:a6:a7:f6:83:5d:fe:43:93:ba:10:a1:5e:f7:47:
                    20:29:00:51:4f:ba:e6:4b:75:7b:b6:58:1a:5a:99:
                    b4:a3:f7:87:81:09:73:49:1f:e6:3b:95:9c:dd:bf:
                    60:27:b2:c3:7b:fb:17:4e:6d:be:17:2c:a2:58:35:
                    15:6e:6e:cf:02:2f:9e:1c:9a:e1:0e:a4:03:ec:65:
                    de:a1:4b:00:bd:b9:29:b9:08:83:0a:0c:77:46:87:
                    4b:8a:81:58:ca:31:82:ae:7f:bb:f2:a3:fb:e9:a8:
                    33:7e:58:b4:11:23:7d:a3:ba:50:03:d0:6c:fa:73:
                    27:e5:46:93:d8:2d:fa:06:e8:12:d2:90:85:a6:a8:
                    2f:4d:df:a1:74:05:7a:d7:70:e8:ac:49:29:49:a4:
                    8d:7d:ac:32:35:72:e4:2f:00:72:c8:b6:18:97:4b:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3C:79:5D:EC:C5:CA:F2:4A:43:F6:34:70:29:2D:B3:B2:22:9D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/167071d7-0649-3013-aa5e-af1ce1d335da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:32:41:3d:46:7e:f9:a5:2f:86:93:8c:36:43:b4:d0:05:6f:
         59:cb:13:d4:59:e5:82:c1:45:ba:1f:0b:bd:2e:da:8e:3d:b6:
         1a:e4:c9:5c:d3:fe:2b:31:bf:12:0f:8e:69:2c:0e:9c:60:37:
         2f:79:05:9b:66:cc:ff:86:45:d0:6d:9a:4a:da:7a:03:13:cb:
         a6:7a:8d:59:44:2e:bc:8a:ec:5e:ec:c0:ce:03:6a:9d:7c:b8:
         27:c5:c6:9e:30:55:ee:05:08:09:60:5c:d1:15:15:6c:fe:88:
         f3:7f:a3:66:77:62:62:66:f6:d6:19:7b:61:a1:26:50:36:86:
         43:59:97:a8:a6:84:7f:5f:c7:2e:5e:9e:8c:b8:18:4f:65:48:
         8b:43:17:ea:a0:ac:aa:34:2d:91:20:e7:b7:dc:19:6c:93:e3:
         a8:aa:40:67:1d:61:d1:fb:c8:1b:9a:36:e1:46:f8:d4:cf:d3:
         be:23:2e:fe:89:0f:ee:6a:41:ee:a3:85:4f:92:1a:80:5d:85:
         08:9d:f9:7c:78:62:10:ad:50:58:1e:74:d8:32:d4:ea:58:97:
         45:22:9f:af:d5:23:8e:1d:ca:06:3f:75:cc:85:9b:d6:bc:3b:
         c3:39:69:e7:cf:fe:92:e7:69:3e:d2:82:25:61:12:b5:77:30:
         d1:28:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:55 2024 by rpki-client on console-ams.rpki-client.org