Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa
File:                     0d50241c-e841-3989-8c88-37d5a93ca144.roa (raw, json)
Hash identifier:          HSKZ3n0k/e4ppZNpNNaTPOiwEjDvEvtXv6vZgWI8QGs=
Subject key identifier:   DA:B7:D3:27:59:55:FD:91:AA:46:98:95:16:8E:B8:EF:4D:8D:8C:53
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584789EBF694E5DB286F61990850
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     52347
IP address blocks:        162.217.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f6:94:e5:db:28:6f:61:99:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=cacbc7d0-bd4f-4cb3-abe4-67955e7f757c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:23:7f:b1:04:88:ca:50:34:53:75:0b:25:
                    b0:bf:de:30:d0:d3:f3:ca:25:c9:83:96:50:6a:94:
                    e4:ad:f3:c7:e0:51:13:09:b2:87:8d:40:3b:f3:c5:
                    d5:14:af:f8:bc:2a:70:b2:d5:eb:95:15:a3:a3:4f:
                    48:cf:b0:da:18:ee:94:b3:b0:33:d3:2b:35:69:a1:
                    d2:8f:4d:b3:9a:a0:61:69:0d:ba:76:21:7a:19:e6:
                    3b:6a:7b:ac:f1:38:3d:d5:4a:ff:bc:23:19:55:ee:
                    69:f5:c3:a7:94:d8:9b:2e:66:cb:99:46:10:b6:f9:
                    30:40:24:83:b1:43:11:87:0f:4b:6e:b5:c9:ac:1b:
                    6c:a1:b4:26:a6:c1:68:30:6e:0e:f6:d9:63:3f:00:
                    a1:4f:da:29:ba:f8:2f:0f:91:01:17:a9:fa:91:34:
                    ba:72:5f:72:40:da:91:7c:62:e9:50:41:b8:83:03:
                    bb:4e:3b:f7:91:a0:7b:ad:2c:1c:62:0c:76:64:da:
                    e0:41:ee:e6:c6:4a:45:23:b5:87:74:1a:df:7a:43:
                    7b:7c:d5:cd:82:36:11:4c:37:22:db:51:e1:58:ad:
                    88:ee:0e:8d:46:b2:f1:17:b5:37:ba:f8:92:86:51:
                    e2:54:d2:8f:f7:f9:30:01:71:83:0e:90:3b:97:e8:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B7:D3:27:59:55:FD:91:AA:46:98:95:16:8E:B8:EF:4D:8D:8C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/0d50241c-e841-3989-8c88-37d5a93ca144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3f:5c:66:20:ad:52:b9:65:af:58:ab:9d:bc:9c:14:b5:0a:
         f9:41:3c:c3:9c:70:d9:f4:62:84:20:7b:82:fb:37:08:5c:fe:
         40:ba:fb:70:c6:82:77:06:20:a6:8f:94:2c:8f:6c:f0:56:88:
         5f:4d:5f:19:95:ce:70:59:fb:c7:2e:6e:63:b8:9d:4c:a2:7f:
         2e:ad:14:00:ad:81:80:0a:0f:70:8a:28:45:1d:5f:e2:75:ae:
         8f:ec:fe:1d:0f:f4:2c:c5:59:74:8d:95:57:20:2e:28:95:19:
         ac:f7:52:2c:ba:85:4e:d1:91:9b:2c:bf:12:25:8c:45:52:61:
         ed:66:00:3a:e3:dd:a1:a0:3b:8d:0f:d6:99:9d:52:6b:df:eb:
         c7:46:a0:4d:59:a8:06:fe:58:c1:63:e6:f1:30:62:55:1d:5b:
         05:8c:50:f5:b0:15:6b:00:17:38:da:a4:a2:68:c8:0e:0a:4e:
         24:f1:fd:9c:4d:99:76:32:7c:92:c5:df:9c:89:65:02:33:46:
         aa:93:f1:95:ba:df:e0:7b:e6:0d:57:ad:5d:4c:8f:36:a0:91:
         3c:6f:63:e5:f1:26:35:68:d4:9d:5a:f4:ea:f4:63:32:dd:a6:
         f7:76:5d:46:45:6a:c6:56:e1:07:4c:57:d1:1a:7c:2a:d3:c5:
         c0:4c:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:09 2024 by rpki-client on console-fra.rpki-client.org