Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa
File:                     2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa (raw, json)
Hash identifier:          iCf1XHyRGCG9qu57lDErEIpX57EP0uyvz0FGnfNJjZw=
Subject key identifier:   60:EB:FA:FA:66:0A:CA:1C:26:11:42:8B:7D:9A:B3:5F:F6:70:87:0D
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285845DBFE76B8FF16A8AEA85F3700
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     13445
IP address blocks:        66.163.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:76:b8:ff:16:a8:ae:a8:5f:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=978809a9-5391-456e-b64e-28eb7c3e6d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:03:25:c7:5e:55:d0:26:d1:08:a5:0a:3a:66:
                    f5:1f:19:0e:f6:d4:e6:78:de:c7:bc:af:1e:b2:f5:
                    dd:b7:66:80:ba:f3:63:2a:60:22:65:77:f4:87:a7:
                    d2:26:32:ee:2f:2c:3d:c7:15:61:e8:33:76:af:c9:
                    27:94:cd:33:9d:50:9d:84:27:8f:45:89:01:14:de:
                    80:25:7e:f1:05:9d:a5:c2:46:a8:78:a3:1f:24:1e:
                    94:06:68:2b:d7:ad:cf:65:4e:58:c4:51:a1:e5:fe:
                    3a:31:ac:aa:71:2b:f0:93:34:96:22:22:a4:e5:d4:
                    c9:2c:63:80:6a:83:21:41:d0:e1:49:3d:0e:5f:47:
                    6b:50:1b:0f:de:53:03:1f:10:e8:a2:5b:20:e0:19:
                    c9:5d:8c:2f:95:f2:06:23:44:f3:00:fc:35:fb:47:
                    f7:e5:15:02:a9:08:c1:14:a5:a9:3a:ab:ba:45:91:
                    31:f9:af:c8:48:d2:3d:d1:f9:34:dd:6f:5c:91:2a:
                    a6:06:81:08:67:ad:bb:dd:f7:51:f0:14:ad:28:35:
                    41:52:2e:15:ec:02:39:74:fc:c6:42:30:a7:7c:5f:
                    c3:1e:4a:1e:0e:56:ff:d0:5e:84:cd:3c:0b:d0:a4:
                    f4:46:d3:f6:b0:65:03:ce:80:16:e4:31:32:06:7e:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EB:FA:FA:66:0A:CA:1C:26:11:42:8B:7D:9A:B3:5F:F6:70:87:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/2f20042a-7cf2-3c73-98ad-bc3e5167c5a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:de:9e:ac:74:40:72:c1:5a:c5:4c:60:d3:08:a0:ec:2b:52:
         31:d1:e8:c7:a9:fa:6e:5f:30:46:63:cc:5f:0c:bf:0a:dd:c3:
         a6:6f:88:5a:f2:b1:88:89:a3:bc:68:f2:03:be:5a:79:7d:06:
         f9:02:f7:cd:67:60:74:be:80:07:f9:f1:20:c3:69:d0:93:35:
         e5:ef:3f:3d:be:e8:2d:d1:72:61:c7:51:1e:41:74:90:6f:e6:
         3d:9b:e2:37:15:68:88:db:44:69:36:0a:c0:c6:b4:3c:ac:a4:
         a7:ce:89:58:12:de:76:ef:18:5f:e0:93:cd:a3:aa:3d:ce:de:
         32:10:97:f8:44:dd:a4:30:2e:23:7e:98:69:d8:06:fe:58:ba:
         1b:70:2d:c2:5b:f0:76:3a:f6:e4:37:31:d4:68:9f:9e:16:a2:
         2b:3e:7b:0f:08:fd:2e:b2:21:01:b4:9b:95:78:d5:0c:e2:f0:
         0a:f0:3b:07:3d:8e:5d:a6:39:81:fa:9f:f2:36:fd:b6:c0:66:
         5a:21:34:3b:dc:bf:46:2c:f0:44:3c:fe:5c:59:1f:eb:aa:6e:
         22:96:21:ee:8a:be:4c:f9:ab:3a:d0:ee:e2:15:99:ac:7e:c3:
         ce:80:b4:02:ae:89:0e:05:42:73:90:9d:e5:4d:ae:8e:98:f6:
         a7:e1:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:59:51 2024 by rpki-client on console-ams.rpki-client.org