Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa
File:                     69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa (raw, json)
Hash identifier:          JzGdQrYQc5vVGdzek/Mg3XTEBfDPjRRXBjIk2OmQR+M=
Subject key identifier:   E7:86:62:EC:C7:86:8D:89:72:64:2A:F2:E4:11:DA:9A:69:F0:5F:26
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858473E8B4A73F3F3586927D81540
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa
Signing time:             Tue 17 Sep 2024 13:00:41 +0000
ROA not before:           Tue 17 Sep 2024 13:00:41 +0000
ROA not after:            Mon 16 Dec 2024 14:00:41 +0000
asID:                     13445
IP address blocks:        66.163.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:8b:4a:73:f3:f3:58:69:27:d8:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 17 13:00:41 2024 GMT
            Not After : Dec 16 14:00:41 2024 GMT
        Subject: CN=b133ce25-471b-4d7e-b13c-b33b7a62f503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:b6:fc:26:26:86:d1:5e:7a:db:e3:3a:e7:
                    d9:07:b1:e3:52:5b:9b:ad:78:da:39:40:eb:27:fb:
                    7c:8e:a2:8a:d3:bd:37:b8:93:b4:e7:80:93:9c:f6:
                    39:9b:b0:36:51:19:50:82:f0:f7:c4:07:e4:e9:ae:
                    c3:17:1b:71:fd:35:77:2e:b7:d5:e2:01:7a:97:7b:
                    a1:7d:1a:6d:20:82:56:9b:04:15:13:a6:a2:ff:70:
                    74:f2:ab:ff:9c:b9:bd:ec:11:0b:3a:eb:08:a4:24:
                    ce:01:b6:7f:d9:8d:7b:63:96:96:dd:42:4f:63:b2:
                    df:78:49:3e:06:b5:95:55:f7:18:d7:ea:ca:71:3f:
                    b2:9d:81:cf:6d:16:e0:0d:e7:b1:50:91:bf:76:8f:
                    96:c3:96:39:ff:1f:a3:e7:71:ec:e2:1e:65:4e:7b:
                    1c:6c:fa:b7:05:35:96:56:e2:06:ed:39:13:2d:50:
                    27:80:71:e6:52:fa:d6:c1:01:ae:e2:f6:65:e7:c3:
                    15:27:80:52:74:cc:95:79:bd:17:4b:cb:df:9b:5c:
                    9f:a7:ca:bc:03:a7:e1:18:81:53:48:3f:41:f8:4d:
                    bc:aa:5a:84:e6:c2:cf:2e:0b:94:58:e2:22:27:c4:
                    a0:64:31:c1:f4:a7:75:d7:31:71:02:87:61:7a:83:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:86:62:EC:C7:86:8D:89:72:64:2A:F2:E4:11:DA:9A:69:F0:5F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:39:22:23:1a:9a:40:4c:e7:e1:f2:6e:6d:e9:85:a7:c4:e7:
         b7:eb:f5:5f:fd:13:92:12:86:02:ab:7c:91:f9:e4:71:89:2f:
         52:3b:a1:35:91:62:38:c2:dc:d4:07:c8:2a:5c:63:0f:6b:e6:
         d1:02:45:16:ef:2a:52:86:92:bd:9e:88:dc:2c:99:a8:f1:7a:
         a5:66:71:28:f2:a1:53:94:bf:ed:68:96:c4:e8:25:89:5a:bb:
         53:cd:3f:c3:91:28:97:f6:cc:f5:71:fa:a4:2a:0c:ad:ef:e2:
         60:f4:87:be:ce:bf:60:cd:c2:03:e8:5c:8b:15:ee:4f:39:9c:
         b6:db:c7:ab:d7:bf:20:b3:27:a7:5b:6f:5c:e8:ee:11:06:24:
         2c:fb:b2:ec:d6:cc:8c:fa:d1:b5:5e:1d:c1:20:af:06:4c:d5:
         e4:2e:9f:5f:48:47:b8:f2:e4:5c:24:e7:3d:be:cc:a0:f1:52:
         7b:05:48:50:18:9f:2f:d2:5f:df:51:ef:e4:c3:b1:1d:77:73:
         f5:bf:ff:41:6e:c2:e1:18:02:24:7c:7c:01:54:ac:16:1e:88:
         ca:d0:a4:08:db:a0:8f:3a:a8:10:cb:08:ff:1f:82:47:77:fb:
         11:90:90:e2:fb:5c:97:bf:5e:a2:69:0a:50:23:8a:58:fd:61:
         01:55:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org