Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa
File:                     1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa (raw, json)
Hash identifier:          c9ZMMDkjI8AC5Dtc/jCtrDpyRH9Ht5D+DHyIjyfb3xs=
Subject key identifier:   B8:DE:3C:1A:95:D9:96:97:55:53:C9:CE:88:CD:EE:0A:99:D8:97:20
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285844E0DA87487DE5EE9E61F29400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     30058
IP address blocks:        66.90.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:87:48:7d:e5:ee:9e:61:f2:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=1d3d7a69-f8dd-4d5f-b362-f836565fe6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:53:6d:56:16:2e:01:a6:a7:07:f0:b4:e7:
                    c0:38:91:27:ad:3d:a9:70:c1:0a:1f:ad:bd:bc:c2:
                    0e:07:24:3c:2b:fc:fc:93:be:fe:04:c1:36:2c:e6:
                    f4:9c:6b:24:55:89:3f:75:96:e1:9c:d5:63:15:c2:
                    7b:53:17:42:fd:96:13:5a:53:30:33:19:a7:f7:79:
                    5b:eb:bc:5c:f8:0e:b2:b7:b1:69:15:71:4f:38:f7:
                    69:80:c5:b0:7a:83:ce:11:36:99:48:97:53:0a:5e:
                    9e:df:83:64:25:b3:37:8b:2a:6b:46:b3:88:a9:b9:
                    49:5e:46:d9:42:a5:e5:3f:3f:74:d8:6d:02:a7:0c:
                    dd:03:0f:9b:dd:ec:ce:d5:2d:b3:e6:a6:07:0c:9c:
                    22:91:d5:69:68:a4:f7:c9:cf:77:64:f9:c9:7d:96:
                    5b:84:c4:44:f1:cb:a5:20:6b:c9:5e:5e:76:35:d4:
                    40:c4:cd:21:44:ee:d6:bb:22:af:40:32:ff:69:bf:
                    ac:06:de:60:9f:4e:30:6d:32:08:8a:2f:d0:23:fc:
                    d3:48:e8:6c:73:30:5d:90:92:37:f0:72:25:57:c7:
                    8f:d0:27:bc:41:3c:b9:36:a8:be:8e:d2:8a:d8:24:
                    99:3f:bc:aa:73:de:9c:62:1c:2c:ad:b7:18:7f:6b:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DE:3C:1A:95:D9:96:97:55:53:C9:CE:88:CD:EE:0A:99:D8:97:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1c21ed73-a1b9-362a-8d83-5ccad4a43aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:7c:aa:cf:34:e5:7f:bf:14:8c:f0:76:72:32:0f:1d:5d:
         1f:fe:1a:e6:48:90:f5:cc:6e:d4:0f:0e:ad:d6:8d:10:b0:d5:
         5a:70:8e:8f:27:2f:c3:08:97:aa:a7:4a:b5:b4:0d:7f:75:08:
         93:9c:95:60:4a:c4:d0:3e:01:6b:be:bb:be:c6:93:dc:53:79:
         bb:cd:51:0d:72:ce:0f:d9:43:cf:b7:21:2c:c8:63:a2:3a:79:
         b3:34:ff:a4:32:7c:fc:bb:f9:1c:77:70:2b:f1:71:3e:7e:cc:
         78:2e:94:63:e4:97:c7:c6:5f:e6:f7:14:6b:53:29:3d:8e:cc:
         74:30:39:6c:6c:a3:dc:c9:6e:90:71:2b:17:2e:5a:b8:75:d9:
         54:aa:29:02:0b:31:84:99:fc:42:9b:a7:e5:71:5a:ab:02:6b:
         1e:d4:40:a6:80:ac:e4:16:a6:d2:f8:8c:40:70:4d:be:72:28:
         29:d0:83:39:83:0a:72:41:78:9a:a9:52:09:3f:80:0c:59:9a:
         8c:86:33:40:9d:60:44:c0:6c:0f:80:03:06:2c:a4:57:17:d1:
         e0:f3:14:f6:56:09:2f:af:34:a1:ca:2a:53:ba:76:66:c9:77:
         27:8d:7d:82:a9:05:eb:9b:38:3b:c4:92:45:04:f8:bf:d0:f1:
         bb:c5:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:46 2024 by rpki-client on console-fra.rpki-client.org