Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/273f2693-ee8a-39e9-8d8e-f60835ee4cac.roa
File:                     273f2693-ee8a-39e9-8d8e-f60835ee4cac.roa (raw, json)
Hash identifier:          ddagMZCht51uR0EfhTDZfgYifmvQf+aTg/KeK6enJtQ=
Subject key identifier:   07:E8:14:62:0C:DB:4B:BF:42:74:1B:F3:71:87:F3:E5:62:DE:1C:7A
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584542B42530AEB5390F939E7180
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/273f2693-ee8a-39e9-8d8e-f60835ee4cac.roa
Signing time:             Tue 19 Mar 2024 15:12:24 +0000
ROA not before:           Tue 19 Mar 2024 15:12:24 +0000
ROA not after:            Mon 17 Jun 2024 15:12:24 +0000
asID:                     398395
IP address blocks:        66.23.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:b4:25:30:ae:b5:39:0f:93:9e:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Mar 19 15:12:24 2024 GMT
            Not After : Jun 17 15:12:24 2024 GMT
        Subject: CN=5d9aa168-1d42-4630-90f0-48f1ed1035f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:e2:d3:b4:8b:8d:2c:5a:4c:1f:2e:c8:57:
                    e4:e7:b5:57:42:30:83:db:d4:8d:00:59:ab:97:23:
                    62:a8:b5:89:35:d5:af:76:b5:5a:13:11:99:46:72:
                    e8:da:0f:8f:a7:fb:3e:05:2d:67:43:da:d4:91:80:
                    14:99:8a:01:a8:23:3e:6d:e7:ef:34:ad:8f:e8:b8:
                    0c:d0:b4:d9:b7:e3:96:88:45:9c:77:95:13:e7:7f:
                    18:44:e8:e8:f9:09:96:43:6b:80:88:ce:71:76:91:
                    98:f6:de:8c:6f:5f:31:51:28:4b:33:3f:66:58:0a:
                    75:36:06:d4:26:a6:19:e3:03:b3:a1:0d:55:65:e5:
                    d1:aa:ec:03:4b:32:2f:8f:90:9d:40:9e:6d:cf:88:
                    12:0d:59:ba:09:a7:5b:d8:3c:30:3f:5e:b8:b1:d1:
                    b5:5d:c9:f7:9d:76:14:71:21:9b:6b:ba:58:b5:b1:
                    91:8a:6d:9f:2e:25:cb:d8:61:20:41:39:13:f8:b7:
                    90:27:b2:56:4b:f8:d3:7f:1d:d4:a6:cd:03:e1:d5:
                    00:2a:ed:8c:31:f5:86:07:94:9a:bb:8b:fc:bb:9d:
                    5f:79:9d:34:a0:c2:a7:98:5e:99:7b:35:27:d4:37:
                    45:e9:f6:b2:79:49:0e:a7:34:e5:ee:67:0f:e5:47:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:14:62:0C:DB:4B:BF:42:74:1B:F3:71:87:F3:E5:62:DE:1C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/273f2693-ee8a-39e9-8d8e-f60835ee4cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.23.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:89:9d:64:71:b2:a4:80:92:01:d4:c5:d4:1a:d3:eb:da:8b:
         b7:91:f3:11:4b:bc:03:9a:8b:8b:d0:be:05:06:55:a8:5d:d6:
         f6:f4:af:62:f0:8a:f6:ed:7e:70:c4:2c:ee:52:8a:80:e6:0b:
         3a:41:52:13:ad:62:ba:0a:4f:eb:fa:0c:2c:4f:9c:eb:9f:63:
         44:78:1b:02:4d:83:ca:fa:1a:d3:a8:89:6b:d9:94:3c:0a:c3:
         4f:d6:8b:b6:b5:a7:11:b7:03:40:31:52:0a:f3:61:30:08:4c:
         0b:7f:3f:64:31:79:29:b7:4c:0c:74:70:ef:28:d3:e0:8a:78:
         ac:0a:28:c0:99:1c:30:72:d0:01:81:aa:fa:bb:ba:db:f5:fe:
         a2:13:c6:d2:ab:3d:10:19:9b:30:eb:10:39:35:79:ef:a9:5e:
         9f:1d:16:39:a1:b3:c1:9f:9a:92:a9:17:00:fa:0f:91:63:2b:
         20:9e:d2:31:4d:6b:80:f9:2a:e2:bf:c1:44:e2:90:5d:d9:a0:
         94:3f:3a:fc:f1:36:46:72:aa:49:5a:f8:0e:f5:65:f6:e5:e5:
         21:14:15:c6:da:aa:36:b2:1c:ac:17:fa:e9:84:cf:ef:fb:75:
         c5:af:cc:1c:d8:96:9c:b5:b8:2f:80:f3:0b:df:53:6b:2a:a8:
         02:b0:cc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:36:19 2024 by rpki-client on console-ams.rpki-client.org