Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa
File:                     28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa (raw, json)
Hash identifier:          2IVcH25xSa076XeuqmtKSL8AZSNeypd2kApCY8zPo6U=
Subject key identifier:   D5:D4:0B:DB:F9:76:C7:58:F4:42:DE:37:65:0B:4F:84:F1:26:B4:9C
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F432858478F81248FC1004B7C7F991900
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     16509
IP address blocks:        66.43.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:24:8f:c1:00:4b:7c:7f:99:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=8214f75f-3019-4aef-8c80-9f81d9a9de78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:4f:92:6e:d2:ed:5e:b5:56:59:99:40:a1:
                    b6:9b:a7:99:0a:0e:af:12:e4:e9:1a:30:e7:19:0d:
                    30:90:cc:89:1c:58:89:45:9d:a0:2b:c5:cb:77:c0:
                    ea:65:5a:f5:dd:c5:91:d5:80:89:24:3a:1c:84:54:
                    a1:5d:93:5a:b0:04:68:bc:c8:46:d6:39:2a:22:29:
                    3d:26:85:76:07:f6:1f:fb:17:54:a3:76:5c:cd:a5:
                    5c:8a:3d:ec:c6:5e:98:18:72:07:cb:c6:af:89:25:
                    b1:f1:06:9b:ca:d6:64:1f:b4:9d:6c:fa:1a:b8:f6:
                    9a:c2:35:34:e2:fe:d5:e4:0a:56:3e:ab:d4:87:ae:
                    33:d9:d2:a7:aa:08:1c:48:fa:c5:13:f8:89:0c:76:
                    7d:0b:15:96:5a:58:fa:72:1c:2e:2a:3c:02:b7:40:
                    7d:98:c5:76:02:46:9d:9f:76:a0:d9:e5:43:5c:d3:
                    b3:09:27:40:de:11:2a:48:0a:54:c8:c8:d5:f2:3c:
                    ac:a4:0c:1c:4e:50:ad:87:01:12:01:89:ac:be:46:
                    f6:49:95:ea:ba:fe:2c:e3:64:ca:c0:88:9a:d6:9b:
                    7e:3f:96:51:aa:c7:58:cb:21:e1:96:28:82:4d:1a:
                    9e:f6:fe:71:6e:d1:ad:ed:af:e2:30:20:32:b5:76:
                    9e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:0B:DB:F9:76:C7:58:F4:42:DE:37:65:0B:4F:84:F1:26:B4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/28dc1640-85fe-34c8-9937-b7f5edd1a3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:69:1e:3b:1c:68:24:c4:49:3c:ee:75:d7:01:5b:18:88:
         cc:17:b1:e7:19:b9:7f:49:19:7f:fe:65:cc:5e:d0:c7:03:ec:
         6e:08:77:29:41:ae:8f:f1:32:f9:c8:eb:b2:43:89:c8:95:bd:
         f9:27:ca:4a:6e:82:21:20:c3:88:48:cf:a3:c5:22:91:b8:58:
         e2:5e:ec:d5:33:07:3c:29:67:86:89:af:7a:d7:51:fe:66:db:
         5a:0f:9f:14:ca:58:93:52:9f:0b:af:34:d5:03:2f:98:e2:91:
         a8:4b:ee:33:91:7c:ba:07:4a:63:61:7a:19:49:35:ec:73:36:
         4e:23:66:b6:92:60:3f:1f:ee:df:97:a6:c5:b7:9f:5a:54:fc:
         38:ba:1b:e3:af:99:78:50:11:f4:62:19:49:80:e1:bd:b7:e6:
         a2:8a:3a:89:6c:dd:e8:5d:83:b6:0f:ed:f5:65:44:ed:98:7f:
         39:5b:f5:7a:c9:2a:be:a3:cb:e5:bc:5a:42:31:2f:ed:ee:80:
         a8:c5:a9:c3:a9:41:6b:f8:92:85:65:13:b7:ba:39:ad:7f:de:
         2a:ad:43:7b:ab:db:87:42:44:ad:bb:bb:52:fa:a5:80:f1:64:
         21:05:e0:7e:67:84:25:78:00:39:f0:89:6c:3f:32:41:50:8b:
         5f:73:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org