Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
File:                     cca54213-030a-3b3d-90f9-2b547482f0e0.roa (raw, json)
Hash identifier:          IOoJa2P0ZxOE/C8DwXcLUZ9fBt14bWWlqLOG5axx+zY=
Subject key identifier:   DE:85:39:58:F9:E8:DD:8F:CE:73:08:C3:82:4F:5A:9F:E9:CA:60:46
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F43285844F19AA8E729A009FF83E46200
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        66.43.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:a8:e7:29:a0:09:ff:83:e4:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=6af22158-a48e-4fe2-8dca-87a6d7310e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:bf:3c:be:57:91:bc:44:38:45:ee:3c:de:
                    fc:22:e0:ed:94:53:71:56:38:fe:68:0d:bd:32:e8:
                    e4:5a:d4:a0:10:82:bb:0c:2c:b5:a2:b7:ec:45:0b:
                    aa:ac:76:dc:69:29:69:9c:27:60:f9:0c:c0:05:b5:
                    32:49:8c:18:b0:d7:be:ce:5c:23:8d:8e:f2:19:cd:
                    a5:ac:53:b8:99:07:cd:f4:d7:ce:6a:89:44:1c:73:
                    0c:07:2f:76:7e:f4:17:b5:ee:e3:51:c4:39:81:0f:
                    b6:13:a9:8b:99:0b:6e:64:bc:ed:93:b4:66:9f:86:
                    0c:86:6d:ee:5e:ef:7e:de:a6:dc:f8:c5:62:dd:19:
                    7b:51:4e:49:66:0f:55:c8:b1:01:67:f9:9b:66:9f:
                    9f:01:75:52:3f:90:d6:d3:58:d1:49:d5:eb:63:5b:
                    fe:fb:bb:b4:8c:d7:cb:00:45:d3:b0:52:67:5b:9d:
                    83:11:d6:97:e8:17:5e:b3:01:dd:85:a3:4a:aa:a1:
                    9c:d1:e1:94:bc:f9:24:53:35:3a:0f:8f:65:05:5b:
                    da:e3:1e:e0:4b:bf:15:8e:52:b5:b4:53:6c:74:26:
                    44:01:fc:b4:44:20:67:5d:b9:d3:7e:b3:c8:c2:8a:
                    fc:76:b6:04:00:5b:f3:1a:d5:8c:9e:f6:2e:8f:5b:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:85:39:58:F9:E8:DD:8F:CE:73:08:C3:82:4F:5A:9F:E9:CA:60:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:66:fb:f8:d8:4c:c0:02:db:0d:71:49:ea:3f:94:f9:ce:
         1f:73:8b:a5:0e:14:49:02:fb:b6:80:88:29:51:a9:af:3f:6e:
         85:9b:79:d9:ae:6b:8b:44:52:13:17:7b:da:bd:00:dc:ef:23:
         6b:c9:7c:8e:3e:00:14:44:80:4f:cf:09:4d:78:91:31:e8:b8:
         58:a4:02:94:cc:ae:7b:46:23:01:15:89:d7:e5:11:64:48:9a:
         4d:2f:81:5f:ba:1e:85:b4:fa:ae:fd:91:7b:7f:8d:89:e2:ee:
         80:f3:3b:73:64:85:14:1f:d1:d6:01:31:77:57:c9:d6:d7:84:
         67:ee:07:72:30:95:ad:59:00:92:be:5c:85:f0:c1:3b:aa:07:
         c0:40:e7:5a:70:a9:a5:16:ad:b1:31:24:73:c8:a6:ff:5c:9b:
         92:2f:80:44:5c:ae:ff:77:81:57:ad:43:af:55:ef:0c:64:9f:
         e6:f9:3f:e7:7d:aa:bb:60:2f:fc:22:6b:22:25:69:85:b8:47:
         5b:2d:2b:53:5e:c2:40:41:9c:f1:f1:5c:b4:6f:f8:17:ea:2c:
         bf:c7:0f:e2:d8:4a:cf:1d:60:ab:5d:e7:da:89:a5:b9:78:ca:
         36:08:b9:d7:96:9b:e3:34:47:19:fc:0a:06:bd:5f:65:7e:7a:
         cf:f9:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:21:20 2024 by rpki-client on console-ams.rpki-client.org