Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa
File:                     0ad1dded-4b94-3e11-872b-bcd15954c079.roa (raw, json)
Hash identifier:          kvWeSD3aV9ObRBEP2phyf/iB5HV0SI24QdZdvyAf4v0=
Subject key identifier:   9C:A9:94:36:E0:04:22:D2:08:C2:54:B2:2A:89:F1:D5:D5:23:76:3F
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F432858458C6DD1F2B8E55FAF8EEC6600
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     19224
IP address blocks:        66.103.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d1:f2:b8:e5:5f:af:8e:ec:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=25847525-b5e0-4eaf-b6f0-568ec132b010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:e1:01:06:a1:ea:14:b9:8d:df:5d:34:53:
                    91:f7:80:c0:59:9e:c1:71:c9:36:8a:40:8a:8d:6b:
                    d6:a6:d4:12:1d:de:e6:04:a4:d8:7e:d0:7d:d5:f6:
                    b9:f1:ec:7f:01:76:39:48:b0:b8:14:f0:05:9e:76:
                    f6:ad:df:fe:41:02:e5:06:4e:5f:da:3c:6a:15:17:
                    65:d6:3c:bc:71:e1:9d:a9:3a:95:da:3d:42:ab:28:
                    b2:13:90:4b:a6:59:8e:9d:7e:a4:23:d6:97:f3:08:
                    71:9c:e2:4d:b1:43:51:de:37:be:3f:ba:18:ef:14:
                    ac:75:7b:cd:60:29:c2:9b:4c:29:d5:13:01:6b:5a:
                    10:14:12:9d:f0:fb:1b:40:da:21:6e:10:51:60:14:
                    0e:78:6b:c0:ba:e0:67:ef:a1:71:50:c7:cd:00:2e:
                    9a:5e:cc:ec:e0:1a:bc:9a:d7:8e:cf:54:1f:f0:e5:
                    0f:1a:f2:c4:6c:b1:7c:c9:d7:b8:a4:d1:9a:7f:ec:
                    a9:0e:8a:ca:3c:2f:ba:e4:7f:8a:c3:81:16:54:0b:
                    f0:61:73:48:07:f8:98:d0:ec:28:20:ba:c9:96:42:
                    7a:0a:40:bc:3d:2b:0d:0d:0b:0c:0d:fa:b7:e3:11:
                    b5:7a:fa:ca:8e:a6:af:3b:15:64:40:71:d4:1e:8e:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A9:94:36:E0:04:22:D2:08:C2:54:B2:2A:89:F1:D5:D5:23:76:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0ad1dded-4b94-3e11-872b-bcd15954c079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:be:f4:06:1b:03:6c:e5:77:5c:7f:61:30:1e:20:ae:0d:
         19:c7:ff:48:98:9b:6b:b4:60:eb:bb:de:8f:cc:84:20:97:20:
         2f:16:05:07:8c:35:0e:73:8f:c7:db:f1:48:c1:56:04:b8:ad:
         e7:5d:2f:73:70:a6:32:2c:56:e4:ba:a0:2e:27:42:1a:31:75:
         3f:ab:f9:52:ca:82:93:50:3f:78:12:10:05:a7:38:dc:d0:c6:
         dc:01:c8:02:ef:1e:d8:93:05:46:a8:09:17:4a:52:04:92:aa:
         e2:2c:97:b0:a0:7c:8a:b8:03:8a:0f:8b:18:a6:be:20:a2:6a:
         f0:43:bc:4e:ff:8d:4d:88:9b:ac:0c:08:f9:3c:d6:b6:4c:01:
         8b:53:7d:5c:9f:8a:00:29:96:82:5c:29:3e:91:e6:c0:c0:b1:
         ec:4a:ec:2e:87:d4:e6:31:96:4a:dc:99:91:7a:25:dd:44:07:
         e0:3c:9b:66:33:e4:22:dc:c7:61:e8:19:e3:d1:92:c1:f8:1e:
         80:cc:6e:d3:9c:2c:ff:59:ce:9e:9c:36:e6:57:52:ce:de:21:
         e6:da:8c:2a:2d:94:08:14:e8:df:cb:5d:e6:2b:49:cb:07:29:
         c1:b6:f9:ce:7a:51:3f:13:fe:37:7c:36:47:e8:a6:f2:08:80:
         3b:71:6b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:47:20 2024 by rpki-client on console-fra.rpki-client.org