Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa
File:                     4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa (raw, json)
Hash identifier:          vk1W+NPaiKsqSwygQn1pdAjKeu6S/6CvWbrmEFI+p10=
Subject key identifier:   9C:18:23:A0:76:F5:E2:02:4D:2D:3A:CD:E6:6B:0C:7B:05:CD:54:AD
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F432858466BC4828423115991753B1940
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa
Signing time:             Thu 04 Jul 2024 01:00:26 +0000
ROA not before:           Thu 04 Jul 2024 01:00:26 +0000
ROA not after:            Wed 02 Oct 2024 01:00:26 +0000
asID:                     46562
IP address blocks:        66.115.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6b:c4:82:84:23:11:59:91:75:3b:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Jul  4 01:00:26 2024 GMT
            Not After : Oct  2 01:00:26 2024 GMT
        Subject: CN=324094a5-3d6f-45d2-9f63-42b37f049ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:db:3d:5a:d8:45:6f:0a:ee:65:23:ce:61:
                    d8:d3:44:6b:27:da:e2:a1:6f:56:46:b4:d6:e3:69:
                    e3:a4:e6:52:09:e4:31:59:b7:0a:91:a7:66:fe:be:
                    a0:50:5a:20:6a:ca:83:b5:e4:6e:ab:a1:95:c8:36:
                    00:cd:5b:27:a1:5e:ed:e1:fb:cf:64:98:3b:b0:f1:
                    1b:2a:f0:59:a2:19:e3:e4:e7:16:c1:d6:5c:98:8a:
                    c3:21:80:82:09:11:e5:9c:1e:19:ea:bc:09:e3:b4:
                    53:f2:d7:a7:37:54:cb:aa:23:5a:79:59:27:4a:4d:
                    b0:fd:7a:93:e8:3c:0f:ae:06:a8:c5:8d:8a:c2:ef:
                    c0:3b:cc:f4:b2:77:a4:35:37:90:13:6f:f1:8d:c5:
                    0b:94:59:58:14:3c:1f:8b:f8:cb:33:15:92:2e:ba:
                    f3:28:af:79:f3:30:fb:9c:34:7d:6b:1b:e2:12:cf:
                    9b:f3:11:d8:5f:31:d0:55:1f:58:13:e1:35:46:13:
                    63:1b:de:90:e1:8a:a5:13:4c:92:72:24:50:a9:42:
                    6f:a0:3d:c5:4e:bb:a7:c7:cb:d2:50:76:d6:6e:74:
                    2f:a3:43:1b:00:2f:6f:08:39:95:c8:bd:5b:7d:95:
                    e5:ea:42:92:0c:fe:8f:ed:34:6e:36:65:6d:4a:d4:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:18:23:A0:76:F5:E2:02:4D:2D:3A:CD:E6:6B:0C:7B:05:CD:54:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/4eda7eaa-186f-3d2b-a880-a4382ab8999b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:05:f5:cc:86:67:6e:b5:9f:dd:93:5b:a6:89:ce:de:35:e8:
         fc:29:65:a1:ef:fd:24:7d:71:ef:a0:6b:f2:11:71:ee:10:2e:
         d1:5a:89:c6:b2:77:d8:58:cc:23:6d:fd:e7:76:1d:3b:ec:8d:
         66:60:82:b4:68:35:e0:3e:14:cf:1d:71:b8:da:43:bf:f0:fa:
         a0:48:11:bd:e9:c8:93:4d:e1:86:3b:ea:5c:08:4a:48:a6:fc:
         ab:d2:e7:7c:9a:9c:a5:65:fe:d0:b7:13:37:ee:27:d6:e9:d2:
         ab:5a:32:ff:c6:27:f9:be:b0:bb:44:40:e5:c8:0c:dd:16:28:
         1e:a0:45:c7:90:06:75:9b:3d:cc:b7:8e:79:5f:84:e2:ce:aa:
         dd:0e:8e:c7:d8:36:e5:6b:36:28:14:c2:25:67:1e:fd:49:a4:
         de:67:a6:fb:8d:59:25:06:9b:4a:e2:35:a3:77:e6:76:94:d9:
         9b:d2:3f:ac:73:62:ef:49:e7:5a:7e:e6:1d:ab:69:c5:d3:a5:
         06:94:f6:00:02:e6:3e:4d:34:e8:3f:df:ae:0f:33:a9:a4:87:
         d6:c0:7e:af:05:57:6e:86:d8:30:1c:5e:46:54:1f:b5:b8:c5:
         2b:65:77:c1:57:cc:1c:ca:28:ca:a4:1a:d9:db:c2:08:cd:e5:
         e4:63:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:59 2024 by rpki-client on console-fra.rpki-client.org