Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa
File:                     4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa (raw, json)
Hash identifier:          34zGualvDEHcQBqlSxhg2K5T6x5lx2Vkvg8yL7Ig/KY=
Subject key identifier:   32:A3:C2:E2:99:9C:65:82:E8:8A:3F:B6:CB:70:70:DA:38:FF:24:2D
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F43285846AEC4FE9706FE6F8BA95B5DC0
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa
Signing time:             Sun 28 Jul 2024 01:00:28 +0000
ROA not before:           Sun 28 Jul 2024 01:00:28 +0000
ROA not after:            Sat 26 Oct 2024 01:00:28 +0000
asID:                     3464
IP address blocks:        129.66.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ae:c4:fe:97:06:fe:6f:8b:a9:5b:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Jul 28 01:00:28 2024 GMT
            Not After : Oct 26 01:00:28 2024 GMT
        Subject: CN=e41a1261-5fc9-456f-838f-594c634e8187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:7c:63:0b:1d:8d:aa:79:3f:05:6f:5f:e6:
                    1d:d8:e8:b8:6a:a9:a1:38:64:a2:0c:ea:89:ce:79:
                    26:9c:f9:da:28:ac:9f:c1:f6:d3:25:a6:99:c6:bf:
                    5a:53:c8:2d:e4:f3:1b:54:47:c5:7d:cf:fb:e5:32:
                    82:0e:b3:57:df:67:93:89:8b:29:91:62:6c:f1:50:
                    f1:20:8a:39:5a:f7:d8:25:e8:69:93:46:b9:a8:d3:
                    18:0a:38:32:83:c1:ca:ee:0c:ef:18:d4:10:ec:86:
                    41:a4:d4:90:45:0b:68:42:0c:8e:47:89:83:1d:c0:
                    d9:4c:5a:42:7f:3b:79:0a:11:67:c4:63:21:eb:69:
                    55:31:ab:96:e0:6e:2d:8a:32:b8:af:2c:25:d7:aa:
                    2c:33:aa:2c:30:71:75:a5:36:84:e6:89:42:4d:13:
                    f5:81:b3:61:c2:82:0b:ac:b6:f8:46:26:6e:87:3b:
                    4a:2e:5a:0c:41:dd:58:46:3e:ff:86:7e:28:98:92:
                    98:c4:4c:9c:1e:59:82:86:82:41:6d:11:17:17:2a:
                    c9:83:73:65:20:d2:c9:cc:e3:39:f8:45:c4:90:6c:
                    cc:5c:38:90:a1:d7:79:8b:e9:01:93:5c:a6:54:f1:
                    c0:4e:a3:32:60:d2:a5:82:e3:b0:70:05:11:b9:68:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:C2:E2:99:9C:65:82:E8:8A:3F:B6:CB:70:70:DA:38:FF:24:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/4ecbbfab-4a9f-32e1-a4da-5737611ac7cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:5e:0d:74:a6:64:63:d8:38:52:48:09:a0:82:f9:55:2c:
         20:8e:48:be:20:5a:8b:d3:92:8d:f1:1c:bc:42:4a:dd:22:77:
         2d:c4:08:5b:4a:47:0b:07:7d:e4:0e:10:b3:49:94:ab:5e:08:
         02:4b:2e:d9:47:e6:f9:b7:3c:3d:2d:a5:bd:61:35:2b:49:14:
         4c:39:56:70:36:8e:57:2d:5d:bf:57:06:9f:94:1b:bb:31:a8:
         cc:af:7a:20:14:55:49:b6:6c:cb:86:74:bf:eb:86:d9:e0:d1:
         cf:a3:1b:3d:11:a0:94:0f:00:67:fa:ee:ba:13:50:b8:f5:17:
         cd:fd:55:52:32:23:97:2c:81:bd:f4:11:c5:2d:d3:e6:48:21:
         54:bf:97:98:8f:ef:83:b7:bd:3b:59:f7:62:de:64:3d:90:09:
         9a:54:36:4c:e1:88:bb:8d:fc:1e:67:b6:01:35:8d:1d:86:33:
         9d:53:07:fc:74:a4:4c:6f:0f:44:fa:8c:c6:85:0a:68:ed:b5:
         ae:6b:c5:4e:f6:57:00:c8:2d:b4:f0:9c:e1:b5:6f:5c:95:7e:
         dc:59:b3:76:3d:c1:dd:a5:41:23:c4:67:a8:6f:74:b0:bd:ee:
         ba:14:ab:6e:c8:6b:9a:8a:0c:89:9c:c8:c7:7f:f6:f1:b4:d6:
         d6:af:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:05 2024 by rpki-client on console-fra.rpki-client.org