Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
File:                     385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa (raw, json)
Hash identifier:          o9+LqBe6z6Dc45q/6CXSUiXAeHz5hmi5s15WGZBSge8=
Subject key identifier:   81:3C:77:E4:D2:C3:C2:7E:C4:3C:98:83:85:2E:D6:D6:8B:8B:76:57
Certificate issuer:       /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial:       010D0C9F43285845F793A24307D7F02D601C2A80
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
Signing time:             Thu 23 May 2024 10:08:12 +0000
ROA not before:           Thu 23 May 2024 10:08:12 +0000
ROA not after:            Wed 21 Aug 2024 10:08:12 +0000
asID:                     396226
IP address blocks:        66.146.226.0/23 maxlen: 24
                          148.59.145.0/24 maxlen: 24
                          173.231.64.0/23 maxlen: 24
                          173.231.68.0/22 maxlen: 24
                          199.193.59.0/24 maxlen: 24
                          200.50.128.0/21 maxlen: 24
                          209.142.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:93:a2:43:07:d7:f0:2d:60:1c:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
        Validity
            Not Before: May 23 10:08:12 2024 GMT
            Not After : Aug 21 10:08:12 2024 GMT
        Subject: CN=d7023eda-3d24-4e5f-9384-8e5c8c022470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:16:8d:e2:d3:87:45:d5:5c:ef:a0:34:38:
                    f7:82:57:f4:b2:f9:3e:f2:2a:0e:ec:60:a1:d2:b7:
                    12:51:82:c7:ce:dc:cb:51:cc:f7:28:2e:42:94:20:
                    c7:1b:e2:62:4a:e0:af:51:37:57:e8:45:b8:70:e6:
                    fe:37:63:9b:56:ac:6f:30:c0:d7:2b:22:45:25:7a:
                    0d:e1:c4:02:77:0d:9c:d1:f9:26:c9:ca:2d:d9:9b:
                    10:c8:6c:6b:c6:56:7b:80:9d:c3:13:1d:80:e8:f1:
                    f9:21:55:58:8c:bc:7c:5a:3f:0e:3c:cf:87:70:80:
                    2d:8c:e3:56:18:7b:3e:d1:20:c1:65:20:3e:31:86:
                    0d:1e:9b:09:6f:e7:f8:09:a2:8c:2a:75:d7:f0:a3:
                    2c:a3:f5:d7:a2:5c:94:72:ca:59:2f:20:d9:e4:aa:
                    ee:88:09:90:c2:0d:ae:69:f0:4a:9f:1f:da:15:a5:
                    eb:69:f3:97:c2:53:80:27:9c:98:63:f6:77:36:db:
                    d9:34:45:52:bf:3c:cf:85:c7:56:c5:5f:44:f7:f5:
                    f3:ac:e5:03:be:b3:47:24:5b:6d:3a:cf:5f:7b:e5:
                    d6:01:5c:31:d1:1b:ae:46:62:aa:38:33:ad:af:7e:
                    e8:d3:de:53:bc:72:36:23:a5:44:e0:c9:db:27:ad:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:77:E4:D2:C3:C2:7E:C4:3C:98:83:85:2E:D6:D6:8B:8B:76:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl

            X509v3 Authority Key Identifier:
                keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.226.0/23
                  148.59.145.0/24
                  173.231.64.0/23
                  173.231.68.0/22
                  199.193.59.0/24
                  200.50.128.0/21
                  209.142.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ef:1f:4f:52:f2:1b:bc:ab:08:9b:c9:8a:7c:ec:6f:2c:e3:
         b6:27:32:c8:b6:10:d7:06:f5:2e:b8:a7:9b:bf:a6:01:e7:22:
         35:ea:12:89:94:b7:7a:68:1e:42:66:dd:e0:32:49:7a:72:1e:
         9f:0e:5d:87:2a:14:70:41:1b:49:75:6c:ff:29:95:4e:89:39:
         63:96:32:ec:9d:66:cb:18:f7:e8:c6:35:fa:27:89:6e:23:e2:
         5f:45:fc:aa:71:f7:52:67:80:4b:cf:d9:ac:b4:77:70:d3:7a:
         8e:b2:90:dd:85:96:12:69:78:60:5c:2c:90:d4:8a:40:52:0c:
         16:d6:44:7b:cb:d7:0c:46:3d:fc:a9:ac:1a:4f:41:f8:67:f7:
         11:ef:52:45:1c:56:79:8d:2a:99:03:a2:46:69:40:9d:92:be:
         63:aa:55:59:8d:df:2c:88:ca:cb:b1:7a:e7:1f:d3:e0:7f:1e:
         27:ef:88:9b:9e:79:46:16:84:19:ad:f9:e3:1a:e3:44:a0:ff:
         8b:c6:79:ed:44:27:19:b0:ca:b7:e0:7d:32:d2:a7:1e:07:59:
         52:2e:fc:b1:db:be:58:57:d0:91:47:1e:ae:03:2b:6c:9e:9f:
         ac:67:4d:b4:86:c3:6e:54:69:28:9d:74:70:aa:2e:0d:14:55:
         65:64:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:43:01 2024 by rpki-client on console-fra.rpki-client.org