Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0294fb3e-2019-38fb-af05-7167ea8255fd.roa
File:                     0294fb3e-2019-38fb-af05-7167ea8255fd.roa (raw, json)
Hash identifier:          IcvUnqkz+fW+xLk3SC1T9Fxa8PI244N45lqRQvmtkAc=
Subject key identifier:   2E:DE:81:49:F4:39:89:8A:83:B0:1A:7A:B6:25:D8:77:A7:55:0A:CD
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DBA4264B83F954E3E0A80
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0294fb3e-2019-38fb-af05-7167ea8255fd.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        66.242.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:ba:42:64:b8:3f:95:4e:3e:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=8f4834f6-232f-429f-b109-cf60ab14f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:14:82:aa:80:5e:82:f3:63:77:26:de:73:
                    a6:72:f2:ca:10:b6:2f:1c:4c:3a:eb:5a:cd:60:ea:
                    5e:d6:66:a6:10:87:38:d3:c8:d5:30:4a:43:9c:df:
                    9a:d4:40:25:d2:70:39:15:bd:60:5b:0f:e1:18:4e:
                    e3:d7:b3:31:dd:40:a7:ca:55:d0:a2:e3:fe:cf:e6:
                    2e:50:f7:e5:8a:51:cc:12:3a:66:c3:00:b5:61:33:
                    1d:61:ee:3e:cf:c4:8a:89:a3:92:b4:15:4c:da:67:
                    d6:a3:26:91:c3:08:4f:98:f9:1a:37:0e:b2:7b:fb:
                    92:d3:9d:7b:75:18:a9:ba:04:1f:c4:24:2e:b0:db:
                    6c:4f:6f:1f:cc:ff:e9:b6:3c:06:6a:27:d7:84:09:
                    54:bb:99:3e:76:c4:20:56:b0:d5:db:eb:a4:0e:40:
                    27:d5:fa:39:c9:6d:a5:88:f9:62:dd:a8:d0:3c:17:
                    4c:51:7b:0a:73:43:98:68:ca:d2:4f:bb:2d:13:8f:
                    50:e3:dd:6d:12:5a:d6:85:70:22:7e:4c:45:88:53:
                    00:c5:0a:ba:72:77:56:73:44:7b:c0:10:8a:cb:6a:
                    aa:ee:a5:b5:48:b1:6b:b0:46:ec:fa:f4:d6:2b:46:
                    d8:1c:4d:0c:3d:29:f2:36:a3:cc:1c:96:37:42:40:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:81:49:F4:39:89:8A:83:B0:1A:7A:B6:25:D8:77:A7:55:0A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0294fb3e-2019-38fb-af05-7167ea8255fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7a:6d:57:3b:fd:cf:b3:1e:20:0c:ea:d9:10:71:de:93:41:
         aa:b8:27:cd:d1:03:7a:f9:b4:fa:c3:5d:2f:3e:74:57:66:69:
         94:4d:5c:7a:76:d2:9f:87:fb:f2:31:34:8c:7a:92:13:a7:5c:
         1b:ea:79:78:33:af:ee:b2:9a:38:82:7a:8a:7e:ab:4d:4f:d8:
         24:38:5f:98:cc:fe:f2:70:ca:90:4e:d2:4c:db:0d:02:81:e3:
         9f:f3:2a:e0:6a:60:2b:3a:8d:6d:2c:ef:7a:c9:f9:9e:1d:2b:
         e7:17:71:b6:a5:31:e1:7c:37:b3:80:7d:6b:77:52:03:be:bb:
         9e:56:40:1b:68:51:82:c8:94:ea:b3:f4:22:ab:99:8d:d5:7d:
         42:3e:7b:ab:f5:fa:52:d0:45:69:72:46:b1:29:0f:55:a2:28:
         73:7e:0e:82:39:0f:02:4c:47:07:1e:16:ee:3d:c9:9a:ab:e5:
         81:f8:c1:c9:88:7f:7e:ca:09:9f:02:4f:9f:48:b0:46:18:7b:
         05:46:17:16:7d:da:98:f9:48:b1:e1:03:68:44:c7:2e:7f:94:
         eb:dc:54:0a:1e:f2:67:3e:2c:dc:71:0d:d3:76:6e:45:a7:a8:
         1c:4f:44:3b:6d:84:0f:a0:05:b2:3f:32:d9:1c:03:da:16:2b:
         a4:fc:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:04:22 2024 by rpki-client on console-fra.rpki-client.org