Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/020af983-027c-30cc-9e6f-0a3ae736c09b.roa
File:                     020af983-027c-30cc-9e6f-0a3ae736c09b.roa (raw, json)
Hash identifier:          jsa6hlrN4NoqczusZJ9VBZ6H/eJWBMrcupYqA52p0zE=
Subject key identifier:   CE:9C:CD:35:6E:C9:23:DF:D8:99:42:03:3D:90:3E:ED:9A:59:4A:34
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584582A89BEF987DDDE09FCD3500
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/020af983-027c-30cc-9e6f-0a3ae736c09b.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     398395
IP address blocks:        66.11.113.0/24 maxlen: 24
                          66.11.114.0/24 maxlen: 24
                          45.43.13.0/24 maxlen: 24
                          45.43.24.0/24 maxlen: 24
                          104.255.230.0/24 maxlen: 24
                          45.43.12.0/24 maxlen: 24
                          66.11.123.0/24 maxlen: 24
                          66.11.116.0/24 maxlen: 24
                          66.11.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9b:ef:98:7d:dd:e0:9f:cd:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=512b2f68-3243-46b5-a26b-44071bf46283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:29:98:ea:84:8d:ed:57:b5:68:fa:cf:06:
                    36:7f:13:64:22:a4:4c:94:10:d8:0e:58:44:91:3e:
                    bf:53:ef:7e:3c:16:69:e3:3e:ec:87:4d:4a:2f:df:
                    b9:14:1d:a3:8f:87:97:e5:e7:66:c6:dc:74:2d:7b:
                    ea:91:39:96:93:d3:e5:0d:43:bd:98:98:91:ca:c2:
                    c7:95:be:bf:51:89:01:dd:3a:2c:4f:8c:c1:cb:5d:
                    f5:3d:51:81:28:cf:35:26:b6:9c:0f:f0:e1:2a:99:
                    b6:69:95:63:96:60:ca:cc:a8:fc:ed:1e:9b:30:a8:
                    85:80:63:f2:80:2b:02:74:ba:c0:8a:57:30:c6:47:
                    83:86:bf:52:f3:57:06:bd:31:3f:59:27:f6:df:a6:
                    2c:c0:05:f0:38:fb:b3:f5:64:f5:69:1b:3e:e7:41:
                    fe:c0:6b:84:3a:27:b1:47:90:c1:b4:0c:b7:6f:90:
                    9c:27:90:4f:f6:1a:7f:9d:20:2f:b2:d6:39:5e:51:
                    bb:2b:fc:44:36:b0:72:26:57:81:7b:3a:ac:25:a3:
                    49:91:1c:2c:df:da:78:e9:bc:37:8b:dd:cf:3b:3a:
                    0d:76:08:96:1d:22:9b:94:f6:f6:1b:7f:43:a1:3b:
                    57:8b:28:46:e3:82:01:da:a1:11:c5:eb:e5:f6:c6:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9C:CD:35:6E:C9:23:DF:D8:99:42:03:3D:90:3E:ED:9A:59:4A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/020af983-027c-30cc-9e6f-0a3ae736c09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.12.0/23
                  45.43.24.0/24
                  66.11.113.0-66.11.114.255
                  66.11.116.0/24
                  66.11.118.0/24
                  66.11.123.0/24
                  104.255.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:1f:24:6e:f3:9c:10:c6:7b:8a:65:86:34:dd:ce:bd:ce:
         16:17:be:4b:a1:8c:d9:02:9b:3d:c0:39:8e:11:f2:f6:d8:ee:
         09:50:d2:a7:63:6e:b3:cd:e0:29:99:b2:51:4e:84:33:c4:07:
         36:3d:6f:c4:fa:9d:ab:b1:2e:9a:9a:44:9d:6b:ba:e3:64:57:
         3a:ae:9d:0c:eb:1b:b2:b1:11:d1:2a:40:65:0a:99:2c:12:2d:
         63:4a:ad:ed:f8:03:7d:ab:96:6c:21:d8:9c:10:2f:74:40:7e:
         56:63:15:60:27:01:fc:8f:40:f9:a2:f8:82:83:aa:df:de:c4:
         42:c0:65:e7:7f:8f:5f:92:13:13:a9:60:ba:10:fe:54:67:da:
         c4:bf:da:5c:62:2b:39:5f:ef:b5:90:9e:07:9f:c2:ad:53:6e:
         fd:a5:61:25:a4:38:3b:fd:23:e3:a8:91:85:b4:ef:ba:6d:71:
         86:5b:32:26:21:2a:60:2d:d1:cf:cb:41:b0:14:7d:9a:e2:1f:
         75:fc:88:e4:a6:66:26:77:ba:d8:e6:20:e2:1a:a7:71:dc:b1:
         5d:94:da:65:45:a8:24:0b:5a:e5:4a:54:c4:bc:d6:90:c1:a7:
         76:70:7b:36:49:22:5a:2f:f7:0b:f5:ba:b4:8b:1d:14:e2:82:
         d4:37:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:22:39 2024 by rpki-client on console-ams.rpki-client.org