Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa
File:                     894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json)
Hash identifier:          Tr/H8NK5W79zA8wffrUP0jEtH+cv70w6I+1Oag7TYKU=
Subject key identifier:   30:A8:92:EF:EF:5D:6A:FF:D7:0F:18:8B:70:AF:79:1E:A6:CB:B2:02
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F43285845CE0905EE269C3FBDBE40F2C0
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     209242
IP address blocks:        66.81.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:05:ee:26:9c:3f:bd:be:40:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=50ccd20a-2547-4831-bffe-06b477fc7d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:e0:ff:51:dc:bb:bb:45:89:3f:24:90:e9:
                    5a:de:74:3a:68:d5:d7:05:04:02:83:02:e6:f9:82:
                    46:fd:26:5f:22:7d:08:05:b6:3c:53:26:c2:bf:04:
                    a9:ca:65:bd:17:7a:3e:ea:84:48:f0:11:9c:be:ec:
                    92:80:5c:8c:bd:77:40:a1:99:72:32:16:ca:c0:e3:
                    19:80:a5:6c:a5:8e:9b:91:67:ec:4d:30:83:85:57:
                    46:cd:c8:ca:63:65:2c:69:5c:94:20:21:db:e7:17:
                    fb:5e:07:c9:21:23:7b:5e:87:46:13:51:bc:32:e4:
                    29:b7:a3:0a:6f:95:00:28:f1:59:bb:90:68:53:17:
                    06:16:01:45:92:84:7f:41:1b:be:cb:d2:8e:47:52:
                    23:5d:0f:a8:ee:37:4c:6a:3c:1d:cb:04:e1:36:3b:
                    19:de:53:77:d3:e8:bf:f9:23:18:30:e6:12:50:5a:
                    91:90:12:a0:f4:3f:19:5a:45:2c:36:01:2f:ed:96:
                    c8:40:4a:32:9b:ab:37:42:c1:4a:91:bf:90:f1:a9:
                    3a:d3:94:21:56:55:b4:99:79:b5:3c:06:fe:e6:ed:
                    54:06:21:60:61:38:98:9f:69:71:f9:25:17:01:9b:
                    22:91:a6:8a:0e:9e:e5:55:41:1c:68:3a:83:18:3c:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A8:92:EF:EF:5D:6A:FF:D7:0F:18:8B:70:AF:79:1E:A6:CB:B2:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:b7:c9:ec:b6:28:08:a2:65:ef:d5:0c:29:92:74:cf:29:
         9e:1c:08:cd:64:09:18:55:98:36:bc:d9:f2:b8:b2:61:de:c3:
         2f:32:2d:5d:c9:59:81:48:fc:63:5d:7a:65:01:52:99:2c:e8:
         3a:eb:45:b9:c7:5a:82:6a:86:c3:29:9c:21:09:7b:00:16:48:
         40:d1:b8:85:92:b8:99:36:b9:0a:08:bc:84:0d:9b:24:0d:cc:
         3b:f2:15:41:d3:23:30:9b:ce:cb:0d:17:7e:4a:15:ae:e0:8a:
         a0:76:5b:df:7d:1e:ef:a5:7c:cc:db:34:1e:b7:9f:47:65:a9:
         92:f2:11:e2:c4:73:67:4b:ff:48:f1:a1:31:4c:a8:52:fd:03:
         3a:fa:4a:df:15:95:e1:e8:83:c8:b6:b7:66:c7:e0:86:6c:b2:
         39:ac:7c:9a:09:c2:64:bc:5f:9e:1d:b1:1d:68:3f:fd:f9:91:
         2a:18:f3:46:d1:c6:96:6f:b8:c7:49:61:37:78:0b:6c:d0:b8:
         ce:fc:1b:9e:24:01:25:cb:7e:4d:2f:ed:19:4c:24:17:07:26:
         39:f5:1d:a9:66:d4:be:1d:d5:09:3f:4d:da:55:70:92:46:a5:
         b2:45:20:5b:17:11:8e:74:29:ee:39:56:4f:7a:2a:72:9c:1e:
         6f:6e:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 01:57:02 2024 by rpki-client on console-fra.rpki-client.org