Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa
File:                     e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa (raw, json)
Hash identifier:          Ah2QDGBFxocrv8uU/+JK/qnko5OcBmoOr+o6JqPwqq8=
Subject key identifier:   92:7B:D1:7D:07:F4:19:D8:E0:5D:CB:6D:5A:30:FD:61:25:59:3E:49
Certificate issuer:       /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Certificate serial:       010D0C9F43285847AB6C115B4BBF0D154C159CC0
Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     23465
IP address blocks:        66.44.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:11:5b:4b:bf:0d:15:4c:15:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=d7692b5a-1e30-4d54-9389-5b4ed473e2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f2:cf:91:9b:7c:c1:21:d6:37:5b:79:00:9a:
                    30:f7:a0:a0:76:80:80:90:94:b6:08:e2:64:be:b9:
                    53:e3:eb:8d:fa:ac:61:44:ec:6e:4a:03:53:d4:4d:
                    a7:fb:ba:20:7b:ad:de:b5:76:b0:b1:d3:3f:96:d9:
                    22:92:61:d6:32:27:3f:c0:3d:87:29:66:0c:10:47:
                    76:d0:b5:68:0b:69:2c:4f:31:8d:8e:75:f5:b5:35:
                    79:32:3a:41:3f:16:19:57:f4:35:90:2d:3e:93:99:
                    3b:1f:b6:1f:14:f4:6b:5a:9e:2d:77:15:1f:af:40:
                    15:d8:61:5c:36:bc:fa:10:ee:4f:31:69:ee:55:90:
                    42:f0:e8:f6:13:29:8a:e9:16:bd:81:51:3b:2b:6a:
                    ff:d8:b3:10:9b:34:b4:b3:34:08:fa:00:61:d5:38:
                    ec:ca:2e:46:30:ab:72:90:66:43:51:45:1c:ba:98:
                    87:03:83:36:e2:be:ea:52:9e:62:ba:1a:08:c7:2f:
                    b4:b4:d4:47:59:4f:69:20:62:1c:32:0e:db:61:6b:
                    a9:e7:b6:d8:f6:7b:ef:56:c4:f7:c0:3e:f6:f6:5f:
                    58:03:d3:84:f1:65:f3:81:0d:19:49:0e:63:aa:26:
                    f7:02:62:d3:a1:b3:e5:e7:39:87:4f:3d:f7:e6:89:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:D1:7D:07:F4:19:D8:E0:5D:CB:6D:5A:30:FD:61:25:59:3E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl

            X509v3 Authority Key Identifier:
                keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.44.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:da:9e:18:78:61:1f:c7:66:34:72:9a:9d:85:35:12:03:99:
         83:43:58:0c:f1:0a:77:47:06:a0:6f:24:ad:68:d0:3d:1b:fc:
         bd:c6:df:2d:94:60:ac:d4:74:e1:26:1d:c0:f4:7f:96:a8:d5:
         e7:ca:6f:2d:58:15:a8:e6:2b:ee:76:b2:41:58:a0:10:b9:b2:
         c2:1d:a8:28:64:d4:49:38:bc:c2:d1:7f:42:4c:6c:1a:ca:ba:
         8a:fb:0b:d4:f5:a8:e2:78:46:74:a3:d4:0e:a3:6c:9c:60:8f:
         6d:d7:8c:b3:3e:28:be:a1:9d:80:e4:20:b0:65:85:b3:dd:fa:
         44:56:0a:68:d5:54:d1:36:96:9c:d0:ad:02:3e:fd:15:42:3e:
         82:3f:75:db:94:04:da:1c:3a:dc:02:40:eb:44:b9:fe:9c:6b:
         b5:b7:c4:42:30:b3:df:d3:87:67:b5:6a:5f:da:74:df:9d:16:
         80:7c:36:0e:55:5f:da:67:69:f4:0c:6d:56:2b:7c:4a:8e:89:
         42:55:d1:bc:e2:74:2f:22:46:77:6a:6f:20:10:4d:de:a8:e6:
         4d:52:20:5a:8f:16:73:ba:7e:a4:67:8d:4f:76:20:b2:51:e8:
         58:24:00:ef:f6:c0:33:b0:e2:06:38:25:73:ea:96:9b:1f:e4:
         c1:79:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:25 2024 by rpki-client on console-ams.rpki-client.org