Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa
File:                     5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa (raw, json)
Hash identifier:          y9rEOwxdaGNTG8EAx+wHXG0H2W6O9IYCT2owMj2xpyo=
Subject key identifier:   A7:3D:AA:57:AE:A9:F2:AA:4F:7C:0E:54:AF:5D:BB:04:53:95:89:4D
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F43285845A15E13FB65E4595732C5E740
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        66.180.138.0/23 maxlen: 24
                          66.180.128.0/22 maxlen: 24
                          66.180.148.0/23 maxlen: 24
                          66.180.147.0/24 maxlen: 24
                          66.180.152.0/23 maxlen: 24
                          66.180.151.0/24 maxlen: 24
                          66.180.144.0/24 maxlen: 24
                          66.180.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:13:fb:65:e4:59:57:32:c5:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=6ad835f6-d8fa-4f8b-be28-a60e5d0325a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:0e:12:b1:9b:fe:fa:e0:5a:58:bc:65:96:
                    0d:92:1a:6f:55:af:dd:cb:25:71:85:dc:99:f9:88:
                    2b:65:40:3f:b9:e1:21:27:20:a8:96:61:03:df:f5:
                    a3:11:05:df:e4:7c:b7:24:0d:e5:64:07:54:c3:90:
                    a6:aa:80:9b:7c:5d:4d:4f:60:fe:28:37:4c:1d:c7:
                    1d:4f:83:6a:21:46:a9:b2:98:0d:b6:68:97:7e:2b:
                    55:fb:3e:ee:f1:8b:7b:a5:bc:51:34:17:4e:81:1b:
                    ad:ee:1d:02:ea:70:7d:c3:36:80:2e:d6:b5:10:e1:
                    72:32:84:8c:76:c0:72:c6:17:5b:d2:52:70:3d:21:
                    a4:8d:3d:bf:31:56:e4:39:60:ae:50:01:93:2b:e6:
                    ca:5a:f4:d8:ad:4e:a7:73:96:73:9c:23:af:ce:f7:
                    b2:ed:43:7a:72:67:e9:64:8c:09:4e:d6:3b:36:c6:
                    96:9d:b4:8f:32:54:66:e0:04:44:43:b6:98:de:73:
                    87:9a:be:48:f1:67:ad:d7:6b:91:4a:9c:08:5e:64:
                    d9:6a:bb:59:4f:55:5e:6a:b5:5b:03:dd:6f:bd:a2:
                    6e:aa:2e:9b:9c:17:ab:63:97:65:8a:0a:75:c9:0a:
                    25:09:6d:7d:22:49:09:78:13:16:7a:5e:52:ac:78:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3D:AA:57:AE:A9:F2:AA:4F:7C:0E:54:AF:5D:BB:04:53:95:89:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/5fea9aa0-fd40-3207-aee7-a4bd9ead9313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.128.0/22
                  66.180.138.0/23
                  66.180.141.0/24
                  66.180.144.0/24
                  66.180.147.0-66.180.149.255
                  66.180.151.0-66.180.153.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:60:11:c6:16:51:53:ba:61:6d:e6:78:0a:3e:ba:fa:04:13:
         ab:f0:14:b4:59:8f:eb:58:ba:fc:1f:95:6c:f8:b0:27:dd:dd:
         35:76:d9:7a:12:cf:d2:b5:55:40:56:3d:45:7d:e5:24:4d:45:
         cc:b1:d5:25:3f:f6:1c:0a:cd:7c:03:4e:ae:9d:10:0d:a5:6f:
         7e:a4:c5:13:6a:52:09:7b:15:a1:82:71:61:11:dd:12:1e:a2:
         31:25:bc:49:c9:bd:e3:1b:b5:a6:c1:fd:ae:59:c1:a4:dc:a0:
         c7:55:1e:07:52:b1:18:7f:34:a5:af:87:87:13:c8:81:ca:a5:
         3a:a7:37:a6:da:9f:dc:47:eb:d1:b8:85:c7:17:b5:a5:90:ab:
         86:ae:51:6e:0f:3b:bb:c3:e9:25:9e:8d:68:43:70:cc:45:5b:
         06:29:87:ee:db:47:dc:8c:f8:eb:34:c6:1b:7e:82:7b:a6:3d:
         c9:8b:fd:da:8f:8e:b5:2e:2e:8e:f5:44:d3:6e:54:86:ce:5a:
         10:97:89:83:e1:d8:c1:ee:58:fb:80:25:a5:a7:73:f0:a6:c4:
         8e:4b:d2:ab:19:bc:20:9c:ba:4e:39:86:c8:2f:a7:16:6e:36:
         a1:6d:56:01:c8:f7:ca:43:0d:3a:68:5e:97:f0:07:53:c2:98:
         f2:10:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:46:34 2024 by rpki-client on console-ams.rpki-client.org