Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6141479f-3b17-312d-b70d-339eac240657.roa
File:                     6141479f-3b17-312d-b70d-339eac240657.roa (raw, json)
Hash identifier:          Jf03gpUmt16gr3/8UtAOljQDeSgqXBDD8AMKdwq3Izk=
Subject key identifier:   96:8C:85:F8:BF:E8:B0:6F:10:FE:58:9E:3F:28:12:1E:B7:E4:8E:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF7521A94B5731AEA7E200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6141479f-3b17-312d-b70d-339eac240657.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        66.41.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:75:21:a9:4b:57:31:ae:a7:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=9c57a42f-eb87-43c5-83d8-9936b3456a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:af:9b:18:9e:df:ff:13:22:af:b3:e1:10:
                    79:e6:7c:ce:97:48:2b:80:9c:78:f0:00:52:26:36:
                    09:fc:04:df:1b:65:ea:41:2c:70:98:00:e6:af:32:
                    d4:6a:7b:f8:63:44:26:59:09:72:f4:64:aa:ba:f7:
                    b8:32:12:f0:30:65:59:a0:ba:6c:2f:5b:55:dd:f5:
                    ec:73:e2:38:e1:cc:8c:db:4f:d2:19:dd:8b:9f:5f:
                    67:15:71:af:4d:6d:b6:c7:7b:1a:38:14:61:db:c2:
                    32:75:42:76:cc:cf:16:3b:3f:a5:f4:f2:8e:8f:d0:
                    c4:34:b5:fc:25:9c:b7:0c:69:22:fb:bf:b4:fe:8b:
                    ae:ff:cd:8d:31:57:25:2c:e4:e1:dd:fa:0c:fa:aa:
                    26:0e:46:e1:01:ba:7c:15:31:01:d2:5d:80:1e:93:
                    78:5b:de:e6:8c:78:31:40:d8:41:c6:f2:0c:36:38:
                    dd:1a:a5:29:eb:38:0d:b9:de:8b:5a:f8:f1:08:8c:
                    a9:e5:2c:1c:55:90:f6:4c:03:23:f7:b4:25:42:0f:
                    70:aa:49:06:2d:82:e6:95:ee:99:c7:23:bb:cd:ae:
                    25:94:91:b1:64:ce:bc:4f:34:48:c5:5c:0c:8c:c8:
                    f2:39:c5:76:26:d0:ff:05:ff:b2:88:ad:0e:d5:cf:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8C:85:F8:BF:E8:B0:6F:10:FE:58:9E:3F:28:12:1E:B7:E4:8E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6141479f-3b17-312d-b70d-339eac240657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:af:19:c6:d1:c5:64:93:5a:51:06:6d:ad:c9:b1:18:51:00:
         a6:db:de:b0:56:50:8c:1c:f8:7d:e5:8c:ef:20:1a:84:81:98:
         54:b2:c2:4d:11:0d:bd:98:ed:17:50:8b:ea:12:43:fc:a0:98:
         3c:18:f6:5e:eb:25:fc:29:ec:c0:c5:be:b7:38:ba:e3:87:56:
         7a:f7:e3:6f:75:66:4a:54:8c:e4:38:a3:20:fd:ff:01:d2:04:
         7b:84:8e:b0:db:7e:2b:38:ee:59:a6:cb:72:aa:f2:d1:43:24:
         94:8d:15:50:c0:a8:e5:03:54:f6:3a:6c:50:c5:75:9b:8b:8f:
         ba:13:1a:0e:c5:df:a3:96:ff:a2:59:52:24:d8:e9:b7:13:6b:
         a6:b5:4e:33:ae:e5:61:75:b8:24:3a:56:45:f8:b9:32:4d:a2:
         5f:d7:75:b3:79:af:79:74:4b:f7:ae:de:e3:18:85:c4:4e:ec:
         f0:69:5c:b7:57:fc:ff:35:a3:7b:23:12:dc:01:33:02:c8:a7:
         66:01:c0:ef:fd:ad:96:9a:05:df:f6:a8:f1:10:2e:17:fc:dc:
         ac:a8:e6:c6:7f:cd:15:48:02:11:dc:12:fd:d9:a3:b3:ed:1b:
         51:e8:82:27:84:cb:3d:3f:eb:54:5a:4f:b1:52:26:5e:44:e5:
         3b:c2:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:39:49 2024 by rpki-client on console-fra.rpki-client.org