Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2ca5621-f739-33bf-9392-4556ca8e9d50.roa
File:                     d2ca5621-f739-33bf-9392-4556ca8e9d50.roa (raw, json)
Hash identifier:          jD3mLJOfSZqMyLKzshiT6C4MqerNJZcKl1t+n2a0/D8=
Subject key identifier:   CC:C5:BE:18:89:FF:5D:56:95:B4:89:09:36:17:D3:64:6C:78:41:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF70F0D70DACD6D9E48720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2ca5621-f739-33bf-9392-4556ca8e9d50.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        66.41.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:70:f0:d7:0d:ac:d6:d9:e4:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=99fbbf00-b18f-4485-a054-f8390e44de4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:92:e6:34:07:08:f5:3b:85:c0:6d:5c:2d:
                    90:80:a7:42:14:26:a7:48:5d:7f:64:e7:1a:97:ec:
                    f9:f7:9a:6b:46:ca:cd:62:b6:34:78:29:1d:31:5e:
                    11:04:32:da:44:3b:f9:b5:f5:36:b9:b1:f7:c3:c7:
                    a5:e6:23:13:3d:93:87:0d:76:24:00:ee:cd:0b:ed:
                    3f:03:cd:05:31:f8:7b:ef:f0:26:70:7b:1c:e4:15:
                    65:32:99:51:27:46:1b:de:35:aa:da:df:89:b1:7b:
                    ca:72:b0:1e:0c:6f:cd:4b:12:c6:e6:82:52:43:0c:
                    56:ba:c0:4c:1c:de:e7:50:c9:bb:b2:11:36:82:e9:
                    8d:ef:89:3a:5d:02:00:c9:9e:63:9c:2d:1c:36:57:
                    04:a2:5c:dc:31:2d:4d:6c:ab:b9:3b:45:a9:a1:d7:
                    bb:9d:77:b3:6f:3b:28:e8:e5:71:65:7b:d0:ae:67:
                    52:50:f5:e3:fb:99:72:33:d9:93:17:7e:c4:7a:34:
                    eb:bc:0d:b3:fd:e7:89:5a:d1:98:18:86:b8:ef:87:
                    53:00:43:2e:98:d5:f6:6b:0e:98:bf:24:0f:76:67:
                    8e:1a:7e:5c:c9:70:7a:98:14:65:1d:0a:8a:af:ce:
                    69:fc:40:89:da:e0:4f:7b:54:07:5e:6c:13:bf:d1:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:BE:18:89:FF:5D:56:95:B4:89:09:36:17:D3:64:6C:78:41:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2ca5621-f739-33bf-9392-4556ca8e9d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c5:37:cc:23:52:5d:3d:9d:51:5f:5d:64:02:85:32:c4:c7:
         ef:b0:06:c6:36:75:cf:13:1a:18:56:07:16:1d:30:05:7f:e5:
         13:03:cd:9e:6b:47:66:1e:84:23:06:77:a7:fb:ee:fe:9a:bb:
         cb:36:fb:a9:f5:1a:17:b4:fb:c8:cb:b5:9a:19:93:3e:ec:09:
         45:50:88:71:4b:c2:a2:77:8a:e2:5d:65:a6:bf:bb:ce:d4:d7:
         bb:f2:04:4a:d3:35:b2:ed:b8:f5:27:70:95:ec:90:5b:37:b8:
         f0:41:a7:9b:98:bf:9f:47:e8:e5:36:d7:42:1f:5a:14:31:cf:
         21:2d:cf:5f:66:28:d5:d0:51:37:ef:26:c0:c2:fc:85:cf:1b:
         eb:9c:47:e1:b4:ec:23:2a:68:75:35:f2:48:ad:68:f2:58:57:
         d4:a6:36:de:57:fb:f6:29:96:3f:06:67:0f:fa:ea:0c:29:f7:
         71:a2:4a:58:aa:e0:22:d7:12:07:b1:c1:dd:7a:22:fe:99:83:
         06:bd:6b:7b:c0:d4:c4:e1:64:f9:21:1f:78:78:b8:0e:d4:da:
         c2:82:c7:36:c8:f6:41:97:42:42:c9:b6:61:44:1b:44:9d:6c:
         e9:37:f0:71:0d:3a:61:21:ff:e9:e6:d7:81:a8:9b:f9:d1:bc:
         ba:05:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:59 2024 by rpki-client on console-ams.rpki-client.org