Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/62962b3f-e107-3091-8b85-2ac1d6fd8981.roa
File:                     62962b3f-e107-3091-8b85-2ac1d6fd8981.roa (raw, json)
Hash identifier:          Drr7Vll9wR5LrcTc3HDBZ7ZAADh4MDAfwGaqSLsKLJw=
Subject key identifier:   9D:28:F9:8E:40:9D:5F:D7:E3:E6:5B:70:77:B2:42:2D:26:D9:E3:C2
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584526A5A4C20E2747493D6BEA00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/62962b3f-e107-3091-8b85-2ac1d6fd8981.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     52129
IP address blocks:        66.159.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:a4:c2:0e:27:47:49:3d:6b:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=2e16bfa1-d957-4770-bbf5-8decd34ead42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:a8:6e:cf:25:3d:d8:4e:e8:15:e3:95:e2:
                    1b:c8:41:4f:0a:df:27:f0:4d:12:29:43:89:56:90:
                    cc:d9:d4:93:b0:2a:6c:12:2b:32:db:54:83:5e:8d:
                    47:19:cb:eb:c5:83:49:e7:f0:36:6e:20:c2:96:08:
                    82:50:b3:73:88:6a:8f:8f:ac:5b:00:63:8a:a2:5c:
                    30:ea:46:38:66:80:72:76:86:a2:f8:64:57:de:2b:
                    21:78:1b:0b:cf:a1:3a:a2:5a:8c:5d:e1:70:3a:ae:
                    8f:8b:29:b4:ff:e0:20:2a:60:56:db:be:1f:d9:4c:
                    5c:60:15:f0:0d:a8:87:41:28:6d:7a:59:b9:90:67:
                    ba:a9:b6:be:f1:9f:bc:68:ea:68:30:b0:0e:1a:93:
                    c1:91:53:06:38:64:a1:c5:62:3e:6b:4f:79:4e:0e:
                    25:1d:10:2c:48:4f:ec:28:a0:0b:69:a0:08:ec:f6:
                    18:01:cd:9c:49:81:33:c8:03:9b:de:b7:5d:c1:2f:
                    96:3e:bf:59:19:36:38:96:79:c6:21:8b:0f:6d:e0:
                    16:14:07:08:7a:3f:73:3e:e3:44:aa:92:2e:52:c9:
                    1e:71:e9:49:a1:f4:a7:00:22:b6:03:a1:75:e5:e4:
                    6c:aa:d0:73:46:12:1c:13:c4:42:f6:c1:e8:14:a9:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:28:F9:8E:40:9D:5F:D7:E3:E6:5B:70:77:B2:42:2D:26:D9:E3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/62962b3f-e107-3091-8b85-2ac1d6fd8981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:64:86:3e:5b:16:c2:18:f5:f4:c8:89:dd:c9:8a:e3:ce:
         e3:ec:54:2c:c1:0e:bc:55:a3:6a:26:73:b2:b7:0e:c8:ee:3f:
         36:f9:f9:d2:26:93:05:51:b8:35:b1:39:1b:1e:35:cd:b7:13:
         c2:65:2c:3f:33:d5:84:27:74:62:27:0d:a0:e0:b8:cd:cc:95:
         17:a1:9e:69:b2:47:2f:1f:d3:1d:62:a1:42:c1:d3:4f:0f:36:
         79:07:5e:8d:0b:96:77:24:2e:62:56:5c:ed:e6:1f:7b:05:cb:
         e2:ee:41:34:83:cf:46:1b:99:de:0e:fe:f0:f5:8a:9e:33:73:
         aa:d8:2f:b5:6b:ca:64:5e:f2:fd:15:57:f5:8a:4e:1c:13:56:
         0d:96:2f:89:b2:4f:cc:94:df:4f:ed:17:71:a0:bf:80:5f:1f:
         d2:8c:2a:01:c7:c7:ae:bd:5f:74:a6:9f:a5:84:14:4e:23:73:
         e8:1e:91:89:c6:a0:03:7c:3c:05:d6:c3:9c:84:28:a7:33:9e:
         e8:eb:f8:b4:50:b8:69:5b:e9:0c:d0:c6:be:49:14:ff:3c:95:
         7d:68:af:5d:b0:a8:b0:aa:a6:6e:78:7e:ed:8b:ef:46:d6:72:
         ef:6e:22:0e:d5:95:83:76:57:1d:14:b4:83:2b:aa:e1:f9:a8:
         d2:1b:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:37 2024 by rpki-client on console-fra.rpki-client.org