Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa
File:                     af07d9a3-0774-3d53-9e00-35661826a9bc.roa (raw, json)
Hash identifier:          vxdlcECE8eBcMua9FB9P2aGDnOdDrDOTzUQlBfCgQNA=
Subject key identifier:   A7:E4:A1:BD:8D:C3:94:70:E3:EC:C2:A1:DF:99:5F:FE:2C:CC:5D:D9
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285845612862DBC3A9DDFB761D3180
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     6505
IP address blocks:        66.96.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:62:db:c3:a9:dd:fb:76:1d:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=8dc2dca2-3c00-40f4-8f53-b813457892d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:0b:14:ef:ad:e4:1d:59:41:8a:8f:28:2b:
                    1f:3f:85:fb:8e:bf:94:1f:e7:9e:89:12:31:fd:d6:
                    3c:d2:ae:ca:51:fa:f8:a2:cf:57:8a:26:a4:ba:fc:
                    01:55:b4:ad:8e:22:a5:8d:b7:81:83:67:cd:f7:64:
                    f9:64:11:0e:e8:03:a0:3b:e6:d7:60:d1:2a:89:d9:
                    38:4a:7e:00:f3:6b:3b:87:8b:f8:af:78:4e:87:b3:
                    a6:da:68:ac:0d:55:4d:29:08:be:ab:71:00:30:0f:
                    45:46:60:f1:ac:04:84:64:43:f3:2d:0f:84:e5:a3:
                    aa:8a:a8:ed:8a:5b:1d:6e:9f:48:d2:42:46:fb:92:
                    05:8a:9f:40:28:fe:49:7b:d5:85:14:d4:93:d9:92:
                    cf:14:73:5d:6f:e4:17:af:91:08:d3:3f:0d:ee:d2:
                    69:62:39:a8:ec:bb:09:57:1f:53:e2:cd:f5:e2:d3:
                    73:d2:5d:16:66:b0:03:a3:41:af:8c:22:9f:b3:bf:
                    25:04:42:5e:5a:65:36:f4:5a:f6:a9:10:32:73:cc:
                    29:8a:38:31:e5:f7:5a:5d:8a:22:61:71:01:82:e6:
                    d8:81:bc:be:d0:47:97:98:88:5f:f6:22:90:22:06:
                    dd:2a:38:00:87:82:02:81:e6:b4:b3:54:ba:05:3d:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:A1:BD:8D:C3:94:70:E3:EC:C2:A1:DF:99:5F:FE:2C:CC:5D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/af07d9a3-0774-3d53-9e00-35661826a9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:91:71:51:6c:1b:62:9f:86:8b:5a:20:7b:27:11:63:13:
         f9:e7:72:25:13:34:86:c4:31:b8:27:7b:a7:5a:58:52:0d:e1:
         ff:79:5b:46:27:47:be:22:85:ba:0e:9e:03:15:05:2a:d9:82:
         b2:92:00:f4:a9:ca:0a:92:86:8e:2f:a6:b0:0e:da:42:8e:81:
         5a:15:aa:05:b7:54:e5:0f:ec:2c:f7:da:a6:c6:ae:ac:e2:2a:
         8a:06:4e:0a:7e:e7:ef:a4:fd:68:b4:86:b6:9b:5b:c4:a0:59:
         23:d4:27:79:e2:20:37:47:b5:e9:20:e3:81:f6:aa:f9:6e:c9:
         19:77:f5:d3:cc:23:4b:57:3d:ae:60:88:55:4d:d2:3a:2b:02:
         e4:c7:84:55:e3:9e:54:98:13:34:dd:78:fe:04:16:3b:f7:37:
         b8:56:45:80:32:57:18:39:5f:97:32:69:c6:67:36:ea:d3:8e:
         6b:fa:84:af:e1:47:43:94:96:48:d3:77:44:c8:51:61:ea:e1:
         87:11:ad:6b:2c:fe:01:ae:05:e4:d3:b9:b4:9f:89:4c:37:ac:
         f5:aa:0a:e3:7c:7f:ec:da:60:33:82:04:36:b5:a0:27:65:8e:
         be:7d:59:35:37:87:ac:5a:20:e6:b8:72:88:38:de:c1:85:89:
         e4:37:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:40:02 2024 by rpki-client on console-ams.rpki-client.org