Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa
File:                     db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa (raw, json)
Hash identifier:          bt4ojF9eLhKeNKtCjzCJMAdLka7yabYZiBc0mln7pN0=
Subject key identifier:   75:30:2A:06:98:08:DB:E5:97:DD:B4:09:4B:05:62:82:91:3C:49:6C
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285845C5A8EED66E6E805F292ACE00
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     22808
IP address blocks:        66.112.128.8/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:ee:d6:6e:6e:80:5f:29:2a:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=1cfc8103-c41f-4ab7-8c93-660791d32a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:39:e4:07:4a:d2:0d:91:c9:b7:3b:20:56:
                    45:37:13:7f:e4:b9:e7:aa:72:ee:57:e4:ec:13:bc:
                    85:7f:7e:70:7a:3e:bf:67:3e:58:a7:40:2f:a2:82:
                    e8:d4:73:23:74:88:2f:04:66:6b:7b:07:b7:ca:76:
                    3f:8b:66:ab:86:09:2b:d2:fe:d7:a2:44:25:ac:cb:
                    f5:9c:30:d5:14:94:d1:03:b3:98:a4:13:3b:49:21:
                    86:22:41:fc:9b:a7:d9:53:3e:3b:43:9f:7c:e9:6a:
                    43:fe:6f:32:ca:34:4b:bc:44:38:91:38:4c:e6:a3:
                    38:90:0e:7b:34:fe:c1:9e:4d:51:a5:ac:b9:cb:75:
                    58:c3:47:98:1e:65:a2:97:12:c1:1e:53:ab:bb:27:
                    96:27:68:3b:e7:e2:7e:6f:f8:95:25:0d:98:cb:5f:
                    43:5c:f9:29:a1:f5:5f:37:22:eb:f3:0f:f6:aa:2c:
                    40:7c:82:c0:24:e9:56:9e:c8:e7:d1:32:0a:e4:af:
                    9c:34:ee:df:3d:b3:31:9b:9b:c1:d5:32:68:42:e3:
                    df:10:4a:b2:6b:4a:73:f7:33:93:89:c5:cd:72:eb:
                    28:07:03:bf:d8:c3:50:ce:f2:1b:5a:5c:c1:f5:c8:
                    ea:c6:99:02:63:6e:c3:96:6e:54:70:43:04:d6:44:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:2A:06:98:08:DB:E5:97:DD:B4:09:4B:05:62:82:91:3C:49:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/db0be36c-dbbb-35b2-aa81-e842163a2ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.128.8/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:6d:b9:ff:b6:c9:73:93:3f:6a:ed:b7:28:be:be:81:be:4d:
         02:c9:6a:be:35:ec:7b:68:4c:c5:6a:0c:a2:a4:d4:6a:f8:b1:
         a6:50:2b:6d:fc:0b:f5:c6:08:8a:d7:05:0a:f8:7a:0d:e1:c3:
         1f:2c:84:c8:7f:21:75:a8:f3:eb:96:f6:c3:b1:dc:e9:be:35:
         13:e8:8e:2c:8d:a7:ea:33:bb:09:0c:c3:6a:9e:2b:66:f2:25:
         54:f0:c3:bb:5e:dd:eb:ff:bd:b3:f1:39:a6:3b:0c:f3:c7:ec:
         66:68:52:55:5a:b1:e0:21:d5:d1:75:e8:30:02:94:f9:45:ec:
         fc:c2:92:5a:00:66:e6:b4:4d:e3:75:a3:96:21:11:49:fc:4a:
         58:db:b7:f9:10:09:b0:16:3a:81:ea:9d:f6:78:4b:08:95:1c:
         45:c5:39:e2:a7:d0:22:8b:ea:7c:b9:d2:b6:9b:db:e5:18:74:
         e3:b6:cd:56:43:1a:25:44:9f:d9:d7:e4:2c:08:75:d2:a8:46:
         10:14:ed:bd:7c:58:2b:f9:38:2b:c2:74:67:9e:fb:e8:53:f7:
         3e:e5:8b:4d:04:14:11:9c:3c:00:67:f1:da:aa:64:a6:45:d6:
         e1:e7:fd:52:91:db:52:97:55:fe:ff:b0:36:54:34:1d:4d:65:
         62:e6:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:44:51 2024 by rpki-client on console-ams.rpki-client.org