Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa
File:                     20ee16b6-94f3-3d25-9d91-f2bbea700def.roa (raw, json)
Hash identifier:          RwncTgN9iNc1zky6BkrMNMOZgmpflFdQNMxkTn4QBYM=
Subject key identifier:   58:11:B7:08:5B:D4:6B:13:86:78:F7:D5:12:83:22:71:45:F9:92:B5
Certificate issuer:       /CN=de84b539-8408-4f2c-8e81-05f7a1b73686
Certificate serial:       010D0C9F432858475EA62BC9368EEAD100A8ED80
Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     18779
IP address blocks:        66.154.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:2b:c9:36:8e:ea:d1:00:a8:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=ccfc178e-0c78-4d4a-b3b1-5e06dc2de451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:b7:6d:02:ee:4a:f7:55:07:d1:dc:f1:93:
                    da:a7:1b:83:ee:05:21:a3:b6:ca:40:2e:f2:56:11:
                    9a:eb:38:10:19:27:43:0f:af:f4:e5:cf:d4:ff:70:
                    ef:bd:f8:f0:c2:fb:0e:52:04:2e:b1:18:5d:c0:43:
                    8e:66:a7:af:70:a2:74:f6:a7:e9:55:b4:66:b9:50:
                    0f:3a:5e:3e:83:04:69:c7:69:ab:e6:67:de:9d:0a:
                    37:38:f8:ff:05:f6:51:6a:5d:03:64:4a:fc:02:4d:
                    e4:3a:2c:00:80:f4:ce:08:44:f2:c2:07:f9:cd:62:
                    d3:59:6a:d6:36:f6:6a:c5:f9:d9:92:fe:17:8f:44:
                    1a:52:34:07:23:dd:ac:f4:e8:6c:a9:f7:fc:22:e4:
                    f9:3a:52:61:b0:ad:2e:2d:3b:4d:2a:d2:28:59:51:
                    2f:a9:64:74:81:c1:55:0d:b6:76:89:c7:ce:07:11:
                    70:35:7d:5d:8f:e5:89:fd:8f:14:ea:60:91:6a:7b:
                    08:b4:8a:b2:81:3b:b3:1d:c2:b4:21:d1:48:55:d1:
                    96:60:68:41:08:d6:97:c0:6e:da:02:50:7e:62:c1:
                    49:f3:0f:96:51:63:f5:44:08:62:15:68:09:df:c6:
                    a4:b4:4f:a8:99:7c:eb:a3:e7:85:bd:14:7b:e5:92:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:B7:08:5B:D4:6B:13:86:78:F7:D5:12:83:22:71:45:F9:92:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/20ee16b6-94f3-3d25-9d91-f2bbea700def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl

            X509v3 Authority Key Identifier:
                keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.154.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:4d:f6:b8:3b:d1:5d:93:47:5a:2e:ee:a3:b3:71:21:20:
         94:b2:be:2e:52:a3:56:f3:e0:e9:e1:45:49:fd:26:dc:60:da:
         52:cc:ea:78:14:a6:81:e4:79:7b:81:52:b6:96:f2:32:74:9a:
         d6:df:19:da:09:b9:4b:93:fa:66:47:a4:de:da:10:5c:3b:98:
         5c:d9:b3:03:e0:a4:d4:91:2b:1b:72:58:90:8a:35:48:42:f1:
         26:71:7f:2e:48:83:97:54:d6:d5:36:e1:93:93:bc:43:e7:04:
         0c:7f:57:22:6c:b4:d7:6a:a8:a9:1b:dd:b6:b0:1b:da:53:9e:
         d9:1e:37:ac:33:77:17:16:57:47:42:31:60:72:87:92:45:0e:
         35:10:0d:12:44:b5:c8:28:43:88:3c:ac:76:4d:71:e2:79:88:
         23:e2:0c:2c:8c:f4:85:fc:32:80:ce:4f:91:62:9c:ce:45:90:
         b0:db:d3:bb:71:b1:33:40:89:7e:3f:48:39:8a:62:3f:f2:d0:
         dd:84:db:31:a7:7b:72:bc:dc:56:d2:01:9f:92:c2:ee:10:14:
         f1:bb:3c:a4:b9:63:aa:39:bc:ce:0e:83:84:17:f3:6d:5c:bd:
         de:45:fd:b8:49:bc:1b:a2:86:a7:0e:bf:6a:79:5c:b7:a4:d7:
         92:b6:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:04 2024 by rpki-client on console-ams.rpki-client.org