Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
File:                     bf09cbe5-0f95-3715-878d-025c118cc3f1.roa (raw, json)
Hash identifier:          IPBXeMyrRczvmz7X6ZTQR7Ib96X2yM0S1HxE0HJrybI=
Subject key identifier:   40:64:8C:63:58:40:E6:43:5A:CB:70:4F:98:21:62:53:B4:91:2E:9C
Certificate issuer:       /CN=de84b539-8408-4f2c-8e81-05f7a1b73686
Certificate serial:       010D0C9F432858474F4B7C55FC78F4E8A8074F90
Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     18779
IP address blocks:        66.154.117.0/24 maxlen: 24
                          66.154.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:7c:55:fc:78:f4:e8:a8:07:4f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=51c62c8d-0399-4ed0-a3f3-7914f6ce9e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:97:2d:e9:df:aa:40:0b:69:c7:bb:00:10:e2:
                    cb:61:5e:ab:03:2d:ac:2f:fa:e1:47:67:c0:92:5d:
                    44:78:86:8e:80:a4:5d:d8:d6:10:61:33:67:b3:57:
                    0e:ab:ff:7e:c1:da:3e:6c:4c:a7:3b:e7:82:3e:f9:
                    19:0c:55:3f:fd:24:18:2b:7e:2d:6e:84:c7:7d:48:
                    52:01:e1:e2:68:27:55:31:7e:40:46:f8:17:87:03:
                    b0:27:b7:f4:c8:2c:60:ca:75:95:ed:03:63:06:3b:
                    73:74:f5:5c:d7:48:42:e0:47:0f:37:0f:47:17:63:
                    72:03:38:2d:b2:64:3f:6f:2c:86:c1:5c:a1:3c:69:
                    b8:2b:d9:90:72:5a:a2:12:3c:10:2b:8a:20:81:5e:
                    70:db:24:17:f4:05:7e:69:f5:62:a1:33:7c:4d:de:
                    b7:a4:eb:a4:4f:70:cf:e4:8c:cc:2e:87:9b:cb:01:
                    d7:b7:cb:3c:fa:12:d6:7d:28:08:4d:0e:50:30:a6:
                    62:eb:46:a5:8a:e3:c6:9b:fe:83:4f:1c:1d:54:bc:
                    de:84:ef:6a:25:3f:e9:b4:6e:c3:6e:0c:ca:95:33:
                    cc:50:0c:51:2c:68:a9:c9:2e:06:a6:d8:30:8c:98:
                    07:8d:f5:b9:4b:7d:79:21:28:d7:75:b2:83:34:e0:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:64:8C:63:58:40:E6:43:5A:CB:70:4F:98:21:62:53:B4:91:2E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl

            X509v3 Authority Key Identifier:
                keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.154.117.0/24
                  66.154.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:e9:92:98:fe:03:6d:e6:98:af:75:7f:c9:21:b1:20:57:
         9b:73:74:2c:9d:6b:7e:4d:29:a2:96:00:48:57:c4:88:a8:7f:
         fa:90:7e:a5:4f:2f:88:8f:24:7d:fe:78:7e:fa:5b:df:9f:e7:
         f9:e8:74:ac:61:d3:11:cf:9b:51:c9:f0:4e:cc:d7:71:86:57:
         85:51:35:9a:c1:05:c0:b8:b3:72:ad:fb:74:34:a7:b3:8c:88:
         5d:68:87:1e:8a:5e:ab:7f:09:d9:c3:46:da:19:58:67:a0:5c:
         6d:25:a8:4e:aa:65:f1:34:8f:b5:17:b2:d8:0c:71:56:48:c2:
         cc:01:36:ad:9c:99:ad:d5:bb:a1:45:57:de:62:86:2d:be:de:
         4e:e4:5b:c3:44:25:76:48:c5:48:36:88:cb:1a:59:f0:b8:ec:
         10:57:89:2f:0f:2a:6f:6f:99:be:e3:9b:a3:a1:68:7a:20:5b:
         db:67:87:47:fd:3c:be:37:5c:5e:59:a2:8c:35:12:19:76:ef:
         b4:16:cf:06:d0:76:ff:c2:12:1e:0a:98:42:58:db:f6:f0:bb:
         59:ac:fd:10:d0:11:2c:13:ff:b9:88:ab:77:e5:65:34:e2:df:
         1c:f2:76:16:44:36:ef:1b:aa:6e:60:75:53:e0:27:8d:2d:6f:
         d6:42:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:59 2024 by rpki-client on console-fra.rpki-client.org