Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa
File:                     e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa (raw, json)
Hash identifier:          FqyOXqKIiD0/O4BHk9FDx/keylQAttnoUyjA3eyF2No=
Subject key identifier:   87:83:F7:F0:61:72:1D:B3:FD:E6:B0:47:78:19:B7:5D:CA:E6:A5:2D
Certificate issuer:       /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
Certificate serial:       010D0C9F432858481C9A980314DDCF15CC3CCDE0
Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        66.33.34.0/24 maxlen: 24
                          66.33.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:98:03:14:dd:cf:15:cc:3c:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=85cdd8f8-425d-45d6-bafd-179118b61573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:ab:f1:15:83:9e:4a:10:9b:1b:69:70:fd:
                    df:ae:38:98:67:d3:c0:8c:f0:7d:22:d2:7d:08:e7:
                    97:20:63:95:37:2e:c7:93:58:da:86:bd:d3:97:92:
                    3a:0e:5b:13:d8:6e:90:c9:40:1d:bf:fe:6a:e1:c8:
                    76:47:84:0b:ff:3e:f9:81:c9:9b:95:92:d8:c1:13:
                    d8:ed:f1:3d:72:0b:4c:8b:18:ca:a8:8f:a9:24:c2:
                    49:e4:5c:45:94:99:66:32:b1:0a:fa:57:d6:42:cb:
                    ac:b8:6c:c7:d9:06:9f:68:e0:c9:cd:06:4a:a0:77:
                    19:a2:a1:e9:37:5e:ba:08:6a:29:a3:b1:1f:c9:c3:
                    0c:d5:8b:40:4f:da:c9:ec:3f:da:ee:75:e4:ca:41:
                    39:3b:24:32:f0:57:b8:92:6d:01:e0:53:9c:84:29:
                    e0:2c:a6:6c:7b:ea:cc:51:3d:2a:3f:e8:53:7a:d0:
                    b1:96:fe:49:03:15:b6:e0:25:e8:d0:2f:c9:d2:9e:
                    8d:86:81:14:99:15:b6:89:ac:6e:50:89:f8:cc:14:
                    c6:4e:b1:f9:9e:2b:51:0a:36:a3:bd:2f:bf:70:23:
                    3a:37:4e:fd:b4:f8:81:75:13:c6:0f:93:fb:37:84:
                    06:df:fe:a0:be:68:d1:af:52:6a:69:20:9a:85:bd:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:F7:F0:61:72:1D:B3:FD:E6:B0:47:78:19:B7:5D:CA:E6:A5:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:01:32:df:3b:4b:d3:13:ec:40:0d:41:86:5d:c8:7e:d0:d6:
         9f:55:b0:23:5a:35:72:ae:f8:da:2b:78:1f:82:0c:10:7e:d2:
         87:a2:0b:36:0a:c0:da:34:e9:43:95:c3:b5:ba:60:65:30:14:
         0c:60:e6:3f:20:a8:e6:58:32:2e:cd:15:d0:60:0d:77:07:05:
         77:83:07:21:82:d6:60:40:b6:0f:32:36:6a:3c:d0:8e:35:c2:
         8c:36:d3:2e:d0:f7:3f:6a:59:bd:7d:4e:dc:76:85:c3:e6:21:
         88:25:7e:b4:ff:4d:b9:08:04:41:39:79:f2:24:cd:aa:77:7c:
         bf:ff:b8:b4:93:7f:e1:37:d0:54:34:bd:a2:b5:3d:9e:0d:cc:
         79:aa:42:c0:c6:c0:09:13:9d:fd:e2:64:e8:82:c0:c0:03:bc:
         96:ee:7b:a5:e5:7e:c2:39:ce:41:d3:e9:03:db:aa:b4:0c:62:
         a4:10:ef:13:82:63:16:35:26:56:e1:5a:42:4b:f6:99:0d:25:
         93:cf:45:76:d4:ce:f8:18:2f:5a:5a:a8:60:bf:dc:06:7f:6b:
         da:2a:26:d6:a1:8a:b7:52:04:2e:c1:2b:88:d1:ec:1f:79:bd:
         43:1f:f9:fc:d4:fb:56:5d:c9:72:c5:0d:4c:a4:74:02:29:b8:
         b2:68:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:38 2025 by rpki-client