Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/23970864-91ef-3ffa-abba-d73bf566134f.roa
File:                     23970864-91ef-3ffa-abba-d73bf566134f.roa (raw, json)
Hash identifier:          j2itJeJQ5qtcACwnyG6GWUeFJvotBCms2zjtERts9VE=
Subject key identifier:   AD:0C:40:CE:C2:77:4E:72:0F:BC:C7:67:46:75:D0:4C:A3:40:E5:5B
Certificate issuer:       /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
Certificate serial:       010D0C9F432858476C9DB577387FEA32B4609090
Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/23970864-91ef-3ffa-abba-d73bf566134f.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     6528
IP address blocks:        67.14.192.0/24 maxlen: 24
                          67.14.193.0/24 maxlen: 24
                          67.14.194.0/23 maxlen: 23
                          67.14.196.0/23 maxlen: 23
                          67.14.198.0/24 maxlen: 24
                          67.14.199.0/24 maxlen: 24
                          67.14.200.0/24 maxlen: 24
                          67.14.201.0/24 maxlen: 24
                          67.14.202.0/24 maxlen: 24
                          67.14.203.0/24 maxlen: 24
                          67.14.204.0/24 maxlen: 24
                          67.14.205.0/24 maxlen: 24
                          67.14.206.0/24 maxlen: 24
                          67.14.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b5:77:38:7f:ea:32:b4:60:90:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f25ae22c-ee63-44c1-870a-2293410b2fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:b0:ad:71:a1:85:a4:e1:fb:28:50:28:4b:
                    b1:54:dc:30:1a:ba:54:ad:ca:3c:89:11:2c:aa:e2:
                    21:e4:22:64:4d:55:b3:80:11:18:d1:05:eb:84:b1:
                    c8:a3:cd:a8:08:e4:9e:cb:04:0b:35:50:39:14:47:
                    a0:84:10:96:e3:45:4e:64:8f:49:27:6d:4e:a8:9f:
                    94:64:0e:47:6d:ee:c4:9f:07:2c:7e:57:e6:29:4f:
                    c6:04:b1:34:d3:c5:6c:4a:23:26:47:88:f1:b2:26:
                    c2:76:7e:47:f4:95:68:e0:7c:f0:32:ec:53:a5:6b:
                    e1:8c:27:02:cc:a7:83:96:7d:c9:ca:60:ae:df:56:
                    6d:9f:f3:54:a4:61:7f:23:0c:18:fb:cd:79:3c:c9:
                    02:3b:6a:7e:1c:8e:1a:20:b7:b6:03:0a:ec:c9:0e:
                    28:6b:06:3c:35:e7:33:9b:4b:8c:85:81:00:d6:57:
                    0f:8a:4f:a8:ca:68:fb:6c:f9:6a:56:d7:de:91:e9:
                    c5:ae:ab:a0:f1:c8:29:85:72:3e:28:0d:bf:9d:ee:
                    fa:72:6e:d2:4c:8e:06:25:58:18:c4:16:a6:79:89:
                    c6:f3:f0:be:a7:87:7e:37:08:33:a5:2a:30:e5:59:
                    28:c0:f4:4d:6d:80:29:0b:79:03:06:af:8c:c8:cc:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:40:CE:C2:77:4E:72:0F:BC:C7:67:46:75:D0:4C:A3:40:E5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/23970864-91ef-3ffa-abba-d73bf566134f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl

            X509v3 Authority Key Identifier:
                keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.14.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:40:0c:61:fc:df:70:0d:b8:82:82:55:b2:75:ee:36:92:
         b0:60:27:ce:49:a8:38:c4:27:f1:aa:6f:e8:bd:7c:37:2e:66:
         8d:a0:d5:fb:a9:77:7d:15:da:1f:56:85:28:42:8a:31:8e:10:
         4e:7d:47:9c:a4:e7:60:2b:35:59:59:88:2e:c7:ca:6b:b8:03:
         a1:be:47:ac:8b:00:ed:b0:42:62:19:f1:c3:7b:51:71:34:ed:
         6d:0a:69:5b:61:35:23:5b:4f:4b:21:82:85:4d:cb:e5:e0:ea:
         2d:e7:bb:19:9b:66:82:5d:b8:66:ee:f0:74:40:80:2d:f0:1f:
         9d:9f:12:c6:59:42:28:c8:78:2d:ed:e0:84:20:ea:71:76:77:
         4e:10:e7:e2:1e:72:17:dc:9f:18:df:f7:ea:b3:cc:b3:26:15:
         7c:03:bc:2e:12:45:64:b6:29:7b:7f:73:c2:54:c0:c8:26:5d:
         8c:d4:42:cf:31:89:39:a6:ee:52:87:93:14:7e:d5:2f:2a:a4:
         b4:f4:64:7c:f2:2f:77:19:5f:f9:f9:d6:da:6e:51:b1:f4:a6:
         41:a8:0b:53:4b:01:e2:b4:72:be:f5:5e:e7:73:17:f3:dc:b2:
         7a:2d:e8:0d:64:4b:4a:3f:6f:fa:1e:a0:a2:e3:d9:a0:f1:3a:
         b5:48:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:04 2024 by rpki-client on console-ams.rpki-client.org