Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa
File:                     4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa (raw, json)
Hash identifier:          rTR9Unsk9wdibbENxrTPzm9wWN3kYeR0ib8KkxKyQ40=
Subject key identifier:   20:A7:45:70:17:14:6B:BB:F8:40:EF:E7:0F:BE:2D:6C:74:AC:AF:F3
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F432858452AB7E5D37C4A5C82C0B41D20
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     13536
IP address blocks:        66.152.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e5:d3:7c:4a:5c:82:c0:b4:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=ab9b8329-4892-4e2a-83f6-22676bfb0c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:e4:1a:40:bd:9e:9f:75:0b:15:b9:f5:7c:
                    0c:c3:2f:18:d5:65:f0:44:7b:0e:7d:35:81:4c:e1:
                    da:86:90:72:83:84:6a:d1:6c:91:a2:99:c8:e4:36:
                    06:6d:1c:ab:2f:36:bb:b3:f4:41:c7:98:57:0a:7f:
                    4a:83:8d:e4:57:02:40:45:df:f9:5d:14:c9:4c:71:
                    98:d0:05:e9:6c:35:4a:ee:a6:4e:20:01:54:69:f5:
                    96:29:6b:f7:ae:2d:d6:c2:94:29:ff:9d:c1:7e:b0:
                    77:ed:64:bc:43:57:e4:b3:d3:0d:b2:52:b0:d7:4b:
                    1e:01:66:21:aa:87:a2:b1:85:08:3c:45:04:c7:1a:
                    49:a3:8c:bf:57:dc:73:b3:f4:15:47:42:83:bb:29:
                    76:49:5e:91:18:56:47:1f:7e:b1:76:21:bc:72:08:
                    fd:b7:f3:07:8d:96:78:75:22:5a:1a:36:4c:b5:ac:
                    b4:65:e1:30:49:0d:15:5c:b4:64:bf:3a:dd:9b:00:
                    0a:5f:78:eb:85:9f:01:6e:f9:c5:fc:bf:b5:a8:91:
                    3c:5d:d5:e9:bd:3e:95:72:b7:19:9f:b1:d1:b0:ff:
                    cc:87:28:c2:5b:5d:a3:2a:34:53:b2:68:45:9e:c6:
                    08:65:c4:d0:ad:63:20:f6:dd:94:53:bb:f5:ab:53:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A7:45:70:17:14:6B:BB:F8:40:EF:E7:0F:BE:2D:6C:74:AC:AF:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c9:b5:8a:48:fa:07:ee:6f:d2:f5:11:ce:2b:84:01:1f:0e:
         11:a0:e4:0e:fd:6e:9b:5d:06:b9:34:c5:2a:1b:c4:88:c5:2f:
         1a:ee:ac:74:3f:a5:47:c9:8b:a3:1d:0a:06:13:36:69:6d:10:
         38:47:8b:b5:49:c8:74:38:f1:fd:8b:ca:99:7b:62:13:60:a9:
         ef:f9:ac:cf:df:45:89:b2:f3:d2:fc:d7:f5:4a:27:62:ef:0a:
         84:70:66:f6:90:21:dd:be:50:48:2c:7f:c4:4d:08:04:3e:20:
         6f:b7:52:a2:bb:02:63:f9:04:df:cc:39:e8:02:bb:8c:f7:5f:
         8c:12:04:87:9d:13:93:a9:fb:8b:24:e3:ba:3e:e9:bf:74:f4:
         3e:9f:77:81:b4:48:a5:f0:09:26:28:86:ff:47:92:30:36:25:
         4a:ac:1d:09:55:82:da:76:73:59:a4:d2:0c:c1:bd:7c:db:c6:
         c2:7c:1f:21:f6:a1:2d:c3:44:d0:8c:38:91:0c:45:ff:25:0f:
         fb:3e:6f:b9:f4:6b:98:d7:6a:a5:08:c5:cb:a6:a7:61:5a:85:
         5b:ca:62:2a:de:e1:60:b1:84:55:da:41:e5:dd:0f:30:06:28:
         8f:2d:71:1e:30:f1:67:ff:56:a1:4b:fb:8b:e2:08:6a:38:73:
         c8:b1:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:55:13 2024 by rpki-client on console-ams.rpki-client.org