Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa
File:                     0a39a1ed-5680-3419-807a-f8b2fd922efb.roa (raw, json)
Hash identifier:          3etInszxN60AOpqkP0zlT1cutydm2JRYbY97/eQ8HoQ=
Subject key identifier:   11:E4:51:81:18:E0:88:E4:85:BA:63:B1:72:F5:92:FF:99:90:4E:AA
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584742BB5940CCBF3C4000AB6000
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     399244
IP address blocks:        66.59.209.0/24 maxlen: 24
                          66.59.210.0/24 maxlen: 24
                          66.59.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:59:40:cc:bf:3c:40:00:ab:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=2f0df291-7967-43fd-a007-3405edc91a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:f4:79:a8:6f:e7:13:c5:b5:8c:c8:9b:d0:
                    8f:cc:4a:16:d7:9a:7e:ba:90:8d:95:a9:da:49:1f:
                    dc:63:b3:e2:74:e6:12:44:dd:da:c7:73:97:9c:be:
                    e6:8c:6c:27:9e:4e:c6:61:d6:76:9d:f7:4d:c1:54:
                    f1:3f:9c:18:9a:74:39:f9:d1:a6:eb:49:75:28:b6:
                    e6:a8:18:6b:e1:58:a1:3a:f2:4d:4c:60:86:f3:c5:
                    4e:b7:fa:a3:ab:31:37:aa:52:f1:77:80:4d:f3:6b:
                    b0:7a:56:c4:83:67:14:60:54:c5:e0:09:f6:a4:52:
                    ed:7c:bb:ef:b5:40:3a:ec:63:a5:3a:45:53:bc:f6:
                    86:f0:65:e8:95:0f:8a:a7:bd:13:35:8e:44:ad:48:
                    83:70:bb:16:97:6d:49:3e:b0:78:a7:3c:40:0d:7c:
                    7b:d4:37:c8:cc:48:3a:60:95:75:12:0b:dc:37:fd:
                    1e:51:7e:b3:10:4f:bc:19:fb:6e:dc:2c:e4:32:ea:
                    e6:b2:00:19:23:c6:73:50:c8:8b:c8:39:f3:ba:6f:
                    ab:89:69:8a:de:cb:82:03:d0:eb:6a:5d:3d:1f:d9:
                    87:89:22:c6:2b:46:82:73:71:7d:43:2f:d4:fa:fa:
                    ae:c6:b5:5c:03:f8:52:f0:74:be:cf:ed:9f:01:8b:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E4:51:81:18:E0:88:E4:85:BA:63:B1:72:F5:92:FF:99:90:4E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.209.0-66.59.211.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:f8:8e:b7:22:4f:76:99:97:3d:2c:40:d2:3d:65:9f:53:
         5e:08:3e:8d:f5:28:97:a4:1a:b2:f4:62:71:0d:d2:48:f3:b3:
         6e:34:7b:b8:20:17:d5:bf:65:20:dc:f4:90:8e:c2:2b:4f:bd:
         b9:ad:cc:60:ec:13:06:e1:e1:57:d5:83:62:00:d6:55:ef:9d:
         69:e4:6f:a7:ed:40:03:d1:26:af:2f:a7:f7:87:a5:08:77:00:
         bb:15:70:c7:9e:4e:1d:c3:88:fc:0d:4a:1d:26:bd:f5:b9:ac:
         a6:64:a2:ff:c5:dc:f9:34:3f:b8:e0:ae:03:74:ef:59:41:05:
         df:ad:fa:cd:22:b8:b1:73:0d:a4:4d:3f:22:44:6a:e9:b3:cb:
         da:50:a2:47:94:21:be:6f:f8:53:dc:9e:cc:11:2e:04:d6:87:
         d3:30:23:31:2c:f9:b3:a0:a2:16:7f:64:97:1b:c4:f8:f0:8c:
         6e:a0:9b:08:8f:1d:76:ad:23:49:81:84:63:4b:18:1b:b0:b2:
         c4:86:87:fd:9d:d6:21:ee:04:dd:00:c9:ac:a2:a2:68:32:f5:
         12:ae:da:34:80:8c:ce:d1:fb:00:58:be:cc:c3:2c:08:79:2e:
         b1:9d:90:c4:c7:e6:55:0f:4f:b0:26:a7:0b:97:3e:05:c0:21:
         d6:76:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org