Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
File:                     484e3031-ebe0-3e55-a672-ef11f402ca1f.roa (raw, json)
Hash identifier:          cRd7vcmi8sh22+u6pLDZaJ05Sh9knS4djEoRzjR3IAk=
Subject key identifier:   C2:20:68:29:42:2F:FC:F2:B1:CC:23:1C:CB:59:72:20:95:4A:91:EF
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F43285847A30C0443E3E9DED57F6EE500
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     26703
IP address blocks:        66.102.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:04:43:e3:e9:de:d5:7f:6e:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=301376ca-f480-43d6-866c-f38484a3d15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:2c:48:9c:7b:df:c6:74:7a:15:69:95:3f:
                    9d:21:74:f0:cb:26:c7:a0:e1:c7:be:3c:9b:49:3a:
                    ec:ed:97:57:44:03:16:c4:5b:2f:bc:f9:71:13:8d:
                    77:47:f6:04:be:9e:9d:80:66:a1:45:87:c6:65:1f:
                    6c:98:2e:98:4a:c1:db:00:81:21:22:c0:09:8a:6a:
                    00:f4:0f:2d:01:83:d9:c6:c4:a4:57:88:85:7c:41:
                    b2:c1:90:43:c2:60:dd:23:aa:41:58:c5:f3:df:27:
                    59:f5:39:92:21:88:f8:43:2c:98:3c:23:b4:80:cb:
                    d4:7f:c1:73:14:b0:3d:ec:4d:7a:c1:53:04:ad:70:
                    3c:85:c3:70:9e:24:77:ef:ab:03:5f:91:25:ab:c1:
                    b2:ad:46:d5:d0:22:3d:b9:22:98:d6:e3:cd:61:e4:
                    3a:b2:7d:57:0c:99:7d:68:be:1e:16:7d:a5:b0:ec:
                    6b:12:0b:b3:b1:61:9f:cf:ae:d9:7b:cb:2d:93:48:
                    5d:0b:ab:42:d5:89:da:0d:8a:53:eb:4b:61:6e:6c:
                    8f:07:c3:6a:9d:ad:15:78:26:bf:ab:07:2f:46:46:
                    08:3d:fb:fe:69:fd:d5:05:b2:29:7c:88:a8:86:06:
                    54:00:18:bb:b1:9b:58:a1:ae:be:bf:4f:71:dc:3d:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:68:29:42:2F:FC:F2:B1:CC:23:1C:CB:59:72:20:95:4A:91:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/484e3031-ebe0-3e55-a672-ef11f402ca1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:7b:46:f1:62:e6:91:5b:25:40:42:6f:12:e3:f6:d1:2a:
         d2:9c:86:b8:46:1c:9d:d7:77:ad:d3:1f:9b:2f:ce:93:d1:76:
         16:36:2a:d0:88:6e:d8:b3:b7:cd:09:b8:46:0b:3c:e2:de:71:
         d5:27:95:34:95:a1:4d:0b:a7:d1:cb:38:70:ff:8e:7e:0c:dd:
         49:f5:d8:3b:fa:1a:fd:9b:a8:db:ef:8d:1a:1f:86:e5:b9:9f:
         77:fd:f4:8e:21:49:27:2b:c8:82:29:76:94:c9:38:91:46:13:
         ec:ab:b1:76:ad:45:26:84:86:48:c2:b1:25:8d:e4:15:a2:5a:
         a1:fc:52:14:1c:8f:27:e7:22:7d:52:18:26:63:99:69:21:ae:
         8d:f0:df:55:bf:fd:ca:f8:be:f4:21:04:86:c7:d2:6b:a2:f7:
         50:e4:22:63:92:bd:35:20:13:ab:f8:9c:70:f1:85:0e:39:31:
         50:1e:98:41:75:c0:5a:a5:b6:eb:e8:f6:6f:63:f0:b8:04:b6:
         82:fb:4d:68:9c:bb:c6:64:ae:d4:0b:1d:4e:fd:72:48:b0:07:
         b5:b0:bb:52:19:51:45:42:2e:0c:9e:c4:60:f5:f5:f0:01:b9:
         95:28:24:fd:f5:b7:50:1b:5c:5a:31:a9:68:07:d5:31:60:28:
         b2:1b:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:35 2024 by rpki-client on console-fra.rpki-client.org