Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa
File:                     a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa (raw, json)
Hash identifier:          oMD7Pdkyo4QIrQlhA68FCDUOhZGYoJoNHokcilXIjDQ=
Subject key identifier:   D7:2B:86:82:5B:B5:B2:D4:18:19:22:96:F4:8A:C2:46:AE:FE:4B:D9
Certificate issuer:       /CN=2cf622f9-718a-4280-a116-72e2088c51e3
Certificate serial:       010D0C9F43285845ADEE17B1F1F0EF50733D7580
Authority key identifier: 30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     394490
IP address blocks:        66.45.13.0/24 maxlen: 24
                          2620:dd:c000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:17:b1:f1:f0:ef:50:73:3d:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cf622f9-718a-4280-a116-72e2088c51e3
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=78fbeb13-59cb-434f-bbfb-f15d79ece574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:23:33:83:63:68:25:2e:2d:64:23:24:d3:
                    b0:79:bb:6a:61:ef:65:e2:44:83:57:7c:4c:17:6b:
                    15:de:07:67:b1:dd:21:1e:f8:c6:7d:cc:9c:6b:98:
                    17:25:3a:f6:c1:4b:89:dd:2e:04:dc:fc:bc:83:1d:
                    de:fe:e7:7b:1a:f4:25:f6:ef:a8:e3:6f:e8:84:bc:
                    07:c2:7b:ab:68:21:ba:60:ed:49:34:75:58:94:8e:
                    12:47:d5:77:43:8c:5d:f5:24:7e:ee:f2:dd:52:ce:
                    fc:c8:6b:f2:d2:f4:43:3c:79:9e:ed:f5:fd:7d:a2:
                    62:b9:53:b0:ed:7b:34:0b:ab:87:0d:95:64:04:ce:
                    e1:ce:51:0f:12:db:c9:f7:78:aa:9a:93:b3:76:ee:
                    07:29:6a:2a:e0:50:88:35:27:83:da:8e:f5:dc:50:
                    34:31:23:39:3e:f2:2a:a2:f8:71:4d:d2:51:63:15:
                    ae:25:d3:89:22:52:1d:16:a5:33:9b:0d:cf:1c:f1:
                    3a:df:eb:54:e6:58:d3:fb:0a:0c:05:97:12:ef:0e:
                    cb:8f:db:07:54:fb:f6:c3:6f:cc:35:7c:31:3a:66:
                    e6:0a:f2:b5:0a:59:80:6a:55:8e:a6:67:65:9b:71:
                    de:35:69:f9:38:43:64:97:f7:d8:de:df:ba:d3:93:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:86:82:5B:B5:B2:D4:18:19:22:96:F4:8A:C2:46:AE:FE:4B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/a1ebf44a-823b-377e-bf36-5a61c316b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3/2cf622f9-718a-4280-a116-72e2088c51e3.crl

            X509v3 Authority Key Identifier:
                keyid:30:62:DA:58:A9:F0:B9:FB:EC:8F:6F:CC:83:49:98:CF:E3:B4:0C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2cf622f9-718a-4280-a116-72e2088c51e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.13.0/24
                IPv6:
                  2620:dd:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:e7:e5:cc:bc:9c:6b:3a:ba:25:8e:c5:e4:b7:5e:8d:3a:
         5c:bf:08:aa:51:bf:92:b0:a6:96:60:78:2e:e9:f3:4e:b8:9b:
         d9:80:10:52:31:a6:fe:b5:29:c4:8b:21:30:f8:52:64:17:33:
         a9:a5:72:b6:6d:75:6b:f5:40:c6:b9:5f:48:83:94:79:b5:fc:
         88:fa:f6:6e:cb:13:e3:42:b5:0c:7d:11:42:2a:61:62:f0:9c:
         10:eb:d3:0d:a5:5d:af:6c:9d:ce:41:c0:d1:14:ed:51:c1:ee:
         ca:1e:1a:60:a7:ed:14:eb:df:f0:e6:5a:35:8d:f2:7d:eb:8f:
         cf:e6:a6:d1:d2:bc:17:0b:b8:7b:18:52:af:47:d8:4d:60:0b:
         ce:65:f6:66:b5:1b:94:d2:95:79:be:0f:84:79:15:42:43:45:
         da:55:aa:8d:d9:b7:52:5b:f3:2b:a0:eb:a6:59:06:37:26:af:
         b5:02:98:99:42:73:a8:ca:b1:93:64:9f:79:bb:56:df:1f:0a:
         aa:d8:b9:f5:47:69:bd:63:51:f7:e8:02:53:ba:ce:04:44:f4:
         54:e6:fc:a7:72:1d:eb:ad:d9:94:f0:5c:01:ec:02:c6:e9:bf:
         f5:40:ca:cf:2d:6e:43:44:4e:c4:78:17:71:ea:a6:49:55:d6:
         c0:40:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:59:38 2024 by rpki-client on console-fra.rpki-client.org