Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
File:                     66a219b1-9a85-3816-b306-827ed97596c0.roa (raw, json)
Hash identifier:          xcVPGna7i7aOVU00vh2LaXfTeVrwEOvUA+2jUBDyEH0=
Subject key identifier:   B8:73:E5:DA:EE:47:0C:76:4C:59:4C:87:44:C3:C9:19:0E:6B:8F:FB
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285847DC64AE4802BA2DC89FDB4580
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     11090
IP address blocks:        72.35.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ae:48:02:ba:2d:c8:9f:db:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=c216d57c-cb00-410c-9010-174930799bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:ba:d6:c0:4c:62:46:70:7b:79:34:65:a2:
                    6f:0b:af:02:ee:0f:d2:74:43:e4:76:cf:c2:c2:46:
                    6d:46:84:3d:24:d3:7b:30:0c:d6:f6:83:3c:00:eb:
                    83:ed:cf:75:03:44:b8:db:fa:08:5f:11:2d:96:4b:
                    9e:1d:47:f2:fe:a2:ef:4f:12:3f:08:19:ce:a8:45:
                    fb:05:18:5d:21:e0:b8:31:21:ac:15:b0:b7:c1:1f:
                    f8:d9:ba:40:16:f5:27:e6:81:a8:4b:a3:c1:8a:54:
                    23:38:3a:8e:89:5d:63:2d:a3:bb:42:87:0f:e2:fa:
                    69:44:9f:c2:3d:e9:be:45:52:6c:ff:15:63:3e:b7:
                    f0:49:6d:c1:7b:9b:02:9a:69:1a:25:8d:58:35:eb:
                    41:69:bb:7d:5a:0f:97:14:66:02:fb:27:bd:f0:f9:
                    a8:eb:e0:5b:8f:d6:77:54:4d:55:f5:69:29:67:f7:
                    f6:db:51:85:b3:66:c4:17:3b:c4:bb:51:c4:78:34:
                    22:a2:38:9f:af:2a:09:96:e8:d0:8b:23:d9:91:02:
                    52:73:01:de:e0:c9:a8:89:2e:ad:e2:1e:34:ea:fb:
                    ae:7e:3a:28:66:84:41:d3:a2:0d:1d:0a:59:6e:92:
                    67:d6:d9:a4:8a:37:6c:1e:a3:ca:5f:16:63:f0:c5:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:73:E5:DA:EE:47:0C:76:4C:59:4C:87:44:C3:C9:19:0E:6B:8F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.35.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:97:18:2b:69:a6:d1:f0:94:e9:60:05:8a:b2:04:16:b5:32:
         88:74:d2:dd:45:dc:5f:92:37:12:80:a1:d2:e3:60:d2:7f:09:
         2d:de:8f:67:f8:1f:bc:09:79:79:8b:22:b5:67:aa:3c:38:c9:
         5d:88:3e:8f:c6:97:1e:a3:8e:a5:1a:67:ef:48:c0:22:0e:f3:
         6b:f7:36:f5:63:f4:5e:ab:f4:9a:f2:00:6b:c5:b6:f7:26:ea:
         29:cf:53:b4:8d:6e:3c:18:14:0f:0d:eb:12:80:97:e0:41:df:
         ad:10:4d:aa:53:e2:c9:e8:71:2f:6c:e4:55:8f:e1:19:cd:7c:
         96:92:ce:64:b9:7e:20:6c:5a:19:f5:71:d4:bf:47:c7:dd:a8:
         62:17:41:18:10:7a:c5:d2:2d:41:13:95:e5:fd:59:f8:b5:38:
         21:21:c3:6c:07:a0:63:5c:c5:1e:26:83:ec:a1:bb:df:51:f9:
         16:84:95:6d:39:e6:53:2b:ca:ae:f0:ca:5f:1f:be:a2:30:a4:
         d2:29:6b:ee:be:cc:3e:2f:d5:1d:e1:ef:8c:52:eb:b8:a8:66:
         f4:83:ce:bd:1f:65:d1:8e:bc:59:48:6d:cb:3f:bb:5a:2b:bf:
         36:6e:9f:9a:b8:b9:fc:0e:93:f9:7b:13:0f:f9:2a:e1:14:42:
         75:a7:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org