Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa
File:                     a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa (raw, json)
Hash identifier:          V3KZGPmtERgrXeVBRMTzpRvZxXkDoaLZUKkcsaXJmho=
Subject key identifier:   87:ED:6D:D1:67:56:F4:E9:BE:C4:EB:31:58:41:62:37:2D:5C:88:73
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A763F8836F379D1FEFE0180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     54650
IP address blocks:        66.62.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3f:88:36:f3:79:d1:fe:fe:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=c4480aac-48f4-48e5-85e8-ca56611bb2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:7c:39:79:39:1b:36:c0:6c:9d:19:6d:d1:
                    af:44:37:83:0b:bf:c8:7f:89:c3:57:b4:ab:6d:cd:
                    12:3b:41:33:d8:ec:2c:12:99:8e:59:cd:04:4b:8d:
                    5b:67:c5:10:9a:90:d3:b6:ff:f4:e8:dd:e3:c5:66:
                    31:73:20:e9:8a:d9:28:f9:5a:84:a0:c0:e1:6c:df:
                    bf:a7:eb:ca:05:3b:ba:43:4c:21:0d:22:9c:d1:ce:
                    77:7c:85:d3:2f:26:a0:85:15:9b:87:72:27:bb:ac:
                    5f:57:9e:b5:3b:e8:04:c1:9a:28:78:eb:4f:30:70:
                    8e:53:63:33:44:ff:e3:8c:4b:4f:b1:f7:f2:81:4f:
                    0b:49:ea:c3:a0:68:9d:3d:63:07:c8:fb:31:5c:23:
                    b3:27:9e:c3:e0:16:66:8b:67:ac:fa:46:68:55:c2:
                    40:45:62:24:cc:3f:f1:59:57:01:5f:73:1e:12:f5:
                    53:17:b8:64:1d:fb:25:80:0b:91:65:b6:d1:8f:2b:
                    78:9a:ab:2e:08:41:ac:0c:f3:d1:a3:a0:a6:c6:a8:
                    e9:f3:72:b1:4e:73:7c:18:0e:d2:01:35:2a:90:84:
                    5d:fe:4c:7f:d3:0c:3e:82:d8:8f:65:26:1f:1a:cf:
                    11:09:43:9d:8a:44:c1:3e:3f:bf:7d:a0:41:87:1a:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:6D:D1:67:56:F4:E9:BE:C4:EB:31:58:41:62:37:2D:5C:88:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a84b32c5-be56-3510-bb0d-d891c0d30f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:30:72:cf:89:a0:b5:81:2f:ea:17:47:45:ae:9b:19:27:
         d0:bf:a7:ae:6c:75:93:e3:95:1b:80:a9:d8:ea:03:9d:08:0c:
         cc:d3:1d:f6:37:34:10:f0:4e:32:b2:f7:d8:ad:05:b4:1a:71:
         ed:a2:fc:69:ae:87:f9:6b:36:49:6f:c8:69:fb:a4:11:ba:21:
         00:9b:c3:9e:28:6f:69:a4:54:d9:21:f2:1c:03:ea:c1:17:60:
         d9:d8:3c:8a:95:8b:5e:74:be:b0:1b:78:c3:28:74:46:5f:f6:
         ac:f0:e7:f2:00:c2:22:85:40:e9:39:07:a1:6a:b7:b6:c3:f5:
         71:09:9d:0f:19:f0:58:56:c3:57:34:52:1e:97:e3:b6:9e:56:
         a1:a7:e3:c6:49:5d:bc:0a:1c:e4:54:a7:a1:f4:3f:c4:ea:d5:
         0e:71:42:af:a9:ea:3a:27:30:5c:fe:96:32:d9:00:17:43:a2:
         04:c8:76:52:b7:07:4f:57:68:bf:5f:ae:69:07:2c:23:42:07:
         e2:c5:70:4c:55:c5:da:8f:70:4f:78:e9:d7:2a:2d:9f:a4:46:
         a1:dc:81:de:fb:ab:8e:07:4c:bc:74:f6:db:f8:77:fb:01:6e:
         5b:e1:9f:87:d3:2a:73:13:24:2a:da:14:6f:eb:7c:cc:b0:8f:
         85:04:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:57 2024 by rpki-client on console-fra.rpki-client.org