Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa
File:                     e170db98-dbc5-34bf-81ac-0ddf841100e7.roa (raw, json)
Hash identifier:          +Oc2IQbaY0CaBUxx+j9ukUWMYXPCQN0Q5oCS0OkVTDI=
Subject key identifier:   93:8E:0D:B0:47:29:FE:DA:03:20:25:B3:3B:85:F4:35:D2:FD:1C:78
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858474850C616CDB43052A8C7DBB0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     11693
IP address blocks:        66.216.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c6:16:cd:b4:30:52:a8:c7:db:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=8668e1a4-342f-479e-b9c8-6f353f37edbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:46:a6:b0:eb:7f:f8:cc:47:af:a3:12:32:
                    d5:ea:5c:c1:98:9c:88:3d:b0:69:6a:ac:e0:3d:d1:
                    a6:8d:33:2b:d1:36:9f:7f:d0:a6:5d:06:ad:cd:1f:
                    fe:be:f4:40:2d:f8:44:f2:b7:30:81:94:b0:b7:55:
                    49:2e:ad:f6:a7:c2:b9:a9:b2:ed:90:70:b0:18:1a:
                    7f:ff:05:cb:a5:fb:db:13:0d:92:2b:32:1e:24:c7:
                    6a:99:f7:51:1c:fc:7b:61:91:d1:d3:5f:ac:f9:14:
                    eb:47:85:3b:7b:9d:c0:d8:9e:47:8a:b0:a1:20:13:
                    bd:8f:45:7c:b5:03:da:02:05:2c:cc:2c:e0:41:4c:
                    cc:39:7b:9c:8e:7c:fc:3e:fb:99:78:a0:4f:6c:a4:
                    ea:29:07:c8:03:ca:60:7a:ed:cb:e8:74:89:fc:d0:
                    14:b2:5e:60:86:e8:ee:5b:fc:eb:a5:9c:85:db:31:
                    6d:62:98:0b:95:cc:64:c9:95:cb:f0:fd:c2:34:a1:
                    05:de:f0:03:c9:de:3a:79:1e:71:43:19:c1:2a:f8:
                    9e:2f:0f:06:8a:61:e1:cc:5b:32:fe:f8:45:68:95:
                    ec:56:63:6e:cc:f9:59:19:25:f7:43:aa:b9:0b:a9:
                    cc:84:a6:2c:d1:53:80:af:9e:89:0e:ba:73:c3:84:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8E:0D:B0:47:29:FE:DA:03:20:25:B3:3B:85:F4:35:D2:FD:1C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/e170db98-dbc5-34bf-81ac-0ddf841100e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:86:1b:4b:d8:13:6f:3f:fa:66:56:8f:cd:bd:67:a5:32:
         5a:7e:6f:f8:97:81:c4:f1:c9:e3:2b:62:42:18:89:1f:d4:cf:
         e0:da:40:37:3a:9e:a7:d0:90:87:1b:dd:22:fe:15:39:eb:47:
         23:e3:7f:ad:57:d1:4c:b2:51:a4:92:0f:7b:ca:c3:67:02:67:
         35:8b:df:b3:d8:7e:1b:8a:6a:ab:a2:7a:20:15:a1:7b:8a:d3:
         85:b8:f1:5d:46:30:71:c0:64:3d:97:84:4b:8d:d7:0e:e0:ab:
         29:2a:49:e3:fb:ac:5f:92:d6:21:8a:a4:15:80:a6:d3:f1:0b:
         63:dd:c9:e5:bd:30:5b:5d:74:dd:36:20:b4:35:a1:f9:59:5e:
         6d:7d:6c:91:71:df:47:54:da:3c:94:ea:d1:a8:e9:f3:2c:ff:
         a8:5f:1f:fb:91:f6:03:92:fd:33:74:6f:b3:83:df:1f:f3:60:
         dd:78:2d:26:08:79:b4:17:32:37:1d:83:d2:5a:25:14:78:21:
         f4:0d:1a:b0:6c:2d:6a:6a:4c:bb:65:34:11:42:a2:d2:b1:b3:
         40:b3:9e:9f:3e:03:0b:06:01:17:c2:60:92:43:5a:9b:f8:22:
         15:24:03:23:9e:32:27:e2:78:ce:b7:75:ff:56:d2:e8:ac:e2:
         a2:69:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:58 2024 by rpki-client on console-ams.rpki-client.org