Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/cc2dc27e-0b26-3fc4-a0d5-8e2b7962277f.roa
File:                     cc2dc27e-0b26-3fc4-a0d5-8e2b7962277f.roa (raw, json)
Hash identifier:          UZ6gSzLzUGP29f01lvz3og+XAtHcCjo6/RLUT09ylj4=
Subject key identifier:   00:6E:27:CE:F1:ED:0B:B5:BB:97:0D:45:12:DF:04:BD:F0:D2:95:01
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F432858450F9D3D61E08F949567D94200
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/cc2dc27e-0b26-3fc4-a0d5-8e2b7962277f.roa
Signing time:             Fri 01 Mar 2024 08:00:01 +0000
ROA not before:           Fri 01 Mar 2024 08:00:01 +0000
ROA not after:            Thu 30 May 2024 07:00:01 +0000
asID:                     14618
IP address blocks:        207.174.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0f:9d:3d:61:e0:8f:94:95:67:d9:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: Mar  1 08:00:01 2024 GMT
            Not After : May 30 07:00:01 2024 GMT
        Subject: CN=4bb1083d-96a9-469b-96ea-70f75795c637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:8c:59:12:79:84:51:57:ee:0e:94:0a:d0:
                    b7:c2:16:84:f4:f7:fe:ae:31:22:df:d3:43:27:a0:
                    a8:95:94:fb:a5:b5:95:56:24:3c:9b:e5:db:35:ba:
                    56:72:47:29:e3:04:07:0e:06:91:d4:08:be:83:a0:
                    c2:e2:41:20:da:5e:53:72:40:93:a1:29:63:a5:da:
                    f6:5e:1f:1e:a4:66:7a:29:e9:d3:75:9d:54:5e:40:
                    31:83:e5:dd:b6:3c:8a:3b:4e:7a:94:92:87:08:39:
                    b3:50:e8:11:c6:da:94:c6:be:f7:af:7f:0f:e2:5c:
                    31:6e:b1:aa:e8:60:49:4d:18:f8:f9:db:aa:f7:10:
                    de:79:83:37:f1:09:e3:4e:c2:02:ad:a5:6d:ae:99:
                    d6:da:d4:56:ff:0c:67:84:37:0c:cc:67:23:2b:c5:
                    c7:da:77:1f:33:96:c2:17:5f:f4:9f:48:7b:7f:ac:
                    72:b9:46:1e:a2:49:9b:73:b9:9f:7c:2b:a2:16:8f:
                    65:42:a8:6d:25:91:6c:48:61:db:d5:df:f9:93:1e:
                    34:73:16:91:79:27:94:6b:c9:53:ab:a8:c3:85:f0:
                    6f:b9:99:af:b3:b3:53:90:5a:02:7d:8f:af:3c:a0:
                    84:12:cc:ee:dd:b2:37:5a:b9:b6:99:f2:6a:0f:43:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:27:CE:F1:ED:0B:B5:BB:97:0D:45:12:DF:04:BD:F0:D2:95:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/cc2dc27e-0b26-3fc4-a0d5-8e2b7962277f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:22:99:31:f6:56:cf:31:0f:c8:d6:01:f5:97:14:c3:01:96:
         2a:c5:17:a8:91:a6:68:06:ff:21:c3:62:9e:cf:91:05:bb:1f:
         c3:66:64:f7:38:41:6f:7a:42:46:04:dc:14:95:7e:7f:5f:ee:
         fd:c4:2e:e6:05:8a:9f:60:5e:98:15:48:38:25:40:d6:e8:bd:
         d6:96:21:95:a2:9c:10:1b:39:e9:09:58:01:e6:d3:29:81:90:
         37:f1:47:59:80:ce:d2:d8:7e:cf:69:2d:07:f8:7b:d9:b2:ee:
         c2:c3:63:1a:4b:38:ab:0b:f8:46:6d:29:31:38:76:5f:de:ab:
         44:2f:a6:9c:eb:9f:f8:f7:6b:e8:64:9f:bf:98:01:d8:d6:ad:
         bf:4a:8e:05:00:fc:ab:19:f0:b3:de:e0:26:df:dd:b9:5e:73:
         4d:f4:df:4b:a2:b8:8c:3e:60:18:fc:f6:ac:73:92:ba:69:e3:
         cf:89:06:07:b1:05:86:01:d3:02:d7:87:1b:89:a3:4b:be:4b:
         17:93:3f:f5:16:04:17:9d:1f:25:c3:fa:96:95:1a:2c:b4:53:
         04:a7:d5:9e:0c:eb:87:75:ca:e9:99:3c:de:8b:99:f4:a3:f1:
         22:4e:8f:48:3a:32:08:24:d7:19:00:23:a8:48:bf:a3:ce:8b:
         14:06:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:07:53 2024 by rpki-client on console-ams.rpki-client.org