Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5a8e207c-d567-3c16-9537-99d2667ad456.roa
File:                     5a8e207c-d567-3c16-9537-99d2667ad456.roa (raw, json)
Hash identifier:          TbAtGf3ZxlTlWBzo2CikAS9FGCgP08v3f6eWmxfeF0M=
Subject key identifier:   56:00:03:1E:7D:0B:1A:82:40:85:48:16:B9:24:26:CE:06:9B:C7:11
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285847418F3BF97D267A6D7F53B180
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5a8e207c-d567-3c16-9537-99d2667ad456.roa
Signing time:             Wed 18 Sep 2024 14:56:05 +0000
ROA not before:           Wed 18 Sep 2024 14:56:05 +0000
ROA not after:            Tue 17 Dec 2024 15:56:05 +0000
asID:                     40065
IP address blocks:        67.220.64.0/24 maxlen: 24
                          67.220.66.0/23 maxlen: 24
                          67.220.70.0/23 maxlen: 24
                          67.220.75.0/24 maxlen: 24
                          67.220.76.0/22 maxlen: 22
                          67.220.94.0/24 maxlen: 24
                          68.168.17.0/24 maxlen: 24
                          68.168.18.0/23 maxlen: 24
                          68.168.20.0/22 maxlen: 24
                          68.168.24.0/22 maxlen: 24
                          68.168.28.0/23 maxlen: 24
                          68.168.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:41:8f:3b:f9:7d:26:7a:6d:7f:53:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Sep 18 14:56:05 2024 GMT
            Not After : Dec 17 15:56:05 2024 GMT
        Subject: CN=82ba43d8-2603-4c38-8c60-8e897f0fb339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:31:23:3d:07:30:32:81:0e:d7:66:07:22:
                    1f:09:16:45:c7:d1:75:88:7b:98:91:40:cc:a2:0e:
                    ed:03:d7:6f:5d:83:9b:97:91:23:cc:87:69:24:66:
                    41:33:d1:b9:33:83:75:4f:7d:91:b6:b5:4b:33:e3:
                    77:da:a2:7e:7e:5a:e6:97:ea:a5:ed:95:84:74:67:
                    d6:30:29:84:4e:3b:bc:ad:04:8d:5d:7a:41:97:ee:
                    07:be:bf:14:e3:2f:bb:c4:98:f2:26:ef:f2:61:5f:
                    63:9b:4c:1c:f5:f6:e2:d4:66:bc:32:aa:ce:98:5d:
                    18:06:66:6d:68:00:1f:b4:cb:10:86:47:1a:9f:23:
                    15:4e:94:a8:cf:c4:85:d1:83:b9:0f:a8:22:e4:34:
                    7e:67:7a:89:51:db:a2:47:2c:ab:1f:7a:14:27:19:
                    cf:51:23:00:9f:29:b4:3f:28:fe:a1:32:21:54:39:
                    97:ca:c1:be:51:bd:1b:5a:1f:fb:02:9b:77:13:be:
                    2e:83:32:f9:59:6b:d9:48:87:31:b2:d2:8f:90:12:
                    16:4b:0d:fd:0d:5a:ed:51:f4:52:52:f1:5c:38:28:
                    59:26:07:4c:31:37:7d:db:63:8e:8a:ba:ec:db:3f:
                    0c:81:5b:51:12:ba:0b:8d:c5:34:cf:c9:5d:83:dc:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:03:1E:7D:0B:1A:82:40:85:48:16:B9:24:26:CE:06:9B:C7:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/5a8e207c-d567-3c16-9537-99d2667ad456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/24
                  67.220.66.0/23
                  67.220.70.0/23
                  67.220.75.0-67.220.79.255
                  67.220.94.0/24
                  68.168.17.0-68.168.30.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:79:c8:71:7e:ba:91:99:83:ef:b8:ca:28:87:29:c5:34:
         c2:af:6e:9d:82:8c:4b:62:43:16:df:d2:57:11:bc:aa:18:d1:
         4f:ba:dc:39:dc:2f:91:2d:73:3c:73:a4:5f:67:2a:4e:91:93:
         55:d4:25:a4:90:34:1b:52:b4:47:e2:29:5a:f4:06:22:8d:a5:
         20:78:b2:27:ea:15:6d:e1:78:cf:35:f0:b6:2d:7a:b6:79:2b:
         c9:bb:04:ba:3a:27:29:fd:b5:9e:c5:2c:79:f8:06:dd:40:e3:
         74:7f:d7:ba:40:9d:d0:50:e2:13:84:6d:10:37:26:f7:ea:1c:
         2c:03:96:31:ca:fb:9c:44:58:ac:0f:93:76:d5:3a:bd:2c:64:
         3c:4e:ca:f3:6b:be:58:85:28:85:4f:d3:92:39:e7:29:df:16:
         48:81:f8:fb:bd:a7:c7:c1:26:18:aa:3e:ef:7f:67:c8:56:6f:
         1c:de:36:07:7f:78:fe:8f:a9:54:9a:a9:f1:72:18:df:a2:21:
         c8:d1:28:81:0a:20:d4:66:27:96:6a:e0:a6:e1:14:20:82:45:
         98:35:99:c3:93:cc:a3:bf:f1:47:bb:33:32:fa:09:8f:72:a2:
         99:57:e3:f6:00:6a:9a:0f:5a:ca:fc:3b:f4:64:36:f8:5a:6b:
         16:ac:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org