Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa
File:                     f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa (raw, json)
Hash identifier:          Prxq0hPMZ4duDCjmnZFv033MEd49MdI/9hXVsEtpGcA=
Subject key identifier:   E1:2E:3B:C1:60:A1:CA:79:7F:EB:B3:D2:64:41:2F:4D:8F:75:F0:F4
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F43285847C05C15409C9D1B5E9EC21D00
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     22611
IP address blocks:        66.33.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:15:40:9c:9d:1b:5e:9e:c2:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=4ccc08cd-773a-4b89-9d06-c7b5b721811a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:1a:8a:bb:0c:64:b9:50:83:84:9d:04:e7:
                    13:8d:50:0d:be:b3:8a:88:90:34:39:33:c8:a0:d3:
                    5b:74:e3:f7:b9:31:2a:15:90:28:2b:9a:de:3d:c3:
                    da:36:f7:f3:90:35:43:96:c2:d9:ef:cd:84:ce:d3:
                    a5:27:1b:cb:a0:74:21:a1:2d:58:3a:9c:ca:eb:30:
                    10:da:6f:c2:1c:5c:67:44:ba:ec:fb:4e:b2:94:39:
                    9a:b2:9c:88:88:08:cc:6a:44:72:3a:77:94:e1:1c:
                    e6:af:99:24:1f:13:94:7d:55:bf:9e:a1:23:bd:fc:
                    d3:e0:bf:a6:eb:58:9c:58:b6:ff:e3:10:3c:2d:ea:
                    f5:c2:d5:5d:97:b0:4a:f9:06:67:ee:f6:df:77:66:
                    e1:7c:7d:b9:55:61:49:5f:05:26:4f:63:05:49:cf:
                    b8:0d:02:0b:1e:78:6f:03:1b:f3:41:f4:d3:d0:5b:
                    58:a3:25:a9:e6:12:73:46:73:b2:09:9e:d2:c0:a0:
                    74:3f:17:02:22:ef:c5:60:85:a7:77:c4:71:10:8c:
                    80:73:f1:06:7b:9b:90:69:37:f8:5c:5d:ae:fe:a7:
                    c8:d5:47:d1:9d:6b:b2:b2:bc:db:da:ba:38:45:24:
                    e0:40:a6:cc:82:bd:8d:45:55:7f:46:d5:17:af:0d:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2E:3B:C1:60:A1:CA:79:7F:EB:B3:D2:64:41:2F:4D:8F:75:F0:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:de:78:8e:b4:7e:32:a5:46:12:df:9e:45:74:ab:ee:e3:f1:
         d7:8e:16:fc:be:40:c2:c6:3a:74:4c:b0:d1:42:f3:75:d4:e7:
         80:23:04:66:15:ac:ce:da:a8:6d:b4:6d:a7:d6:26:13:66:0c:
         d7:10:6a:74:1f:6e:5e:1d:25:f0:32:5a:0a:bf:aa:79:bc:29:
         f8:a7:b7:28:27:b2:15:a2:df:0f:d8:f3:f3:7c:be:b1:ab:82:
         b5:4c:52:a0:26:98:5c:9f:69:54:a8:81:11:0a:90:f8:23:f1:
         f6:29:1d:52:9d:8e:b2:ad:dc:ae:c2:b2:6a:67:a8:ae:df:92:
         e6:5e:3a:0b:05:32:20:d6:d9:99:91:7f:03:c2:6f:25:af:94:
         86:6f:fb:27:80:0c:fa:5e:8c:ac:42:60:05:4e:1d:40:b2:4f:
         c3:49:20:c8:a1:85:3f:26:08:f7:7e:81:ce:f3:26:87:07:21:
         29:1c:5e:76:65:3d:95:59:cc:4e:19:da:86:db:ea:ee:20:ae:
         e1:da:96:fa:ae:02:94:11:e6:44:22:0b:e3:92:f6:3c:f2:b5:
         c3:b5:c0:4c:ef:84:be:a4:59:eb:3a:4d:a3:59:ce:14:47:da:
         e6:7e:e6:a9:cf:18:28:5e:4b:28:33:31:0d:30:61:d5:91:10:
         61:d9:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:28 2024 by rpki-client on console-ams.rpki-client.org