Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa
File:                     254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa (raw, json)
Hash identifier:          u/apo+jT9i5UMNJdgBmA2+B6xD0VCfLXbew6vG7IN0A=
Subject key identifier:   A0:41:0B:28:DE:B1:27:BE:C9:F0:DE:0D:75:2F:0A:B2:1A:B0:EA:41
Certificate issuer:       /CN=89a397c2-4860-4547-8d71-faf2481535cf
Certificate serial:       010D0C9F4328584780264F6B285BFA2B31A6E260
Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     401164
IP address blocks:        66.45.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:4f:6b:28:5b:fa:2b:31:a6:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=946d9190-0a7c-4646-9a0b-d9eabc144fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:dd:60:bd:19:5b:ea:07:62:31:2f:b7:b5:
                    ed:85:d5:3f:aa:3d:a3:35:34:4e:f9:b9:6f:d5:79:
                    88:56:3e:18:80:c6:4c:0c:40:df:0c:3d:49:78:84:
                    88:b7:2e:2c:f7:e5:68:67:74:57:92:9f:d8:b7:eb:
                    ce:48:4c:10:71:9f:a4:52:a8:99:19:43:e0:74:e2:
                    88:41:68:04:ac:97:81:21:19:1a:4f:e2:61:8e:ae:
                    02:5f:2b:0f:21:fb:57:e2:41:68:50:8e:00:11:c8:
                    c4:1b:b3:12:fb:2f:47:17:a7:4d:0b:c3:c5:c1:af:
                    b4:64:d3:94:b7:ca:e7:9f:91:9e:63:a0:9e:42:ca:
                    c7:5c:0f:86:90:98:7a:0a:45:0c:84:50:a8:bf:68:
                    da:07:c0:97:dd:61:90:fb:5c:ac:6e:c6:41:9b:ae:
                    62:3b:cf:53:31:ba:bd:f3:37:a8:73:b0:ad:29:9a:
                    16:95:2f:76:4e:95:a2:5b:e0:a7:49:12:4c:37:8a:
                    d2:6f:b9:25:5c:dc:63:d7:a6:8a:dd:71:32:a2:03:
                    b5:2b:ec:e9:72:e0:4d:b5:25:6b:c6:2b:cc:5b:29:
                    49:ce:1c:62:af:62:e2:d0:6f:06:15:78:75:5e:33:
                    86:e7:f6:6a:35:5b:ba:39:e0:06:dd:e7:8b:80:65:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:0B:28:DE:B1:27:BE:C9:F0:DE:0D:75:2F:0A:B2:1A:B0:EA:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/254993fc-d3d4-358c-ae0c-3336b5eb4c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl

            X509v3 Authority Key Identifier:
                keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:fa:5a:4c:d5:76:f8:b1:ec:80:1b:92:2e:19:8d:eb:13:
         4c:72:8e:6a:7c:06:1f:63:a4:9d:47:e1:6d:b9:76:a5:0d:26:
         95:57:bc:56:76:a5:11:c1:8d:d7:ba:34:7a:b1:57:82:67:c1:
         fa:af:8c:ec:bd:68:d9:43:fb:83:17:bb:74:07:37:c9:37:ee:
         5a:11:27:d1:0f:b5:8e:2d:ef:5e:81:31:e3:07:43:d6:bf:42:
         05:cf:44:1a:8c:c2:30:b0:2f:55:9c:a4:f3:67:36:6a:4e:52:
         df:3d:92:62:0f:a3:af:45:f4:9d:c3:86:42:5c:83:14:b1:f5:
         95:c5:e1:76:c1:4c:52:e2:f1:23:33:91:e5:47:d8:cc:5d:2a:
         90:50:f8:36:14:74:a9:98:0d:22:49:a2:69:7c:5d:e7:bd:fd:
         58:2f:f4:d9:64:12:44:ec:92:71:31:35:2d:da:e6:ba:2f:4d:
         8c:88:3d:53:a1:46:42:12:80:e1:25:5f:fc:94:86:80:29:43:
         21:23:5b:3b:3a:16:a0:16:29:1e:f3:d3:b3:ac:47:b0:b5:bc:
         13:65:73:80:fb:90:66:c5:34:61:28:39:44:79:e6:a6:88:09:
         c3:db:0a:65:f0:f9:bb:7e:e2:67:10:4b:ad:c2:3f:80:20:a4:
         45:3a:32:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org