Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
File:                     385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa (raw, json)
Hash identifier:          X/p28YA55WN3RZ8sNOY+XJSs/K+hUJhYVW7u51gNciw=
Subject key identifier:   60:C5:A3:6D:CB:EB:E5:5B:43:FA:39:D3:D7:6B:8D:D5:1D:3C:47:C3
Certificate issuer:       /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial:       010D0C9F43285847B696BD0974A5101DD8D6A680
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     396226
IP address blocks:        66.146.226.0/23 maxlen: 24
                          148.59.145.0/24 maxlen: 24
                          173.231.64.0/23 maxlen: 24
                          173.231.68.0/22 maxlen: 24
                          199.193.59.0/24 maxlen: 24
                          200.50.128.0/21 maxlen: 24
                          209.142.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bd:09:74:a5:10:1d:d8:d6:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=8306d80b-de11-4329-9ab5-c99ae7a53ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:ee:db:70:8e:a4:36:f4:7c:28:42:89:3d:
                    ef:82:4e:e1:16:1c:65:9f:45:7e:a2:ad:84:58:24:
                    07:62:71:9a:d4:87:0a:7a:6e:d2:d5:99:0f:2f:f1:
                    ca:40:48:86:97:4a:b5:38:69:8d:b4:08:29:32:91:
                    ff:b3:35:18:33:46:55:48:a3:82:b6:8d:3e:78:6d:
                    a5:0c:6c:53:de:e5:8c:49:5e:d4:ac:16:97:73:6a:
                    10:c0:a8:92:d5:79:f7:c8:b8:39:ca:34:cd:68:1f:
                    d8:0a:f2:25:58:83:44:82:c7:54:a1:83:b4:e5:d3:
                    29:22:c7:4c:0c:5b:1b:45:be:98:13:fd:53:53:90:
                    b7:5b:05:96:a7:1e:4d:f3:a7:1c:0d:02:7b:79:09:
                    95:5c:27:51:de:7e:71:34:b8:17:54:0e:3e:35:48:
                    3b:89:ae:37:76:20:93:75:82:06:42:fc:c2:2f:f5:
                    5f:2a:6c:eb:5e:46:e3:79:c9:82:02:d1:d1:e2:d4:
                    de:9f:d6:33:11:59:ae:f6:97:b9:2f:c3:8e:5b:4e:
                    d6:ae:66:a2:31:95:5e:cd:31:a3:56:fe:73:73:5f:
                    6d:93:14:11:36:47:0f:71:52:ae:6d:5d:5c:99:c7:
                    48:46:a7:b6:fb:9f:45:6a:e3:bf:7a:7b:21:32:28:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C5:A3:6D:CB:EB:E5:5B:43:FA:39:D3:D7:6B:8D:D5:1D:3C:47:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl

            X509v3 Authority Key Identifier:
                keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.226.0/23
                  148.59.145.0/24
                  173.231.64.0/23
                  173.231.68.0/22
                  199.193.59.0/24
                  200.50.128.0/21
                  209.142.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:97:5d:14:ee:ba:f9:6f:ed:7a:e0:e4:c9:25:d2:98:fc:83:
         53:a6:1e:c3:4e:b7:8f:46:9c:4e:68:55:55:3b:8b:7d:bb:b4:
         91:64:af:55:36:84:14:6d:94:b9:ca:15:2b:ec:7e:9b:92:4c:
         6f:a8:66:83:3d:45:af:13:7b:48:99:65:8a:2f:f5:3b:4e:65:
         33:c6:a7:19:a4:90:d5:34:3f:21:10:1b:ab:82:96:87:16:f9:
         e4:ea:de:b7:1c:89:9b:4e:1c:92:0b:e4:99:ea:47:44:22:16:
         a1:37:c5:05:6e:46:87:43:3a:08:0d:ff:99:df:a4:0f:2a:39:
         8f:c3:00:bb:99:87:53:ea:af:b6:44:a4:11:ce:32:11:27:57:
         5b:c7:d0:1c:99:68:80:14:b4:b4:c8:33:e0:99:bb:38:30:67:
         e5:f3:61:5b:da:f3:d1:da:f9:c9:74:66:61:88:48:e9:16:f9:
         a9:1f:3b:4b:9a:c8:a7:4e:bc:f4:51:ef:ea:ec:56:b8:87:84:
         9d:b9:0a:da:5c:0c:59:fc:4a:85:e1:79:66:2f:f3:e4:4a:d3:
         24:a9:51:1d:e0:58:0f:e7:63:31:35:49:66:fa:4d:11:12:65:
         8b:ce:c2:c9:32:22:49:1a:34:18:5f:75:dd:c5:58:fa:f4:b0:
         b9:d5:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:25 2024 by rpki-client on console-ams.rpki-client.org