Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa
File:                     2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa (raw, json)
Hash identifier:          yspgZLxhLPCIbqwiM0SnmDH3e714VqGF2V+CwvxE6XY=
Subject key identifier:   18:3F:85:C0:2A:0A:E2:65:36:3F:BF:A8:40:74:EF:A7:6A:69:3E:FA
Certificate issuer:       /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
Certificate serial:       010D0C9F43285847F17EB04A8E5C4307F19D2400
Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa
Signing time:             Wed 20 Nov 2024 15:25:01 +0000
ROA not before:           Wed 20 Nov 2024 15:25:01 +0000
ROA not after:            Tue 18 Feb 2025 15:25:01 +0000
asID:                     401199
IP address blocks:        66.163.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:7e:b0:4a:8e:5c:43:07:f1:9d:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6
        Validity
            Not Before: Nov 20 15:25:01 2024 GMT
            Not After : Feb 18 15:25:01 2025 GMT
        Subject: CN=5989d146-65ad-460a-a06c-94f282e61813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:cc:70:bb:45:f1:66:35:dc:4c:69:59:8c:
                    d5:e2:dd:5e:70:e7:f2:99:13:cf:51:37:73:a5:0d:
                    42:5c:3a:90:35:df:cf:14:37:be:52:7e:31:9c:b7:
                    94:ff:ff:d9:a3:b9:51:e7:64:24:26:5b:35:12:de:
                    d3:2b:2d:ab:e8:b5:87:af:9c:8c:6d:ec:e1:9b:92:
                    9a:3e:6f:9a:0c:83:ff:13:1c:b9:ec:d1:78:9d:30:
                    ca:40:7a:c8:92:fc:36:0d:90:c1:22:f3:a3:6b:d0:
                    6c:60:3a:cc:43:85:f2:20:28:e2:7f:e5:6f:86:2c:
                    a4:84:5c:b0:cc:76:75:0b:ce:30:46:c5:89:b9:e8:
                    fd:04:d9:72:f2:5e:95:36:f1:44:f8:e3:cb:72:ca:
                    fa:55:af:fb:ac:48:1c:4b:99:70:4f:bc:a3:a6:6b:
                    53:2d:2a:36:e4:4b:4f:46:9a:a2:04:e9:a7:8b:ef:
                    43:f3:2b:00:c6:73:d3:f4:1d:d3:2e:3e:e3:11:be:
                    a4:3c:1f:93:95:78:65:0a:2a:0d:9e:75:d5:8f:9d:
                    e2:d7:1d:0d:f9:6f:c1:1a:91:30:53:5d:d3:74:84:
                    f4:67:1b:c0:da:d6:32:f7:72:9b:da:11:88:bf:85:
                    91:39:f0:09:80:89:e4:2b:3d:3d:08:37:b3:1f:0f:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3F:85:C0:2A:0A:E2:65:36:3F:BF:A8:40:74:EF:A7:6A:69:3E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/2251fd9d-8a0c-36bb-b87e-18f4d87335fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl

            X509v3 Authority Key Identifier:
                keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:87:ae:54:6d:6f:7a:79:d6:42:18:a8:bc:5c:64:b6:e2:53:
         69:af:a9:6a:87:46:b3:1f:d6:3b:fd:05:a5:29:96:ed:b0:f6:
         d6:3f:90:3a:3e:99:57:5d:ee:80:13:c8:1d:f6:a7:1c:cc:5f:
         b7:3c:88:26:16:34:7a:72:6a:24:55:50:5f:ba:61:d4:7f:23:
         10:44:c8:2b:a0:85:f0:2d:4b:56:0e:bd:7e:ee:3c:06:05:8c:
         07:de:d3:60:56:51:a0:df:94:a3:80:fe:ff:3c:58:6e:49:f7:
         c5:01:01:ba:34:7c:93:db:29:15:d9:6f:01:52:68:84:c8:14:
         e2:85:50:80:96:fb:49:bb:08:6c:c4:ae:46:eb:40:15:a2:88:
         57:80:ce:af:fb:99:c4:8a:af:9c:64:f8:b4:8e:0b:45:da:50:
         95:9d:58:90:6c:d6:0b:6a:ac:1d:62:d8:42:97:06:38:34:bf:
         de:e4:14:c9:d5:89:24:95:37:47:c5:ed:9c:b5:11:a3:9d:94:
         34:29:07:ba:c8:36:36:3b:e7:8a:39:54:3e:c8:45:27:d3:47:
         21:e4:5a:c1:c8:87:26:60:43:44:f7:db:98:58:4d:f7:fd:dd:
         05:4f:ad:b3:0d:e5:61:07:ff:11:a8:dd:28:a3:87:a1:cb:39:
         eb:b3:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:45 2024 by rpki-client on console-fra.rpki-client.org