Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa
File:                     fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa (raw, json)
Hash identifier:          yytTJEdXBpm/wObN/9Oi+MivHyZNOyTjMqFGqDOF8oI=
Subject key identifier:   2D:E0:25:4B:82:38:D3:9E:5A:AC:D6:AD:E8:FB:15:A8:A8:5F:20:72
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285847362B41EE64C21223CEC2A280
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     16904
IP address blocks:        66.242.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:41:ee:64:c2:12:23:ce:c2:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=99cf5b25-f1ce-430b-ad0e-50ad84fdc0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9b:29:3d:d5:84:e0:89:46:29:05:fd:4c:dd:
                    e2:63:ed:86:93:e6:7c:ef:14:b1:a8:a4:41:56:5d:
                    2c:33:fd:ea:fb:e2:c6:62:5e:a2:e1:32:d9:fa:f9:
                    a4:ac:7e:22:89:b5:b9:ba:5f:3f:06:c5:38:e4:52:
                    73:55:f4:e9:a3:3d:7e:7b:b1:7c:40:39:51:fe:9c:
                    92:87:bc:77:00:2b:e2:f2:0a:44:49:6e:03:fe:6d:
                    35:dc:ab:e5:6e:d4:ca:2e:78:fa:62:41:9d:a2:b9:
                    0a:12:01:c3:5f:32:bb:99:d4:d6:f6:45:51:21:95:
                    bd:4b:3c:55:76:ba:12:f8:01:e2:f0:8e:3a:fb:94:
                    c8:83:3c:35:4f:d1:07:65:ba:ee:5c:04:a2:1f:28:
                    31:cd:ba:ac:7b:7d:ae:92:8b:28:f3:67:e8:a7:50:
                    c2:7f:ef:d6:33:7a:86:ed:84:71:fe:de:a8:6d:7a:
                    8c:f5:06:af:b0:bc:c4:4b:7a:60:83:76:29:40:e0:
                    a5:79:18:92:9d:ea:79:a0:12:9e:c3:a5:58:88:fa:
                    6f:18:bd:29:72:1f:19:05:42:31:e2:69:a7:a2:68:
                    78:9e:3e:8a:dc:bb:4e:6d:41:8d:fa:e6:47:5f:87:
                    b9:df:11:82:10:41:dc:ad:5b:ef:0b:54:de:35:71:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E0:25:4B:82:38:D3:9E:5A:AC:D6:AD:E8:FB:15:A8:A8:5F:20:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:99:16:74:bd:b7:c7:d1:aa:db:e7:a9:9d:37:a7:c6:54:e9:
         14:61:41:d5:c7:9e:4c:4d:7d:43:22:1d:4a:7d:d1:af:c7:ff:
         1c:e5:00:ee:f7:7e:ce:95:f3:82:de:c5:40:85:ad:b8:e6:3f:
         8f:dd:b8:8d:37:2b:dd:05:6f:3f:05:30:03:b4:b9:37:34:31:
         e6:9e:f8:81:4d:4b:ae:7e:43:03:65:07:e9:66:22:18:d8:40:
         fe:58:c3:57:b8:5f:a3:26:a5:26:07:be:b2:36:b9:01:c6:6f:
         78:7a:a5:97:78:9e:68:af:b9:39:6d:f9:08:f1:e3:e0:f3:81:
         03:42:c2:1e:59:71:fa:f8:73:81:5e:d0:76:c4:eb:d1:7a:0c:
         91:7d:ec:19:1a:7e:ee:94:b2:30:15:27:2b:bf:c9:1e:c0:dc:
         59:f6:2c:05:84:00:c4:8b:bc:06:38:e4:f6:b8:56:63:fb:90:
         0a:95:4e:98:33:d1:1e:ea:27:06:59:0a:b0:6b:e8:df:84:6e:
         2c:62:23:39:91:1e:bc:1c:79:af:9e:ab:79:60:0f:bd:76:ca:
         db:f3:86:ab:34:f7:9f:7f:54:0a:8b:a3:42:77:fc:74:3d:24:
         8d:ac:6e:99:2c:46:5a:52:45:96:60:ff:4c:62:63:1a:ac:1b:
         de:f9:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:16:09 2024 by rpki-client on console-ams.rpki-client.org