Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa
File:                     fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa (raw, json)
Hash identifier:          Ohsh717/jSqo/vCtT5Ml8tel3tG9q0XVw4LYWj4xWZc=
Subject key identifier:   7D:80:43:8A:37:D0:1E:1D:BB:FB:8A:E1:EB:B3:0D:85:06:EA:CD:E0
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285845777DBA54C9313DD2B7543632
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16904
IP address blocks:        66.242.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:ba:54:c9:31:3d:d2:b7:54:36:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=ea133893-71e2-4156-a14f-0b313ae6566c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:72:74:25:28:84:9d:cf:5b:21:92:0e:dc:
                    2d:06:80:5f:3b:7f:e0:72:13:53:78:5c:57:5c:ad:
                    5c:4f:ca:d0:dc:a3:7a:95:ba:20:87:a3:28:2c:df:
                    f1:df:13:25:bb:67:d6:fb:3a:10:5d:25:cd:5a:f9:
                    75:dd:fe:a8:cf:44:43:7a:1e:ce:f7:33:0f:40:95:
                    5f:cb:ff:f0:8c:a3:84:21:72:ca:c5:ee:f5:5d:ad:
                    68:1d:1d:3f:3a:2e:52:be:f4:28:46:c4:a5:d5:80:
                    51:4c:59:51:6d:8a:4c:5d:30:3b:62:1e:74:55:14:
                    0f:ad:fa:8a:01:c6:f6:67:4c:e7:2a:14:ef:ce:25:
                    45:11:21:d1:c0:86:1d:05:af:e8:e8:cc:0c:1c:95:
                    44:2a:a6:44:2f:14:24:83:36:c2:26:72:1a:5c:16:
                    ea:db:bb:e6:0d:5c:70:c6:67:08:a5:04:9c:79:02:
                    f3:bd:e7:44:bc:a9:4a:20:56:0f:bc:1a:9e:d5:2c:
                    a4:c8:93:95:19:e8:5f:2a:86:c4:c3:30:47:1e:05:
                    6b:ac:d8:fb:46:63:b1:97:99:15:56:a9:ee:fc:bf:
                    a2:f2:fc:00:30:53:6c:41:0e:74:74:e7:c9:86:d7:
                    5f:73:13:b3:64:89:c8:18:68:e3:78:be:05:b4:33:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:43:8A:37:D0:1E:1D:BB:FB:8A:E1:EB:B3:0D:85:06:EA:CD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbdc5cd3-5b29-31a6-a43e-64dba20a227e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:26:a5:a2:75:48:6e:9e:53:f2:f8:f4:d0:14:0a:94:7b:5f:
         a0:9f:78:a7:90:48:a9:96:84:40:5a:ca:c0:71:13:9a:69:81:
         f3:68:d4:9d:8d:2e:da:24:70:09:11:06:54:00:57:fb:a7:a2:
         e5:74:a4:2e:84:6d:02:4f:c7:d0:da:eb:a9:66:a4:79:22:0f:
         fc:08:de:2a:b5:d4:2e:1b:d4:4b:80:95:7e:c6:c3:9f:02:35:
         c3:8d:c7:2f:4f:e5:8b:9e:ae:23:f3:bb:1e:b6:c3:74:51:dc:
         c4:95:9d:bd:39:c8:50:0b:05:11:26:8e:ce:95:30:16:0e:d7:
         bd:4e:77:64:27:b5:fb:db:93:aa:35:63:5f:22:da:8b:66:e3:
         a9:db:5d:31:89:10:6f:ad:f7:01:70:34:4f:b3:53:f9:4b:98:
         d9:23:c0:8d:26:bc:3b:d1:fb:05:c9:51:79:6f:11:42:12:f7:
         25:d1:ad:bc:d1:24:42:48:f0:61:8d:cc:af:e7:53:1e:53:bb:
         39:10:80:ba:ae:ee:6b:23:1a:e6:b8:5e:40:5c:5e:7c:92:ba:
         7f:ba:23:77:a0:fa:2a:95:38:dd:9a:58:ff:79:b3:ae:75:91:
         e7:2d:49:49:8f:1c:ae:dc:11:08:e0:a5:6d:ea:7a:c2:13:8d:
         cb:e4:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:23:15 2024 by rpki-client on console-ams.rpki-client.org