Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0e8d08f8-aef2-369d-b4ae-d6c845d604e6.roa
File:                     0e8d08f8-aef2-369d-b4ae-d6c845d604e6.roa (raw, json)
Hash identifier:          c/7z4hYbMm5H6dXNqe+rr8ste/9UIxw4qBEd7xwmd/Q=
Subject key identifier:   98:5E:2C:C1:C9:F9:16:D7:5C:16:F0:D8:F2:61:D1:E0:3C:40:C0:F3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E64DBDA90691C8BAAC980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0e8d08f8-aef2-369d-b4ae-d6c845d604e6.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     12271
IP address blocks:        66.108.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:64:db:da:90:69:1c:8b:aa:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=dbbf0efb-f0e4-4edd-93f0-88fabdf1e067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:4a:19:18:2c:85:70:f6:f5:2b:f6:fc:ba:
                    0b:42:fc:99:00:15:82:45:c2:1e:75:cc:1a:7e:fd:
                    58:7f:79:fa:81:8b:39:b9:cf:75:8c:6f:e1:85:ca:
                    e5:97:c3:ef:a0:60:c6:b0:6a:36:e2:1e:64:d8:27:
                    ac:28:99:fc:91:1c:59:7b:87:df:35:3b:37:ea:15:
                    d1:a4:b1:3c:d9:d3:e7:e6:4a:84:47:56:f4:f6:83:
                    d8:90:c4:5e:42:82:d1:6e:1d:42:22:25:af:81:a0:
                    65:07:c9:1f:21:63:53:ec:4f:e3:fe:64:16:31:26:
                    ce:f5:bf:f1:5b:b3:52:aa:fa:ab:fd:a8:f9:50:00:
                    29:d3:3b:80:c6:8c:01:71:8d:fe:d9:4c:f0:69:f5:
                    3a:89:b1:d2:72:38:c3:07:13:8c:dc:ed:89:87:7e:
                    f0:8f:ee:21:cb:03:72:03:a8:37:46:80:c5:e5:a6:
                    c3:5f:30:ad:cc:5f:ff:4c:a3:36:44:cf:64:bb:06:
                    7d:c2:3e:a0:6b:05:06:7e:fb:c4:b1:9f:a7:f7:90:
                    17:ce:9c:42:c5:10:58:42:7b:8e:bf:a9:2f:65:0a:
                    2d:da:d8:3f:4a:9f:68:46:dd:e8:9f:23:ab:ed:bd:
                    bf:ca:ec:b4:21:1f:62:fa:c1:2d:95:c6:ec:65:9c:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:2C:C1:C9:F9:16:D7:5C:16:F0:D8:F2:61:D1:E0:3C:40:C0:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0e8d08f8-aef2-369d-b4ae-d6c845d604e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.108.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:c4:c5:9c:e4:79:b8:67:58:c0:d8:9d:77:c9:1b:4c:41:
         22:f2:a5:28:4b:62:79:53:57:fe:97:51:7a:b2:2a:69:f9:10:
         8b:2c:10:37:12:fe:a1:67:34:6d:ef:4b:6f:d0:0d:8e:d1:79:
         3d:d1:ec:54:45:34:28:55:a9:8e:3a:8b:a0:62:ee:9e:23:d4:
         b3:6d:70:87:20:4e:6b:c8:c7:13:c3:93:9a:6c:75:eb:e5:89:
         3b:20:a9:5c:67:14:53:3e:43:95:73:2d:62:a6:28:83:df:5b:
         23:0b:dc:ec:7c:4f:d8:8a:03:9b:43:d8:d6:c1:73:e8:5f:df:
         8b:b8:96:8a:5b:c5:c7:9e:b5:01:80:e1:12:14:3a:8d:5a:89:
         d0:72:5d:b0:17:b9:a7:21:98:cd:8a:d2:16:89:39:c4:2a:60:
         30:fc:90:dd:2f:33:4e:27:5c:03:93:52:6e:f3:d7:6c:c9:a3:
         be:3a:60:d7:d5:c5:3a:98:e3:ce:1c:ec:a5:87:0b:78:1b:62:
         cc:9e:48:cc:f0:08:1a:bc:0f:f9:0e:95:1f:c5:dd:26:f9:53:
         8b:9d:89:96:ba:ae:fc:2f:d3:82:51:ae:2f:72:ed:c2:a0:90:
         8b:7e:32:d0:d5:bb:7c:bf:08:ec:ed:8e:dc:c6:c6:0d:4c:1b:
         58:35:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:14 2024 by rpki-client on console-fra.rpki-client.org