Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa
File:                     da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa (raw, json)
Hash identifier:          F5flpcYosm3wdKVHgHuhZOSv8Hxe/BA2Owh41u2A47U=
Subject key identifier:   28:5F:9F:69:A9:D1:9E:7E:3D:5E:37:F8:C5:23:77:86:95:8F:FE:DE
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285847336096C8751534E25907FB00
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     394469
IP address blocks:        66.110.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:96:c8:75:15:34:e2:59:07:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=4ce71d70-fa93-46d7-a905-288c11fb1305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:c1:3d:ac:e8:44:2f:01:fa:e8:89:9a:de:
                    dc:47:fe:1f:03:96:0c:cc:d5:39:f5:91:20:8b:b4:
                    d5:0f:c5:c7:14:3f:2d:99:76:4d:cf:f0:33:ed:e5:
                    ab:dd:a6:31:0d:95:c1:1c:12:17:9b:f0:0b:60:97:
                    d7:f6:6c:e9:fc:f5:e1:37:e5:b9:6a:f4:cc:0d:ce:
                    d0:54:d0:92:99:15:1f:e2:30:9c:b4:00:5e:8e:72:
                    94:45:1d:32:6b:69:bd:b4:38:22:0b:67:40:75:00:
                    4a:70:9c:b6:ef:bf:78:6f:2f:0f:4e:1e:55:14:89:
                    ab:c8:6b:0c:c8:61:72:c2:65:53:8c:1e:fb:c1:e3:
                    af:f8:56:d5:60:48:5c:c4:2a:35:1f:31:0a:83:26:
                    e2:05:bd:77:b5:4a:53:05:71:49:cd:18:84:aa:10:
                    f5:d9:c8:d6:98:db:0d:4d:8f:86:12:52:cd:25:65:
                    19:ba:be:8c:26:c8:b7:2d:88:5e:d8:9d:2e:44:6d:
                    68:e4:95:d4:07:02:14:14:c8:58:30:2a:a0:a6:bd:
                    1c:a7:0e:2f:04:38:80:24:1c:87:5f:a3:dd:42:81:
                    d3:57:cc:8a:ea:6f:7b:c5:6e:17:be:57:d7:76:58:
                    46:6c:ad:64:9d:97:98:de:a5:de:9b:dd:e3:5f:bb:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5F:9F:69:A9:D1:9E:7E:3D:5E:37:F8:C5:23:77:86:95:8F:FE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/da8b29b9-1b17-39c3-a631-5c1cf38e1c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.110.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:cc:a9:0d:06:b4:f7:01:28:04:bd:24:e3:77:bd:82:2e:
         38:dc:c3:66:c2:90:79:8f:b2:d9:ab:a9:ec:8b:fb:76:67:ae:
         fd:fc:5c:bb:a4:9f:81:b3:c8:9d:c4:d1:3e:79:ce:2c:b0:62:
         2e:33:75:ff:be:14:fc:34:72:ac:e2:b6:e4:f5:a0:6a:2d:03:
         6d:9b:dd:2a:c4:99:cb:38:b6:55:71:86:11:fa:d8:8e:05:38:
         d1:6b:e7:3e:18:88:43:65:a3:aa:d9:b6:af:81:87:66:48:bc:
         af:e1:78:aa:9d:c4:e6:23:e5:2f:a5:30:78:49:98:b9:7f:e0:
         c4:60:93:42:f2:c3:ca:8d:6c:76:db:fd:4e:a5:5c:14:8e:45:
         b7:f7:44:49:c1:3f:f0:ab:52:73:c6:7e:75:b0:f6:af:4f:1e:
         ac:12:7d:4f:20:22:7b:b8:a3:4b:b1:ff:d8:6e:3b:cc:6f:fa:
         b3:f8:6e:2c:53:34:2a:02:38:5c:7b:90:76:04:58:56:c2:da:
         00:ea:ec:a5:fe:7f:56:c1:36:b6:07:9e:00:be:db:38:aa:92:
         1c:e3:e9:40:a1:76:17:a6:b0:74:c0:4e:10:70:ac:de:91:b1:
         88:cc:bf:1e:25:63:15:41:3d:63:06:0c:77:4e:66:2e:48:7d:
         ba:b9:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:42 2024 by rpki-client on console-fra.rpki-client.org