Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa
File:                     7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa (raw, json)
Hash identifier:          p9udAXwxvvB7+nSLsQcegYttKeW4Q6b9qG8dzUX6oP4=
Subject key identifier:   54:F6:3F:5B:9A:27:39:73:1B:F9:23:B4:F5:0C:E6:07:A2:08:CA:00
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285847AE36B85E01BABB13DBB59900
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     225
IP address blocks:        66.180.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b8:5e:01:ba:bb:13:db:b5:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=81c2c6a3-2a3e-4a39-9034-95cafecc9286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bf:9a:83:7d:77:a2:b0:d6:ea:a6:e9:d5:49:
                    41:77:d7:8a:6a:5b:f8:1f:3e:06:8c:a5:a1:dd:91:
                    e3:43:81:9a:c6:14:ed:43:d3:84:c3:c1:26:5f:0c:
                    bf:29:c2:9f:50:67:db:64:4e:87:6b:62:78:88:d0:
                    fa:ff:4c:bf:56:4c:e8:99:1b:e7:f6:28:3f:0a:c4:
                    68:bc:41:a0:da:f0:11:de:aa:ae:ad:c1:58:b3:3b:
                    e8:c3:fd:f5:c6:83:2c:c0:d0:e8:a4:dd:30:9c:bb:
                    0c:e0:6d:13:ea:4e:14:31:1f:e1:6c:8f:f5:df:ee:
                    f2:da:29:36:38:39:2e:da:84:a5:f3:ee:19:62:0e:
                    23:36:ae:32:2a:05:58:5e:c0:31:dc:c8:3e:d5:04:
                    e6:2e:ff:00:31:f3:de:1e:d6:c5:56:2f:78:2d:d2:
                    46:39:5a:1b:9d:b7:aa:d1:bf:32:1b:8a:1e:5f:db:
                    33:98:ba:eb:3c:4f:b7:97:99:34:13:1c:f5:37:cc:
                    fa:56:f7:31:c5:7c:78:09:3c:d1:60:52:8c:0b:8b:
                    d4:2a:6a:d8:f3:b6:ab:5b:3f:9e:57:5c:a9:e4:d6:
                    88:28:62:64:37:45:da:8c:e4:57:b9:0f:c3:c6:ae:
                    ca:cb:3c:2f:33:f0:46:de:2f:de:9c:f7:1f:a1:69:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F6:3F:5B:9A:27:39:73:1B:F9:23:B4:F5:0C:E6:07:A2:08:CA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/7e9ba20a-37fc-3ee2-87aa-2e27a2b18958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:24:3e:c6:e1:82:ce:ed:e0:24:d8:3b:f8:8e:6e:58:78:
         9b:bc:f4:52:68:8a:c4:96:57:d3:d1:d1:29:0f:a3:b8:3a:14:
         8d:2a:46:89:98:f8:0d:07:2a:b4:b6:34:50:43:84:d4:71:dc:
         25:eb:36:70:38:0a:39:94:0c:58:2f:06:a4:12:e3:e3:5b:69:
         bd:88:48:e1:06:d3:ed:70:76:17:16:af:a5:61:9d:bd:3f:6c:
         21:59:23:7f:1a:19:43:b4:3d:67:4c:90:8d:61:c6:3c:06:d9:
         56:0d:ac:b1:59:13:ac:39:33:03:3f:ad:40:0a:12:64:cc:8c:
         74:84:cc:aa:dd:2f:9f:af:af:bc:4b:cd:16:f1:2f:0c:e8:82:
         36:70:90:b3:77:33:88:22:97:d8:24:ac:5b:33:47:63:00:86:
         ac:a9:21:43:fb:55:4d:ba:6a:01:26:f8:4c:a3:d6:9e:72:45:
         7c:0f:51:8b:c2:88:ee:ff:a4:2a:e9:3f:49:79:a0:12:d8:ed:
         b9:a9:36:d0:4a:89:b2:dd:2e:95:45:ce:ca:73:cf:04:81:0d:
         28:bf:06:e1:45:3c:a8:4a:5c:8f:0f:44:ad:2b:87:a5:41:bc:
         73:88:b0:26:f7:5a:9f:19:4a:f2:90:25:62:be:a7:b7:78:dc:
         2f:f8:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:00 2024 by rpki-client on console-ams.rpki-client.org