Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c06a4b93-988f-3329-87a7-35faf57c4e79.roa
File:                     c06a4b93-988f-3329-87a7-35faf57c4e79.roa (raw, json)
Hash identifier:          2r/ox/vXw2zJPKseuCXMY9daAaf1EAKmwt6j+XoDzMg=
Subject key identifier:   50:1A:8C:9A:FC:D1:F9:82:14:41:8E:09:AB:7F:B9:9E:8A:A5:B0:6C
Certificate issuer:       /CN=c66eadbc-5490-4fb5-ab87-936c9491420a
Certificate serial:       010D0C9F43285847213B249DBA7819952E84B840
Authority key identifier: 4E:55:A4:53:C4:4B:D7:A1:F3:50:82:A4:32:56:98:2A:B9:01:EE:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c06a4b93-988f-3329-87a7-35faf57c4e79.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     132335
IP address blocks:        104.255.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c66eadbc-5490-4fb5-ab87-936c9491420a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c66eadbc-5490-4fb5-ab87-936c9491420a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:24:9d:ba:78:19:95:2e:84:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66eadbc-5490-4fb5-ab87-936c9491420a
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=68f52292-4fc9-42b0-ade8-2d0fc9741b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:61:6f:85:d4:92:fd:52:6a:8a:5c:3b:92:
                    42:5a:e7:44:c4:f3:1f:ef:10:44:45:3e:76:0a:b1:
                    e4:58:9d:76:19:9f:89:35:ed:95:8e:51:a1:33:ec:
                    8c:cf:11:c9:25:f3:a3:c8:27:de:08:11:60:00:ce:
                    0d:eb:60:bb:8d:de:85:b7:06:d1:13:ef:c3:25:f4:
                    91:04:4a:92:23:2c:68:e0:02:7e:bb:9a:4c:7a:1c:
                    e5:fd:f7:35:e6:ad:0a:3e:22:ce:3b:83:28:97:93:
                    92:fa:40:35:d1:6a:b8:97:bd:5f:d0:48:ba:4e:75:
                    7b:85:03:88:99:1c:5b:d0:a6:59:11:50:4e:0c:82:
                    bd:d1:57:1e:c3:cd:c5:22:9e:2c:d6:65:96:e4:af:
                    da:f8:b9:64:15:99:ad:9a:fe:bc:a6:01:bc:fe:e2:
                    be:c8:21:28:2b:bc:4b:c7:09:e9:8c:05:8d:74:41:
                    46:db:c7:ef:c8:08:92:8d:33:36:d1:c7:11:9d:13:
                    b3:7c:d0:f0:13:3d:21:91:aa:1e:7d:cd:0c:f4:63:
                    e6:dd:d2:ba:25:3b:0d:b8:77:c8:c0:5c:7d:d6:65:
                    09:bb:0e:b1:d8:d7:57:19:20:d9:c0:6d:b3:3d:08:
                    e6:11:b0:78:d8:df:7c:9d:16:44:b0:e8:97:f3:fe:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1A:8C:9A:FC:D1:F9:82:14:41:8E:09:AB:7F:B9:9E:8A:A5:B0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c06a4b93-988f-3329-87a7-35faf57c4e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c66eadbc-5490-4fb5-ab87-936c9491420a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:55:A4:53:C4:4B:D7:A1:F3:50:82:A4:32:56:98:2A:B9:01:EE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:d7:00:52:d9:5d:82:9c:9b:d2:71:9a:f1:e3:16:b7:aa:
         89:a9:9e:71:77:b9:53:4e:90:0a:de:de:72:fe:b4:78:4c:1d:
         56:3a:9d:e2:7d:89:06:d3:2d:3a:71:8c:aa:c5:76:88:1f:6d:
         5f:4e:fd:03:19:13:f2:c8:92:fe:25:c4:a1:55:02:ce:1b:07:
         15:60:97:84:b0:10:47:cd:9b:ab:23:c9:25:0f:5d:c6:f5:6b:
         6d:c0:34:7d:8c:37:4a:61:f9:d2:02:53:e8:3d:d4:ce:e1:c0:
         ed:75:28:d6:db:2d:35:e8:cb:c3:2b:28:f3:f3:5f:c9:7c:8c:
         14:35:57:58:5d:1f:02:ad:40:63:14:ed:76:85:7e:b5:2e:8c:
         d1:0f:1a:40:9b:c1:c2:07:f0:ab:92:21:6a:0c:68:26:6d:e2:
         43:10:05:44:e7:ac:b6:df:f6:49:bd:74:7b:10:c7:00:b4:26:
         c9:50:2c:86:80:1c:08:7a:44:e9:ff:c7:2b:4a:3c:73:f2:86:
         9f:2f:ba:a1:d0:2c:4e:ec:a9:7d:3b:e9:5b:07:6d:8d:29:c9:
         e7:b2:53:77:3b:15:6d:f4:79:0c:e4:96:f0:52:24:ba:3f:69:
         c7:ef:af:e7:d4:a8:74:21:78:d7:56:d4:17:1c:d0:50:fa:ca:
         2e:23:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org