Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
File:                     0de08070-992e-334f-8090-a4c3a88677f1.roa (raw, json)
Hash identifier:          /5jqkwuq7FL9W5iPMDc5YOVx3qcT36qPMYOeDGX7Pe8=
Subject key identifier:   2B:0E:B6:79:9D:3A:9E:E8:4C:E9:22:A5:09:18:97:D0:F4:0F:D8:16
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F432858473095EDB532C0A1DAED8A9370
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     30148
IP address blocks:        66.248.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ed:b5:32:c0:a1:da:ed:8a:93:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=606ccf9f-86ef-49aa-8b5d-519fd56a204e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:fd:22:9d:ee:72:76:bc:10:09:e9:7f:91:
                    5a:21:c1:25:fa:62:87:b1:06:97:0f:03:d4:5a:b5:
                    7d:24:50:31:80:ae:63:d6:48:b8:95:ae:81:9c:8f:
                    4a:71:30:fb:e1:12:ab:4c:7d:c4:46:69:77:40:14:
                    29:a7:f9:37:37:66:46:97:a9:3b:47:df:9d:71:82:
                    06:1b:b5:65:b4:98:bf:b7:a5:61:25:f9:60:b8:ff:
                    c9:32:c5:02:96:70:01:e1:df:7e:9e:94:6c:6d:66:
                    08:39:70:b4:ce:61:41:07:b5:5d:0c:50:41:6c:23:
                    1c:31:81:d6:58:2b:47:65:42:1a:71:d8:8e:d7:80:
                    f9:e8:17:f9:a2:b1:58:66:4b:a3:d6:59:c3:cc:27:
                    40:93:91:56:c3:c6:e7:d1:eb:96:97:bd:74:2d:c4:
                    73:75:bb:69:7b:d6:6c:af:78:fe:5e:23:09:03:24:
                    0b:a5:e9:1f:19:fa:83:1b:bd:f6:c6:f5:2f:ba:cb:
                    4a:29:87:7b:78:dc:7d:ff:ae:6a:62:98:af:8b:8d:
                    a6:52:9b:58:ff:ea:2f:80:48:d5:a1:ac:39:5a:58:
                    66:cd:e4:f7:f4:8f:2c:5f:a3:6c:30:c3:30:62:ee:
                    2f:c1:b3:ac:b1:5b:91:f9:ba:fe:99:62:e2:cf:ab:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0E:B6:79:9D:3A:9E:E8:4C:E9:22:A5:09:18:97:D0:F4:0F:D8:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/0de08070-992e-334f-8090-a4c3a88677f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7b:99:75:96:27:17:40:ec:52:fb:56:bd:45:6a:7f:87:ed:
         2b:9b:54:f8:48:71:e4:ec:6c:47:b6:d0:44:e8:d9:c2:c7:1c:
         5d:2a:d0:a6:cf:5e:79:b9:51:5b:50:d5:2e:20:33:c0:12:12:
         9e:9b:5f:6d:de:65:77:3b:18:a4:7e:5c:83:d1:b2:d9:d7:6e:
         49:6c:cf:fe:4b:cb:4f:c6:16:d2:1c:28:a3:20:1a:2c:3e:97:
         2c:0a:6d:a0:a8:f3:31:e3:41:e3:51:dd:de:e5:56:7d:08:76:
         24:5e:6b:38:01:c4:ba:63:cd:0a:85:be:fd:97:fc:8e:02:16:
         72:95:af:cb:3a:7c:e1:f6:e3:60:25:7d:8d:e9:cd:62:d2:07:
         54:0f:4c:b3:5c:67:9b:50:74:3e:62:43:59:ec:9d:78:ad:01:
         dd:55:c5:90:ae:54:d6:22:bb:bd:a9:93:ea:b3:f0:68:75:a7:
         24:f1:a3:9e:64:8d:1a:f2:10:25:a6:e0:af:f3:53:04:10:da:
         bc:b4:9b:f8:30:8a:97:f9:b7:e6:1c:dc:5b:3f:f0:61:da:86:
         88:59:1c:e6:a8:ac:1e:f9:9a:c1:79:97:1e:f7:6e:f1:dd:d3:
         fa:32:60:93:10:68:c4:58:92:ea:f2:94:51:ce:c3:f1:09:76:
         41:1d:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:16 2024 by rpki-client on console-fra.rpki-client.org