Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/9ebc6e19-6898-3425-96e8-436375d49903.roa
File:                     9ebc6e19-6898-3425-96e8-436375d49903.roa (raw, json)
Hash identifier:          S55XtW+OfNuPMx9P7haoS5Y01U1EVYHdX36IIuCVxZw=
Subject key identifier:   AA:AE:44:FA:08:8D:53:3F:B1:DE:15:B3:12:9B:40:89:04:C7:F3:CC
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F432858474DE5FEB1F018376C3EB3B3C0
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/9ebc6e19-6898-3425-96e8-436375d49903.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     23408
IP address blocks:        66.178.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:fe:b1:f0:18:37:6c:3e:b3:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=1d362870-fe09-4308-afe5-28581ed08345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:a0:ab:aa:1e:3c:d4:86:ec:83:fc:ac:5b:
                    8b:dc:0f:d0:08:68:cc:08:47:e6:b2:6f:d6:a9:0e:
                    f9:ba:20:c2:58:71:d6:a6:f5:34:aa:80:90:06:3b:
                    1d:50:c8:fa:38:19:72:01:b4:7f:10:c6:48:05:95:
                    55:8a:93:ce:3a:37:12:24:31:d5:16:50:bb:58:a8:
                    50:a4:11:eb:da:48:dd:58:d8:72:3c:3f:f6:23:6c:
                    80:6d:3f:58:ec:60:c2:25:0e:9e:d5:f0:05:bc:f0:
                    6e:d6:9c:51:35:52:15:b7:fe:c1:62:34:ed:76:fc:
                    9b:86:b6:42:2c:b0:5b:16:87:e3:a9:64:56:ab:de:
                    89:fd:de:fd:49:82:43:0c:7a:7f:13:c0:68:9f:a8:
                    ff:8d:d0:90:8f:86:d6:22:dc:24:51:14:9a:65:7c:
                    91:d3:a1:3d:04:35:fc:ae:97:fc:52:53:6d:af:77:
                    d2:60:b5:a8:f7:8b:20:66:2e:0a:d5:18:c2:20:b6:
                    1d:bc:41:2c:2e:84:39:2c:22:36:ee:0b:f0:08:50:
                    b1:48:cd:ba:20:56:02:9e:aa:18:3b:6a:da:9a:c4:
                    16:e5:91:52:8d:86:7d:8b:0a:88:a9:75:6c:c0:89:
                    65:d1:df:15:44:e5:10:98:d9:b7:b6:aa:80:e5:2f:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AE:44:FA:08:8D:53:3F:B1:DE:15:B3:12:9B:40:89:04:C7:F3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/9ebc6e19-6898-3425-96e8-436375d49903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:58:5a:b9:fd:b8:2f:3e:05:fd:2e:29:32:d4:8f:96:35:
         cb:35:05:be:40:68:3a:b9:b1:99:7b:23:ea:a6:d5:41:bb:4f:
         10:2c:f1:8f:e5:59:46:6e:7b:43:7d:c4:eb:98:37:24:fb:c2:
         26:f8:c8:01:cd:11:09:e3:0b:d4:28:9a:76:e4:8f:ba:31:2e:
         c5:ff:c7:74:72:db:28:dc:ed:43:b7:16:57:01:78:fa:13:a9:
         b3:50:d0:39:5f:72:0f:36:d0:43:80:bc:5b:57:97:5a:b5:46:
         41:be:c1:6d:8c:d6:10:5c:6b:a1:c9:4b:92:3e:05:74:36:2d:
         84:3b:2c:36:c7:f7:81:a5:e6:66:fe:56:31:0c:8b:ea:1d:bb:
         e4:2a:09:ff:be:7a:fb:7c:8b:d1:80:3b:34:62:98:2d:f8:ed:
         27:dd:9b:c8:67:df:8f:e7:5c:d6:49:2e:02:bd:81:7a:75:2d:
         fa:ef:cc:d2:34:97:d5:c3:33:fb:48:4a:f3:89:03:d6:fb:5c:
         2d:0a:25:e5:55:b5:32:75:92:45:4f:19:d8:be:cf:27:93:62:
         e9:d7:cf:8c:51:3c:32:36:a8:2a:e0:11:ee:78:48:1c:b6:fe:
         a8:f3:60:4a:b6:b7:36:31:7d:84:58:e3:c4:fa:58:f9:ee:da:
         55:05:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org