Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/df4aa3f2-8050-3462-82bb-4eba1152bc33.roa
File:                     df4aa3f2-8050-3462-82bb-4eba1152bc33.roa (raw, json)
Hash identifier:          NnPWyZ2Sh365FudZHfijzY2W0Tgy0BDlmJSvyhAbSCQ=
Subject key identifier:   8B:A2:49:04:A2:99:27:7E:B1:8B:F3:1F:65:F5:F6:85:1B:79:07:B0
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584589A318621A0B812B0AFE2560
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/df4aa3f2-8050-3462-82bb-4eba1152bc33.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     14618
IP address blocks:        66.178.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:18:62:1a:0b:81:2b:0a:fe:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=3cb4c7cc-7cb2-4e23-9720-6c40db922646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:c7:03:35:94:af:49:3b:99:43:71:c9:a2:
                    f4:16:69:17:7b:ee:4c:ac:36:a6:f6:59:81:65:76:
                    9f:b4:9a:71:4e:64:fe:f5:7e:24:14:ce:54:19:ad:
                    51:12:73:db:c3:3a:8d:01:56:fb:62:17:46:02:77:
                    99:f8:26:bf:90:df:10:18:40:66:48:99:41:2b:61:
                    af:9b:8a:aa:bf:be:dc:34:cf:0c:d9:ff:a3:46:a6:
                    da:f4:60:36:ec:3a:f8:fa:c7:f9:e9:cf:69:ae:97:
                    b0:5d:84:b4:17:17:f6:38:c3:68:a3:0d:39:ee:dd:
                    a4:4b:6f:f4:ad:f1:8a:01:f2:2a:3a:ac:80:33:bc:
                    c9:e0:18:d1:c1:d6:1d:2e:88:ac:ea:a1:e0:ed:04:
                    54:85:57:ad:3c:c7:03:93:43:75:d5:7c:47:4f:b5:
                    3c:a4:cc:46:21:10:4f:a2:b4:f1:49:10:1b:56:fe:
                    12:c0:40:ef:1b:4e:b0:d2:ef:ed:93:d1:76:63:ee:
                    8b:f1:ff:c0:13:e9:94:f4:a7:bf:ae:85:58:ca:18:
                    8a:d2:29:80:a7:10:b3:6a:35:07:e9:6a:ae:9e:a0:
                    bd:6c:08:d4:f6:fe:8c:b1:30:ef:72:0f:44:12:45:
                    00:61:53:b6:3c:2f:ca:be:b1:92:c2:52:a0:c3:cd:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A2:49:04:A2:99:27:7E:B1:8B:F3:1F:65:F5:F6:85:1B:79:07:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/df4aa3f2-8050-3462-82bb-4eba1152bc33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:7b:f1:a9:c0:39:6a:ec:98:38:ae:3c:d7:a9:77:40:1a:47:
         54:5e:e1:4f:34:2e:69:c0:99:36:18:41:5a:48:92:33:40:46:
         f3:0e:29:87:43:54:0d:35:87:6c:37:39:63:de:25:01:b8:8d:
         32:cb:f9:09:23:45:2f:bb:ad:80:4c:2f:bc:3e:e9:98:4b:c1:
         15:70:2d:e2:02:c1:13:16:04:c8:7e:8f:e2:75:7d:26:fa:95:
         a5:73:8c:e5:cf:07:4b:d1:3a:cc:56:85:72:17:75:47:73:cd:
         b0:10:43:ac:23:35:55:d9:b3:2f:84:64:45:23:3d:c3:ac:0f:
         1e:15:8e:c4:fc:29:28:1f:c6:61:f1:7b:73:0b:9a:a4:77:24:
         3f:29:83:e4:0d:72:e0:54:ea:95:e5:74:f4:52:e4:aa:08:6f:
         f5:54:33:9d:6f:60:d3:72:99:92:32:3c:00:44:71:80:70:d5:
         49:1d:92:b4:4f:2d:fa:09:ca:f9:49:87:f2:48:86:ff:8d:94:
         ff:00:70:d3:6b:ce:9d:ec:f8:a2:51:8e:ef:f4:81:74:04:41:
         15:7b:25:27:ff:ba:47:80:d1:83:65:20:a0:91:05:de:c2:a6:
         3e:ef:51:2f:c5:cf:80:64:7f:f5:70:40:7c:57:72:25:ec:63:
         c4:49:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:26 2024 by rpki-client on console-fra.rpki-client.org