Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa
File:                     66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa (raw, json)
Hash identifier:          SPITxhk+iY7IOZf8FHbaUCeHZiZUiloMekSZYWeXX7s=
Subject key identifier:   37:6E:3F:15:A8:7A:2A:02:35:03:2E:45:97:EB:C5:2A:38:AA:18:CF
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F432858457A48735C39BBAFDF6BC0DB40
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        162.253.4.0/24 maxlen: 24
                          162.253.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:73:5c:39:bb:af:df:6b:c0:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=2611df8e-6f7c-42c9-99a0-448d0b72b8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:2e:d9:8f:fa:13:55:95:1e:b8:1e:9f:cd:
                    5e:22:2c:28:89:48:e5:a7:80:0f:90:ea:a5:95:41:
                    fe:c2:a4:40:cb:70:03:58:88:fe:9f:eb:27:7a:b8:
                    a7:36:56:3d:a0:02:5d:cb:91:6c:1b:91:fd:00:a7:
                    1d:bf:b8:a0:fb:55:37:7b:2b:35:35:f9:8a:6b:a7:
                    3f:ae:cf:4f:6d:91:f6:41:a3:ad:20:97:fd:18:81:
                    e5:1f:5f:ab:3f:22:70:9d:5b:d6:89:c8:ae:ff:e3:
                    c5:ab:e6:a2:d2:bd:84:a5:f0:ab:33:26:d7:e9:f8:
                    7b:72:7c:2f:de:11:f8:04:0d:05:ac:f5:1f:f7:b3:
                    9f:03:bc:03:c8:1e:48:6b:80:a2:7a:be:65:0c:c8:
                    fa:77:d3:dd:35:82:f1:4f:02:ce:69:cf:8a:46:8c:
                    e0:03:27:fa:97:b1:81:d0:b0:63:91:53:f2:f3:4d:
                    99:f8:22:47:49:64:63:d2:a0:e1:b1:01:19:fe:7f:
                    15:1f:16:5e:c1:8a:e3:ef:e7:bb:19:74:5a:ee:11:
                    ba:14:92:82:60:59:70:d8:5a:b1:61:a2:86:79:b3:
                    b5:ae:eb:d0:dd:0d:80:53:9f:87:00:3c:25:51:ea:
                    01:9a:b0:77:62:66:d0:f7:57:7b:eb:ed:e8:60:75:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6E:3F:15:A8:7A:2A:02:35:03:2E:45:97:EB:C5:2A:38:AA:18:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.3.0-162.253.4.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9b:97:e5:82:fe:f4:01:9f:24:58:33:46:8b:7a:a2:f9:f6:
         ad:59:dc:ed:55:36:38:2c:f8:37:5c:3c:01:50:98:d0:0c:08:
         19:34:af:f6:8d:b2:ac:ce:44:03:41:2d:12:7d:e2:fa:9f:c0:
         aa:71:7b:76:b4:95:ad:8b:ef:05:16:59:20:0e:2a:71:5e:3d:
         0b:4b:88:e7:d0:42:20:dd:3f:3a:81:eb:32:27:97:0b:e0:72:
         ee:c7:f4:2a:98:d7:2a:ce:43:e8:38:1e:91:9b:07:1c:77:78:
         6a:08:f3:b6:98:1b:4c:66:bf:2a:a6:ac:47:0b:69:bf:a6:7d:
         1d:fe:96:85:9a:16:79:ea:20:91:e9:b6:86:d4:61:95:ff:ac:
         33:a2:9b:18:04:21:4d:b3:18:37:be:1c:b9:5a:76:de:95:c5:
         82:29:76:01:6a:3a:f1:22:2e:c8:f6:01:31:e7:f0:fa:5f:92:
         c3:82:7c:b4:61:8d:e8:6b:29:38:a8:7f:97:a6:e8:a0:cd:ab:
         f9:05:ae:c8:02:01:ae:96:02:6f:33:72:c4:16:9c:d2:e0:02:
         ea:e4:cf:45:42:d7:86:21:e7:df:5b:7b:d4:8e:0f:3b:b4:f1:
         de:7b:29:2e:bc:32:c0:9d:e3:a1:07:35:1a:44:da:b7:12:69:
         6e:67:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:26:48 2024 by rpki-client on console-fra.rpki-client.org