Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/509046ec-d818-3b4b-98bb-72a8d1ccaaaf.roa
File:                     509046ec-d818-3b4b-98bb-72a8d1ccaaaf.roa (raw, json)
Hash identifier:          XUWyUQrqANivhx76fghkgAVSEXNGUYe82mzC9ALo+YQ=
Subject key identifier:   03:7B:13:85:34:ED:15:E6:B7:07:5E:35:A6:71:9F:78:E7:AC:82:C2
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F432858456128531A7D21D9668734C040
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/509046ec-d818-3b4b-98bb-72a8d1ccaaaf.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     11550
IP address blocks:        66.244.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:53:1a:7d:21:d9:66:87:34:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=e2584ac9-5916-45b0-9ac1-8ba661ce9e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:8c:e7:2e:ef:a2:48:f5:2c:03:88:f2:95:
                    e3:c1:77:3a:90:04:bf:27:60:07:0c:1d:8f:b0:8a:
                    97:3c:8f:0c:f9:11:73:a1:b4:d4:17:d9:03:8c:7e:
                    38:fe:c9:e4:07:ca:f8:ec:99:fc:a9:60:ab:57:e3:
                    d9:bd:4b:b7:ac:7f:62:2c:2c:8b:7a:dc:c4:a3:4d:
                    f9:5b:25:10:f2:4c:77:fc:b2:26:42:f4:05:1e:53:
                    99:bc:3e:41:20:1e:56:5f:76:e4:8f:18:e5:27:f3:
                    88:eb:de:5a:58:15:cc:6a:f9:88:7a:cb:5c:4d:a6:
                    69:39:bf:39:82:1a:dc:6a:0d:5a:64:f0:db:09:2b:
                    db:e0:7d:d4:5e:1d:b9:ab:b8:3d:30:14:d7:5f:dd:
                    96:65:ca:a8:61:24:d9:7b:ea:2b:44:cb:dc:2e:50:
                    79:14:cc:08:25:57:99:14:3a:6f:46:2c:15:2d:6d:
                    ad:33:a0:ad:ba:17:2c:74:ed:d6:ad:5e:b7:23:05:
                    d7:6b:90:95:f1:bb:2b:3c:59:1e:54:82:90:5f:27:
                    70:59:59:05:4c:6a:48:59:54:cc:2a:7a:c6:47:97:
                    bf:b3:7f:23:ee:47:8a:f8:9f:5d:3a:29:ad:a2:b7:
                    ee:3a:b6:b6:fa:94:3e:7e:da:76:24:da:d1:0a:7d:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7B:13:85:34:ED:15:E6:B7:07:5E:35:A6:71:9F:78:E7:AC:82:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/509046ec-d818-3b4b-98bb-72a8d1ccaaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:00:e4:52:8c:02:51:7c:2d:aa:1b:2f:b2:60:2a:95:13:
         a1:3d:b5:af:fc:1f:12:e2:c9:33:62:19:20:e8:22:77:ab:73:
         3f:37:36:b8:09:75:9e:00:c4:36:d3:99:b2:6b:1f:0a:3a:ce:
         5d:0d:83:6b:5a:87:45:93:46:06:9c:2e:1a:4e:6e:5b:6b:d9:
         c9:83:d7:10:78:12:fe:c0:a5:b0:78:82:ac:b1:97:cb:3f:fd:
         79:a3:00:b6:5d:fe:9f:32:f8:4e:50:5b:d1:3c:0b:f6:1d:e4:
         04:c4:da:9d:56:a6:21:c5:64:1e:4b:6d:b6:ea:3c:97:fa:5a:
         1a:0b:ff:2a:70:3d:bc:12:da:f9:81:05:c2:ec:ab:2f:56:8d:
         ad:c8:84:83:f0:28:f8:ce:bf:d0:70:e2:53:5d:31:bd:5d:54:
         5c:bb:7a:b4:35:eb:ba:11:86:43:58:73:77:c2:41:09:00:0e:
         da:ed:7a:1b:43:99:31:14:cd:49:9e:1c:d7:21:80:f8:ad:51:
         59:8b:29:40:a1:af:8b:13:39:c4:21:69:8a:3c:11:44:14:71:
         02:0f:cb:33:72:c4:63:1e:d0:72:a8:2e:d9:0c:d6:1e:13:fb:
         94:09:34:ae:fb:71:b9:96:de:6d:72:2c:a5:b8:f5:31:00:3b:
         b7:25:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:49:55 2024 by rpki-client on console-fra.rpki-client.org