Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa
File:                     1f997c12-50db-3e69-8eeb-5a9137c21344.roa (raw, json)
Hash identifier:          hUpgCTneewANlhZy4F0M/x47BHmoITopQ8WDY/Odvho=
Subject key identifier:   7B:A1:20:CB:0B:A6:AD:F4:8B:F3:28:1A:DA:80:01:7A:72:C0:68:9B
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F432858481C9A820F1D3DE510209D9090
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     18875
IP address blocks:        66.97.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:82:0f:1d:3d:e5:10:20:9d:90:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=998b6d4e-2ee3-45a0-8e96-0a06f212dca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:77:ce:20:8e:a0:be:e7:14:0e:80:35:66:
                    c0:a3:37:91:5f:f3:b4:cb:76:d2:48:18:d5:bd:f9:
                    6b:98:f3:5a:94:e5:6f:f4:d1:d0:85:33:ae:82:3c:
                    87:84:2a:fb:5d:3a:0a:f3:86:87:f6:e5:b9:60:60:
                    f6:16:d0:da:fa:42:17:a6:a4:e1:ca:76:78:31:e8:
                    9e:25:f5:db:46:f0:bd:18:1c:a2:48:c8:f7:43:29:
                    6e:fa:3d:a3:1f:d8:a5:61:f3:e7:9d:f5:86:7a:79:
                    bb:ad:d3:d8:7c:7c:a4:ca:82:32:c5:47:4c:c8:d6:
                    32:32:48:1a:b3:48:13:5c:1e:90:46:89:b1:9c:93:
                    4a:43:1a:aa:14:e9:e0:69:4a:b4:9f:ef:53:81:23:
                    68:b5:90:87:05:8d:af:4f:63:e9:6f:3f:01:87:6e:
                    3d:cf:83:84:87:34:b8:36:1b:e0:f0:81:da:a1:9a:
                    01:18:4f:30:42:1d:7b:80:26:dc:bb:ac:ce:32:32:
                    91:8e:ef:fb:0b:f0:93:66:0a:6b:fe:8a:5e:8c:d6:
                    07:6b:d4:da:78:77:d6:8e:56:81:37:a1:90:c0:72:
                    c9:c1:3b:0c:f1:b0:46:1c:19:db:51:48:1f:43:5f:
                    3e:ed:a3:48:0f:68:46:25:12:08:6a:73:f8:d5:06:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A1:20:CB:0B:A6:AD:F4:8B:F3:28:1A:DA:80:01:7A:72:C0:68:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/1f997c12-50db-3e69-8eeb-5a9137c21344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:20:1a:2d:c3:e9:47:0a:a4:7f:a2:f1:7f:b8:27:56:6e:cf:
         88:03:2d:5a:fe:c3:2e:76:6f:f3:97:81:27:63:25:78:61:c7:
         af:e3:a1:54:03:7e:ce:cd:f3:16:5a:53:5b:7f:34:ec:1e:da:
         0d:74:e1:57:d9:6c:79:32:53:1b:24:88:da:e9:e3:f2:a4:f5:
         60:62:31:70:ca:43:70:8e:90:69:89:c1:60:19:0f:85:cc:32:
         d9:38:76:1e:84:fa:ec:6d:58:8c:04:50:68:66:aa:86:2b:f7:
         dd:67:c3:30:d6:a3:38:da:8f:32:4d:cf:96:73:66:d0:b0:d4:
         5d:f5:ab:f6:ea:c3:f1:f8:59:4e:ab:83:89:15:25:7b:e3:4c:
         27:45:7f:20:8b:64:44:1b:aa:2f:47:76:25:36:68:f0:20:d8:
         b4:96:9f:30:1a:69:d6:ef:cf:b7:a1:85:34:52:8f:22:f1:f7:
         8c:52:f0:20:ad:0b:1f:99:17:80:cd:a3:73:73:e4:c7:ea:4a:
         8e:85:03:cd:d1:ec:bd:cf:ae:fb:ef:e7:25:3c:63:cb:f6:d5:
         ae:d5:1d:c4:19:fb:c1:9e:45:2c:a5:02:f7:ee:b2:9c:8d:a4:
         60:13:67:e6:62:5e:a3:b2:65:5e:73:48:17:85:ba:31:b7:b9:
         65:2c:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:15 2025 by rpki-client