Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
File:                     ba243f99-0c02-3caf-abae-a7672e161f0a.roa (raw, json)
Hash identifier:          JSNH5XjTJ0hNSf/bctQPkvQRxPMDstNWa4j7m9/o68o=
Subject key identifier:   34:7A:24:BC:D4:FC:CC:80:C4:AB:76:BF:E4:94:75:B4:D5:59:F7:30
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F432858481C9A7B1ADB27058B1A98D8B0
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     18875
IP address blocks:        64.66.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7b:1a:db:27:05:8b:1a:98:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=7674a85f-5af2-4a0c-9be6-107ef23edd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:23:7d:59:a1:3e:02:b8:11:11:06:25:2d:
                    8f:70:b6:78:3c:83:fa:99:19:79:7f:30:11:64:19:
                    84:de:0f:ec:18:79:57:3d:2e:99:02:e2:c3:fe:b3:
                    8f:23:67:80:b9:fe:28:41:12:c0:66:2c:c1:b1:70:
                    7c:7f:e2:3a:74:d3:86:5f:4a:76:de:1a:d2:13:34:
                    36:f8:85:83:e9:6e:12:58:b0:de:3a:f7:a8:9b:0a:
                    6d:ae:01:44:23:31:23:a1:54:81:84:25:13:1a:be:
                    17:1d:5b:4f:12:c4:75:94:52:78:c9:7b:0e:71:c4:
                    a5:ed:9e:b1:0a:96:ed:46:56:2d:37:02:18:be:ec:
                    eb:41:93:92:5f:bb:ff:0d:b5:0e:2e:40:c3:95:97:
                    dc:f0:97:cb:54:fa:39:d0:6c:6d:83:bc:83:23:f2:
                    ae:21:01:40:14:1b:2b:56:6e:19:70:91:73:c6:bc:
                    e7:ea:68:52:02:5b:24:33:a3:74:0a:b7:da:c1:9f:
                    cd:96:2a:87:48:92:d1:2b:64:1b:6e:7b:e7:fe:ed:
                    a6:b4:fa:7e:7a:11:71:f0:a4:1c:53:a8:7c:52:2a:
                    9b:a1:f1:9c:24:ff:72:cd:1b:b6:ed:ca:e0:46:6e:
                    ab:cd:75:e9:f1:22:5b:36:e0:9f:62:71:fb:c3:03:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7A:24:BC:D4:FC:CC:80:C4:AB:76:BF:E4:94:75:B4:D5:59:F7:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:e2:b3:67:e7:d0:c0:42:2b:46:85:c7:41:6b:a8:35:4e:
         4c:07:ee:56:a8:71:19:9b:3f:ff:9d:eb:ec:7a:37:a5:ed:30:
         28:53:59:f5:e3:36:3b:1b:f7:09:54:45:f7:72:f6:3d:06:9e:
         3d:7c:30:93:39:ea:6a:f0:08:60:a1:7c:b8:3a:a4:60:70:f2:
         47:aa:ec:d6:5a:d3:10:2b:9f:53:54:63:0a:79:80:f5:1c:ec:
         20:0f:b2:62:b9:c1:f8:c4:ce:9f:71:cf:d3:5e:3f:79:e5:61:
         28:84:e0:21:c4:c4:fe:7f:fd:c2:09:4f:ea:37:fc:d0:4a:12:
         26:6f:68:e0:9d:6e:43:d6:04:1e:eb:45:f5:00:a8:48:36:97:
         6d:2c:61:86:6c:22:15:3f:7b:fc:c6:07:f6:14:ae:e0:e8:05:
         87:55:1d:cc:0b:73:c7:13:5b:cd:1e:18:1f:31:61:ae:31:07:
         3a:5e:22:7b:78:7a:2a:e8:1d:c4:99:32:df:68:49:4b:0a:81:
         d9:4d:76:72:c0:94:6d:b9:43:bf:98:30:d3:a7:a1:30:3e:4b:
         c4:57:40:08:c0:e7:22:4a:6c:d6:09:2a:01:45:cd:9d:71:9b:
         94:b0:4f:10:96:d6:8c:37:41:7f:b7:4c:8d:08:3b:86:68:27:
         25:8c:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:50 2025 by rpki-client