Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa
File:                     c7c3c608-5015-3d96-b863-386a0ca13f96.roa (raw, json)
Hash identifier:          34V3k9MauwBjauRZU/I2S4/hgQ4/QLtCAa+NluzglNo=
Subject key identifier:   32:C5:2F:44:81:ED:B7:AA:E2:F5:54:65:19:2E:15:08:E2:B3:20:C8
Certificate issuer:       /CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d
Certificate serial:       010D0C9F43285845ADEE01D31C7525F21B1B4600
Authority key identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        192.245.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:01:d3:1c:75:25:f2:1b:1b:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=c803d8b3-5d91-43dd-9c1f-758c89fb078a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:02:ac:cb:56:cc:54:37:f6:88:7f:40:a6:
                    f8:35:d4:f1:60:6c:b3:34:a1:79:54:de:da:93:d6:
                    fa:d9:6e:6d:d0:74:ed:90:5d:03:1f:07:be:c8:28:
                    75:dd:07:e2:82:83:0b:c7:f9:09:37:f9:e9:22:8e:
                    45:ba:ad:5a:ce:6d:30:74:ef:25:a3:dd:b3:99:9e:
                    61:b6:27:31:38:cc:83:1e:f5:4d:73:69:cc:81:c7:
                    db:7f:c7:ab:a2:96:61:0e:3f:02:22:4c:fd:22:26:
                    77:09:00:75:4f:4b:09:28:e4:74:6c:7a:b5:af:06:
                    bf:d7:6d:59:fc:86:f1:6e:66:a3:48:9f:07:4d:08:
                    17:ee:5b:7f:66:9d:2c:1f:ad:79:9b:24:5e:93:d5:
                    b2:af:ef:0a:f8:1f:83:3c:df:21:2f:a2:e2:f9:20:
                    96:75:16:48:87:8e:7c:6f:d4:67:1f:8e:ca:d2:06:
                    38:10:5b:9c:9b:8c:16:68:12:15:14:1c:85:ee:c2:
                    92:89:9a:16:da:e0:bc:2e:bd:f4:da:cf:5a:bd:b2:
                    c3:8d:db:4f:56:80:f5:dc:9d:10:d5:a8:f6:6c:74:
                    b8:c6:5e:3e:8a:fd:97:ce:68:83:a4:38:af:59:8a:
                    78:52:52:34:75:be:c7:f5:c8:c7:d2:41:db:3b:3e:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C5:2F:44:81:ED:B7:AA:E2:F5:54:65:19:2E:15:08:E2:B3:20:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl

            X509v3 Authority Key Identifier:
                keyid:92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:a3:0c:da:f5:9f:45:4b:43:24:19:d6:7a:d8:bd:bf:88:
         ad:6b:e5:9f:a0:69:b4:3a:48:ba:6d:e0:54:14:36:1f:9a:dd:
         46:b0:a0:66:13:60:50:43:a5:46:70:cd:11:2a:b1:a8:d3:26:
         32:97:bc:e4:0d:72:31:21:e7:30:9d:0a:76:4b:d4:f0:b2:86:
         fe:77:9b:94:a9:94:6e:b3:18:71:ff:47:d5:9c:4d:0d:6f:4b:
         c4:89:43:4b:59:a8:6e:3f:c5:09:78:5a:aa:e7:b5:39:eb:3d:
         c0:03:44:7b:cf:8f:8f:40:0e:56:19:69:d6:89:30:fc:dd:80:
         c9:e3:23:62:ad:54:3c:a2:89:b1:38:f8:7e:87:c1:fa:59:c0:
         3a:ed:86:d1:20:af:f1:57:05:c0:27:e8:fc:1e:a0:83:b5:b0:
         21:32:43:f6:0e:98:c6:90:0d:dc:0d:3a:ce:bb:b1:ad:fb:87:
         47:ac:b5:91:c8:f9:0e:73:ff:1f:f1:88:c5:77:3f:b6:1f:59:
         32:e9:0c:17:5d:87:91:66:56:90:f3:53:10:da:a6:35:d8:1d:
         8c:50:57:f4:f9:56:15:ca:05:b1:7e:7f:a6:ff:46:91:ba:a0:
         6c:1a:5c:23:1c:5d:62:c4:aa:0f:af:96:2c:e2:93:b6:ed:1a:
         00:30:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:35 2024 by rpki-client on console-ams.rpki-client.org