Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa
File:                     25e4f701-0c1c-336e-b2fc-6226317b20ab.roa (raw, json)
Hash identifier:          j4jlqrjfLY6LisqSpegPp95Lgs6wwxYQLSBY/RKHRA4=
Subject key identifier:   3A:D1:5E:30:6B:54:CF:B6:A9:6A:FF:2F:1F:D8:20:38:8E:8A:4D:4A
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858474F4B7B621197F75B5C9BB600
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     20303
IP address blocks:        66.43.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:7b:62:11:97:f7:5b:5c:9b:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=7411b29b-dc20-4f69-b57c-94b45914dd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:a8:b2:56:84:9e:ec:f6:e7:0a:34:93:7b:
                    55:bc:ba:e3:e3:1d:d8:6e:65:63:24:d2:99:e2:c9:
                    b0:8a:ab:0b:da:c3:48:65:54:ec:4f:58:e8:38:bf:
                    e0:ec:fc:e0:81:9f:3c:25:6f:d0:c1:6d:57:13:42:
                    52:ec:e9:b3:17:04:12:35:a2:93:eb:a6:78:f2:c8:
                    17:90:d7:7e:93:33:f5:06:b1:70:85:ca:d0:5f:76:
                    c2:9b:45:42:cf:f6:9c:f7:14:3f:2b:24:f3:bb:b3:
                    9b:b3:6e:2c:82:66:b2:37:25:f7:22:3e:7b:cf:a5:
                    e0:bf:d0:9f:78:c0:e6:f9:c4:f0:0f:c0:84:b8:3c:
                    fd:ec:a1:66:8e:b5:ee:83:b7:bd:5c:30:1e:c7:a5:
                    9d:e3:68:6d:e6:03:3a:7e:11:cc:6a:db:cf:6e:ce:
                    a9:ed:89:0a:82:3d:71:af:0f:1f:73:7b:12:4d:e4:
                    3c:26:2d:5a:a0:4f:f4:38:c9:40:ff:c4:8d:ac:17:
                    24:92:71:a3:b0:d6:02:08:12:9b:f3:ae:9b:c8:20:
                    62:d0:e7:ad:bf:24:ac:f6:77:b9:a0:37:84:21:15:
                    60:f0:81:f2:84:7d:76:16:06:44:d4:ea:4f:70:03:
                    d4:40:11:38:d7:4e:f3:83:35:ae:81:b5:a3:2f:f1:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D1:5E:30:6B:54:CF:B6:A9:6A:FF:2F:1F:D8:20:38:8E:8A:4D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/25e4f701-0c1c-336e-b2fc-6226317b20ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:60:ae:96:20:a0:ed:92:52:bf:cb:55:52:cc:fd:21:90:aa:
         b7:a7:6a:c7:50:07:09:57:8a:71:36:0b:19:6c:a3:5a:cd:32:
         10:af:18:31:7e:7c:81:b4:56:09:bb:2e:ea:e9:ca:da:2a:85:
         dc:10:5a:45:ae:6d:e0:1b:1f:23:77:94:65:85:c3:58:d7:21:
         76:85:24:0a:9c:35:be:3d:bd:6c:fd:5c:c5:b7:5b:13:54:b3:
         24:75:6e:b8:ae:de:58:5e:95:19:8a:ed:ad:35:1c:ca:9b:1c:
         a1:b9:ff:c6:65:04:c9:ca:78:f4:8c:62:2c:af:b1:25:5a:29:
         f7:2d:e5:ed:75:e9:1a:b6:88:17:11:0c:33:ad:e1:8b:5b:b6:
         d2:e0:be:7e:2f:d5:ae:66:b2:a5:69:73:fd:4e:72:7c:5f:fb:
         d9:aa:e5:83:8f:d4:a2:da:77:08:76:d5:f8:db:ea:88:aa:aa:
         0a:f9:cb:97:c6:43:4a:fa:a6:68:db:4e:9a:e4:b0:fe:1b:81:
         ae:2c:78:ef:29:08:81:00:e6:65:12:ed:ac:d0:f3:5b:08:d0:
         19:82:8b:23:e2:c9:8e:63:56:8d:c8:ea:ce:4e:f4:9b:58:1e:
         0c:db:f8:94:28:09:21:ba:a7:69:f6:3f:cf:32:0d:b3:55:d1:
         49:92:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org