Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa
File:                     632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa (raw, json)
Hash identifier:          h+D9lGIpNuTB/r83EZpr80W28YO74hKl7tLfPkwRc5E=
Subject key identifier:   4C:AF:00:D7:99:92:D4:65:D4:AC:72:96:A3:73:79:14:1B:9C:F2:44
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328584561286ADF0DFAADF813580EC0
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     33139
IP address blocks:        66.49.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:6a:df:0d:fa:ad:f8:13:58:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=ba21c575-00c5-4187-9f43-210f76b0853b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:e4:17:18:58:1b:6d:80:de:a2:eb:a7:a1:
                    13:ac:f8:27:3b:0a:fc:d0:8e:86:12:c7:2f:fa:be:
                    fc:70:ee:2e:ee:ba:d6:30:71:24:65:7a:a6:0f:87:
                    e1:ba:dd:ef:9f:a6:86:84:22:8c:83:70:75:9e:93:
                    56:10:dc:e1:4f:85:18:8b:aa:ca:ee:94:56:94:79:
                    80:bd:84:63:b1:62:d7:be:7c:a2:21:5e:3b:af:90:
                    20:7b:7f:21:b7:24:18:1d:2c:8f:69:5e:04:04:0e:
                    f9:4c:45:28:1d:35:ed:f4:0f:e3:69:92:50:3b:30:
                    87:32:b5:1f:05:30:b2:82:1c:fb:0a:01:85:cd:51:
                    3a:13:6f:55:a8:f1:a9:3e:60:cf:bd:3a:ee:3b:5a:
                    fe:a2:15:37:63:00:06:2b:f5:7a:35:e5:0d:ce:cc:
                    23:6b:36:81:b0:de:b1:2a:39:64:52:13:94:7e:f9:
                    ea:12:44:4d:f9:a5:56:50:27:d7:71:0c:10:d3:4e:
                    c8:6c:34:89:ec:26:2c:a6:ce:37:ea:34:6e:b0:28:
                    f5:d1:d9:e8:ad:35:59:cf:2e:c0:dc:28:64:e9:a2:
                    9d:b2:cc:8b:2d:5d:88:52:a7:d9:48:53:26:24:55:
                    ad:45:7a:ae:71:21:49:64:d5:4e:1a:85:8e:39:65:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AF:00:D7:99:92:D4:65:D4:AC:72:96:A3:73:79:14:1B:9C:F2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:54:5e:ca:90:fb:a7:18:ff:a4:2c:62:41:3d:ce:6a:6b:
         10:ee:53:96:82:c1:47:63:b3:56:67:e8:98:a4:95:6d:0d:39:
         93:46:62:a6:d0:2a:42:65:66:2e:ba:ca:83:e9:2e:60:fd:6c:
         da:74:a1:4b:8d:d7:2d:40:39:ee:62:5a:f2:f8:34:96:52:7c:
         d4:07:3b:8c:8c:36:ba:0e:13:61:5d:1b:ae:93:06:97:c8:32:
         2f:41:23:85:98:92:5b:fb:55:a3:f9:97:6b:63:80:bd:dc:0b:
         ef:0d:39:bf:3b:ca:34:d0:ff:f5:ca:5e:79:61:b1:fe:12:85:
         71:9a:41:4a:f3:11:63:e9:15:bc:39:54:84:6d:c7:07:a5:db:
         cf:e9:56:d1:d0:8b:26:fe:96:bb:fc:9d:78:6a:39:8b:32:96:
         7b:47:04:00:4b:ea:50:51:91:47:f3:0a:57:29:10:ef:3e:28:
         a9:63:a8:d5:95:e8:4c:02:5f:20:61:3e:45:6c:17:8f:52:7f:
         8d:3d:e3:71:35:51:0d:0f:9b:a6:d4:d9:fc:95:1e:32:01:a8:
         d8:44:b3:a4:02:11:05:0a:7d:e6:3c:0c:62:c3:13:2c:43:46:
         e0:c2:da:23:8c:8d:2a:f2:d9:9b:90:26:5f:fd:8a:e1:c3:2e:
         34:93:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:08:55 2024 by rpki-client on console-ams.rpki-client.org