Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/68cedb4f-f003-3595-9971-5323a5ad197a.roa
File:                     68cedb4f-f003-3595-9971-5323a5ad197a.roa (raw, json)
Hash identifier:          UbNvzUX0S+bNbslt/pDuI6ILIog1d9V8GwM7JIUQ9lk=
Subject key identifier:   89:22:0D:41:96:43:F8:2E:EF:06:92:84:CE:4B:C0:2F:CF:8A:27:84
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F432858474420AF8D27E9D81BB54F9F20
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/68cedb4f-f003-3595-9971-5323a5ad197a.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     13845
IP address blocks:        66.51.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:af:8d:27:e9:d8:1b:b5:4f:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=bc533656-aaee-4762-9af7-64c9a2c614b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:71:d8:1b:20:b5:fb:34:6b:9c:44:fc:7a:a1:
                    9c:b2:ce:17:a1:a1:72:5d:5e:77:ad:08:12:8f:99:
                    83:82:cc:d6:9b:4b:dc:1c:a0:ac:48:25:e0:23:da:
                    0c:6e:9a:be:b8:bb:70:6d:57:fe:89:b2:33:14:83:
                    96:9e:47:a5:be:86:b1:38:4f:cf:a3:dd:52:d9:ee:
                    1e:e8:4f:cc:e1:96:5c:da:e8:41:d7:2e:d1:c2:62:
                    54:36:7f:aa:73:d2:cc:68:53:da:dc:57:d9:a7:0b:
                    86:24:c7:ce:93:03:1c:64:72:c8:d1:97:e7:89:54:
                    01:53:b4:db:65:a8:d6:6a:fd:1d:f6:06:b8:a2:01:
                    f3:e6:70:80:58:9b:a1:54:c9:54:e4:ab:9b:7c:44:
                    46:e4:e5:75:2c:44:e4:2b:ed:ad:46:8d:ec:0f:23:
                    78:e7:d4:d8:0e:f5:7d:04:52:7d:22:c1:5b:a8:86:
                    24:84:3d:e2:f3:18:a2:f1:9f:72:ef:33:d1:bf:88:
                    86:bd:05:c0:ce:45:36:7a:d3:3f:62:aa:b4:17:4f:
                    9f:c7:6d:54:27:f2:53:49:49:ef:62:04:3d:fc:c6:
                    b6:90:97:de:17:3a:b5:c0:73:14:8e:8a:25:97:0b:
                    0f:9a:73:a9:47:76:88:df:ff:74:c8:e8:f3:6a:83:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:22:0D:41:96:43:F8:2E:EF:06:92:84:CE:4B:C0:2F:CF:8A:27:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/68cedb4f-f003-3595-9971-5323a5ad197a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:45:93:00:61:62:f5:77:e6:93:0a:67:78:37:aa:a3:b7:
         27:6b:d3:01:ea:36:15:6c:db:25:4e:0f:3e:e1:9c:cd:d5:1c:
         f3:39:ec:d3:0b:2a:38:80:9e:ea:a1:31:17:1a:c3:60:8f:00:
         d4:cf:d8:5b:bd:37:a4:a6:ac:e7:1e:d4:06:f3:6c:cc:b2:35:
         75:67:52:bb:d2:04:5e:1f:72:13:96:9a:40:6f:d5:81:41:1f:
         a3:3f:66:15:54:06:39:0a:12:33:cc:be:7f:37:e0:9a:81:c1:
         1e:41:91:0c:e1:08:7c:26:33:68:75:4d:ba:ff:a7:16:ae:b8:
         37:3c:cb:88:2f:84:e9:51:85:63:9c:a5:73:cf:dd:6d:ca:12:
         bc:04:13:0f:22:72:9e:58:af:30:6a:4f:a3:f0:af:bb:33:54:
         8e:cf:b2:2f:26:93:84:b0:f8:01:42:9a:e2:61:75:5d:43:9e:
         c7:54:09:00:c4:60:a4:2a:b0:c7:e3:8b:61:ab:55:ee:c9:5e:
         36:6c:30:c1:74:eb:79:c1:32:6b:90:95:4e:ad:63:c8:5f:69:
         d0:4a:94:0f:69:e2:86:f2:d1:42:76:8c:e5:ee:68:62:8d:83:
         a9:ea:26:8c:c5:4d:ef:e6:57:aa:79:4b:21:fe:2d:34:8b:a7:
         0f:2d:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:05 2024 by rpki-client on console-ams.rpki-client.org