Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa
File:                     7a842816-3127-38d1-9d65-422d4458e42b.roa (raw, json)
Hash identifier:          L9Re3Sbtl5YHW52E7QbBraTFauab9DdkyZSPiV5BeXw=
Subject key identifier:   5C:5A:FD:53:4C:54:0C:98:7E:2C:7B:69:DE:CC:87:AF:F9:F1:1E:F4
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF7E33C42602D890FAE300
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        68.66.240.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7e:33:c4:26:02:d8:90:fa:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=1bc56737-a8e4-45c4-ae2c-570a7801c9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:7c:d8:5a:ce:5a:fc:88:4d:f3:cf:a2:40:
                    af:03:f4:1b:f0:cb:ad:58:f9:79:82:b6:59:e0:fd:
                    e7:25:02:3a:44:1c:b3:71:6f:24:09:6e:a1:69:d9:
                    9e:e9:c8:9c:12:55:cb:a3:3c:40:0a:d8:25:a0:a1:
                    50:99:5a:8b:3f:7d:54:0a:89:42:0d:50:04:f3:71:
                    3f:7b:09:ba:d8:a5:f8:90:f1:af:fc:4d:3a:21:e1:
                    2d:ce:bb:52:4d:56:47:32:dd:c0:ef:bb:12:68:26:
                    70:92:38:a6:d9:4b:6c:49:0b:c3:ec:2f:ac:64:b5:
                    3a:03:34:fe:21:c5:69:31:b0:73:5a:7c:7a:6c:97:
                    ab:42:f2:a1:db:b1:9f:df:a9:d9:2f:79:c4:b7:a9:
                    54:35:9d:2e:45:34:c2:6e:53:85:eb:f0:d2:a3:5d:
                    40:3c:c5:1a:bc:6b:09:f0:07:3a:e7:d3:ee:e9:fe:
                    f3:f8:ee:5d:60:74:c6:8d:ff:7a:a4:cd:79:d6:0e:
                    a7:c8:a5:e1:5f:e5:40:89:b8:3e:ba:e3:91:47:34:
                    af:0a:e2:f7:19:bd:a4:3d:56:31:ce:de:1a:af:cb:
                    df:2a:c3:bc:f2:4e:55:2e:ce:df:2e:dd:02:51:f1:
                    87:9c:e1:ed:dc:fd:c3:a9:3b:8e:8f:e2:23:02:25:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:FD:53:4C:54:0C:98:7E:2C:7B:69:DE:CC:87:AF:F9:F1:1E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7a842816-3127-38d1-9d65-422d4458e42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:27:8e:4b:30:8c:64:26:0d:e8:d9:e7:24:7f:ae:7b:ed:df:
         3b:14:43:a6:35:a3:69:8f:0a:93:a5:63:62:d8:11:57:66:d6:
         3f:c8:9b:c8:95:44:79:65:99:23:8f:73:02:c8:3d:cf:c7:5d:
         00:94:58:bb:79:d8:65:31:7c:09:f1:70:9e:cf:2d:23:9c:ea:
         cb:d6:41:7c:c7:5e:fd:6c:50:d3:91:09:ed:9e:89:52:a5:b8:
         74:2e:ef:96:18:6c:27:c8:54:30:ca:d7:49:d0:9f:08:d9:9b:
         0a:c4:0d:2b:8c:99:d5:70:57:09:9b:17:61:46:9c:6c:3a:e0:
         4c:90:8a:da:af:ad:90:b4:0b:39:8b:e9:f6:d7:8b:43:08:66:
         c8:23:f7:4f:74:da:79:e8:b0:34:96:14:0d:e5:2c:28:47:5c:
         95:2b:57:47:d6:be:06:63:99:25:68:52:14:f4:66:ae:d2:98:
         11:64:dc:f5:88:fc:a8:13:62:be:a4:11:3d:e1:49:11:ef:bb:
         07:bf:a3:90:4c:da:8f:86:98:23:1c:bc:bf:2c:1f:89:61:57:
         c6:32:ce:2f:a8:7e:3e:33:9a:73:1a:22:20:47:9a:24:78:7c:
         e4:c9:4c:18:c5:ed:3e:ac:df:d1:84:ed:5b:4b:78:ab:ca:70:
         57:cd:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org