Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/97af6f1b-c4c1-394e-91f9-138ec4aa8a10.roa
File:                     97af6f1b-c4c1-394e-91f9-138ec4aa8a10.roa (raw, json)
Hash identifier:          xN1hfpkRkBL9l0JYALQyEe8CL6kmkVCpJ4SCaKN7zVc=
Subject key identifier:   9D:4D:C2:EB:CC:E5:11:E3:5A:00:50:4F:8F:D9:C9:10:F1:88:B5:83
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583CC400BEAB067D099A977E4380
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/97af6f1b-c4c1-394e-91f9-138ec4aa8a10.roa
Signing time:             Sun 30 Jan 2022 05:00:00 +0000
ROA not before:           Sun 30 Jan 2022 05:00:00 +0000
ROA not after:            Sun 23 Jan 2028 05:00:00 +0000
asID:                     19905
IP address blocks:        68.66.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c4:00:be:ab:06:7d:09:9a:97:7e:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jan 30 05:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2028 GMT
        Subject: CN=9ac69140-b05b-4e6d-978b-289ced9445f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:65:26:c3:45:6e:99:1d:ed:13:67:76:1b:
                    fb:99:a6:cb:26:93:be:fa:b6:80:d1:ff:28:3a:7b:
                    a3:9a:6a:87:3c:25:77:1e:d5:64:a2:47:e5:70:5c:
                    d8:80:8a:27:ec:5e:69:7a:fa:56:b1:19:c0:80:70:
                    02:06:9e:67:e7:60:3f:e6:80:52:2c:52:01:60:33:
                    8c:ea:ad:8e:c9:d4:a5:0c:fa:f8:56:10:e9:97:16:
                    49:66:ce:ef:8f:f8:af:5d:a0:be:71:4b:be:59:19:
                    b6:2d:7b:66:2f:37:b6:ab:22:8d:0c:03:ec:c1:16:
                    64:ee:6d:7f:c0:8d:d1:49:92:a1:53:d9:db:20:ae:
                    b4:3a:67:a5:4e:05:65:6e:a4:7e:6f:c4:40:19:f9:
                    71:78:d3:2b:69:75:87:73:67:8e:3c:e3:a6:a3:f8:
                    3d:64:73:f4:69:0e:41:b4:d7:ab:7b:01:f9:b4:f3:
                    1c:08:68:72:57:82:84:70:90:51:71:2a:e2:b3:ef:
                    82:d4:04:4d:b8:fe:56:e2:2e:76:ac:77:85:d9:6b:
                    e0:9f:cc:a9:29:9d:d6:f9:55:4f:22:5d:ef:dc:92:
                    c8:63:87:24:b0:e6:51:61:5e:c6:a0:8b:70:76:4d:
                    fa:31:02:e6:4e:2e:26:72:d8:59:a9:f2:fa:31:b5:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:C2:EB:CC:E5:11:E3:5A:00:50:4F:8F:D9:C9:10:F1:88:B5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/97af6f1b-c4c1-394e-91f9-138ec4aa8a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:da:b8:03:43:9d:9a:1c:cd:37:31:61:a2:28:19:ce:30:
         1d:57:b3:59:ce:72:b7:98:0a:b3:db:9c:89:76:ce:44:8a:fc:
         c4:3f:c2:a4:36:0b:22:57:7c:4e:9a:56:25:19:95:da:3c:4b:
         ca:04:40:4b:6d:f9:70:fc:84:02:aa:17:c7:34:b5:a3:3f:e2:
         e7:92:33:bd:27:31:3c:30:04:85:13:d9:a3:ae:3f:cd:39:ee:
         f4:7a:f2:2d:8b:0f:5c:a3:03:98:ef:6a:94:47:a8:d6:98:39:
         00:af:44:df:7c:50:f7:70:65:81:cb:93:92:b2:f6:3b:7b:7e:
         26:fb:34:91:f3:7c:d3:8f:7f:65:e5:ea:1a:1c:37:70:b0:c3:
         2a:79:3a:08:17:cf:67:60:5b:d2:1b:93:ce:45:f9:1b:42:d6:
         d9:74:06:19:ec:00:8a:c5:12:27:c6:97:8e:89:18:df:2d:d4:
         04:f9:3e:09:2c:d5:a3:d4:b1:bf:d9:49:d4:ab:19:e3:0a:41:
         17:c0:21:34:f9:9e:2a:6f:47:1e:1c:1f:bb:30:83:41:bb:11:
         d7:cf:59:4f:59:c6:bf:03:ec:53:d8:77:c1:f2:f4:29:85:1a:
         f9:69:32:56:bd:87:d9:87:13:33:da:8b:ab:22:c5:68:f4:87:
         19:82:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:04:08 2024 by rpki-client on console-fra.rpki-client.org