Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/62617699-8701-3032-9b26-3d681f659d01.roa
File:                     62617699-8701-3032-9b26-3d681f659d01.roa (raw, json)
Hash identifier:          pGIWPHmYEoeeFShFYxMtVMidtRyXt+KsasUgWcjpkhA=
Subject key identifier:   3E:DF:37:6E:A8:49:0F:77:9D:7E:86:C2:FC:92:00:5F:C8:70:59:FF
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F43285847362B6247082BBB7D71CCF080
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/62617699-8701-3032-9b26-3d681f659d01.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     394136
IP address blocks:        66.170.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:62:47:08:2b:bb:7d:71:cc:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=23607789-8160-4694-9a85-1e86699d726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:b4:ef:94:d1:1d:67:e5:78:d0:4a:02:bc:
                    f0:41:65:45:19:57:d0:a2:2e:50:8b:11:84:5e:3d:
                    7d:bd:bb:14:fe:d7:b6:32:5a:a6:45:b3:2f:6a:5a:
                    7e:76:04:a9:b4:8f:5c:96:9a:4e:db:aa:a1:cc:90:
                    a4:95:66:09:a9:b4:8b:5e:36:04:17:c2:67:df:0b:
                    ec:19:2a:c1:2e:d1:1c:e7:81:42:47:d8:68:bc:64:
                    d4:13:35:fb:39:1d:a1:f7:80:b0:e2:aa:09:51:75:
                    75:e7:b5:9d:7a:e5:fd:1a:e1:25:4b:09:03:b5:95:
                    35:9d:7e:bb:5a:12:91:8f:96:9b:c2:03:ec:36:f2:
                    fc:61:64:c3:29:d3:14:63:fe:63:83:2a:09:81:2b:
                    6c:c8:32:83:90:d1:a5:81:91:67:d8:f2:15:45:4b:
                    41:f5:9d:db:82:45:84:2d:c2:a5:85:36:7c:94:b3:
                    3f:41:4a:9b:eb:f5:2f:62:0a:30:ed:01:79:e8:88:
                    39:65:2f:23:e1:2c:bf:4f:3b:9a:ff:b4:bf:15:07:
                    d9:65:f6:cb:44:e9:31:0f:a0:33:d6:af:92:1e:2c:
                    d4:80:86:fc:9c:4c:ec:2c:a8:8b:49:45:88:cf:06:
                    53:74:2d:fb:e2:1c:de:d6:96:ad:07:06:06:55:88:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DF:37:6E:A8:49:0F:77:9D:7E:86:C2:FC:92:00:5F:C8:70:59:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/62617699-8701-3032-9b26-3d681f659d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.170.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:00:20:1f:4d:6f:bd:1b:92:23:3a:bd:25:75:5d:fa:37:57:
         e0:f2:21:5d:aa:a3:20:a8:58:87:8f:4d:5f:81:96:90:b4:a2:
         d0:10:92:0e:bb:a6:ca:09:68:09:6c:9e:d5:e7:6a:cf:42:b4:
         2f:59:fa:eb:3f:23:10:47:21:2d:b4:ad:bf:8a:36:7c:64:f6:
         ae:64:4a:5a:c9:4d:f4:7c:2a:c3:63:06:a5:da:69:05:2b:70:
         eb:f3:87:07:dd:0b:c4:32:df:d0:d0:7c:de:82:37:06:ef:f3:
         b2:7b:f0:1d:83:a2:f1:b1:33:14:83:45:8c:2a:c9:8e:dc:14:
         dc:48:7e:6c:f3:6e:fa:89:c3:04:9a:8b:10:b0:22:fe:77:f5:
         63:8b:c6:15:3c:10:f6:b1:42:d2:0b:53:0c:37:21:35:c4:e1:
         f1:08:47:e4:c9:1a:81:9e:28:31:43:19:77:7d:2d:95:91:cf:
         56:bf:bb:38:66:6b:fa:5e:96:31:b7:74:f0:38:fa:7f:5b:1d:
         1c:b4:1c:af:42:37:e1:09:dc:f6:20:b8:91:6c:dc:4e:1b:e3:
         87:0f:be:88:e6:37:b6:f9:dd:e9:bd:53:33:ad:77:85:73:d7:
         90:fd:0c:39:13:4e:56:a3:61:ac:ea:80:ba:04:a5:f3:b9:84:
         0a:e4:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:34:19 2024 by rpki-client on console-fra.rpki-client.org