Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/49b784b5-15d5-3b01-933c-382b5933ced7.roa
File:                     49b784b5-15d5-3b01-933c-382b5933ced7.roa (raw, json)
Hash identifier:          AyTNFoJZEQNuoLDjduxh41WZNH5AM1X8odkj+NoGoY0=
Subject key identifier:   85:30:E7:F2:82:BB:9C:72:7A:56:F8:0E:43:CB:4E:D1:BD:49:EB:EB
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F432858458B0888183C1FEE08E48C8C40
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/49b784b5-15d5-3b01-933c-382b5933ced7.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        66.129.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:88:18:3c:1f:ee:08:e4:8c:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=ec9bf0c4-1157-4e61-8e92-d1b59111d05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dc:a6:ef:5b:81:22:8b:c7:6f:ca:f0:18:a1:
                    29:2e:46:aa:8d:d9:2c:a6:ea:26:f9:5c:ff:7c:a2:
                    25:59:5a:81:b1:13:4c:5f:e6:aa:c9:e9:ac:79:17:
                    32:23:8a:05:76:c3:10:9f:27:1d:b0:81:ad:66:31:
                    34:2a:3c:41:b0:cb:c8:f1:a3:89:bc:ef:7a:dd:47:
                    51:e0:e5:15:25:62:79:a0:76:de:d0:b3:33:2f:ae:
                    ec:f0:e4:15:3b:51:41:c8:06:38:16:3c:56:34:47:
                    82:76:34:c9:75:d1:f7:0c:a7:1d:3d:2a:49:70:9c:
                    76:df:bb:39:cd:a1:08:d8:9e:01:3d:e8:60:37:4b:
                    70:d3:e0:fc:99:34:b8:b1:51:ca:a6:59:62:f5:07:
                    64:47:40:36:3d:fe:40:9a:a7:c1:67:51:04:bc:db:
                    86:3e:33:50:58:72:6d:d5:06:72:6e:d8:0b:9d:91:
                    75:39:8c:01:60:48:d3:e8:09:12:9f:45:db:f8:f9:
                    38:dc:38:47:8d:cd:b9:55:27:dc:c4:8c:d2:0f:b0:
                    6b:ca:1c:90:53:5f:a3:34:bb:18:25:88:af:34:aa:
                    60:53:ab:ce:dd:12:b2:59:b4:93:a4:6a:da:d0:8e:
                    98:c2:27:c0:29:57:d7:10:65:76:59:cc:57:18:7a:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:30:E7:F2:82:BB:9C:72:7A:56:F8:0E:43:CB:4E:D1:BD:49:EB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/49b784b5-15d5-3b01-933c-382b5933ced7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:73:ea:b1:82:c7:42:d5:c0:2e:81:fb:59:12:db:a5:89:26:
         0a:a9:8f:f1:f0:b4:6d:53:60:d9:cb:a9:5a:f2:09:29:57:93:
         4c:84:9f:3f:46:b0:5c:30:a7:04:f9:2b:bf:1e:9b:e5:95:79:
         9b:80:14:1e:06:f1:12:1a:d3:dd:28:6d:d6:88:bb:f2:50:f9:
         6d:95:4e:94:8e:f5:9c:c9:ad:1a:cf:41:8e:ea:9d:1b:10:ad:
         cd:2a:a7:2e:a9:b5:85:09:29:eb:a3:c8:68:28:e6:3c:87:56:
         1b:14:7e:07:cd:f2:11:86:88:8b:4c:cb:e8:d6:66:6f:cc:13:
         f0:a5:df:38:37:5c:45:f9:df:a1:36:7e:a7:ce:16:26:df:0d:
         0f:9b:82:74:3f:b3:78:7b:17:2e:aa:f4:fd:ca:0c:fc:41:75:
         27:32:20:66:06:70:b1:b0:d8:1e:60:ee:df:99:64:2f:49:85:
         e6:2e:9b:b4:2d:e5:9d:4b:4b:7d:4e:37:e2:b7:17:92:40:96:
         20:50:84:f8:51:ac:a3:b1:28:bb:d2:3f:82:7b:1c:b1:53:e4:
         bf:fe:63:18:70:31:d1:9d:62:47:47:7b:92:1c:d5:d5:ec:01:
         91:e3:65:4f:94:71:2b:8d:91:9a:f7:cf:e2:c8:a7:5a:56:b5:
         9c:f5:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:44 2024 by rpki-client on console-ams.rpki-client.org