Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
File:                     541af175-265a-3096-8295-96504805d06d.roa (raw, json)
Hash identifier:          gMGfqk1mTZV+JD5b1QIR6rs/1Xp8uLuWTgvLL1nxKv0=
Subject key identifier:   C7:F7:06:8A:4E:28:8A:A0:6E:83:CA:7C:26:79:33:B2:7B:D5:D6:4E
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584726D08B16C634F3CCF94D6600
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     62537
IP address blocks:        66.85.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8b:16:c6:34:f3:cc:f9:4d:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=d9bfd108-9570-4ac3-a07f-f994ad565268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:30:6a:ad:f0:cc:fb:ca:d0:e8:c0:50:3a:d0:
                    05:07:01:f6:ae:03:ff:3d:2d:4a:46:19:19:49:e0:
                    16:b2:73:a3:f6:b9:e8:2b:b0:1e:d7:51:1c:8f:a2:
                    18:96:96:ad:96:0f:e9:d5:5c:6c:e7:b0:ea:8a:30:
                    54:6c:34:b1:16:ec:92:39:60:97:f7:3b:bc:75:17:
                    bd:71:50:97:97:89:cb:2a:36:42:fb:b5:e3:ff:bb:
                    fb:d8:3d:78:62:c8:ea:25:e2:ad:b3:cc:40:3f:4d:
                    d3:d9:4e:13:fe:6e:93:96:93:42:34:d6:ec:f3:a9:
                    a5:d6:46:b6:31:95:b7:18:ec:f8:74:83:bf:a0:65:
                    9a:14:9c:8e:95:49:74:98:82:57:e2:5b:09:e2:a8:
                    7f:eb:e1:9c:25:90:cc:b1:23:ed:bf:d2:10:84:b5:
                    3e:7e:1c:e2:63:02:e9:a6:47:fb:47:ba:46:e2:00:
                    b0:27:32:6c:0b:77:2f:55:64:80:39:3f:d3:4d:e9:
                    74:b1:e9:fe:41:2d:66:d4:df:27:6a:33:66:8f:61:
                    75:47:ee:e3:0c:22:50:bc:64:3f:31:80:8a:8d:c8:
                    b5:e9:83:94:f7:bd:26:c2:ab:ae:60:01:a4:b3:26:
                    45:69:46:4a:90:89:74:7f:8e:51:e9:82:92:8f:a7:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F7:06:8A:4E:28:8A:A0:6E:83:CA:7C:26:79:33:B2:7B:D5:D6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/541af175-265a-3096-8295-96504805d06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:e1:49:44:0d:25:eb:bf:f9:c9:78:51:24:ca:e9:bd:48:
         cd:e2:1d:83:5b:62:e9:9c:77:28:f1:dd:d7:bd:1f:ea:27:f8:
         de:3e:23:ae:f9:f8:c9:4c:32:24:71:d7:20:e7:94:bf:a1:49:
         d1:b5:19:e8:d0:ca:95:92:33:1f:9c:6b:53:1d:11:58:12:18:
         d4:fb:d8:fd:5c:4c:cd:da:94:27:ab:80:94:fd:ca:9b:ab:7c:
         12:a4:f4:84:47:49:fd:96:d9:bd:4a:2f:9d:dd:f2:7c:a1:2c:
         21:00:41:be:1b:39:5e:66:63:a7:b6:b6:12:46:c3:a5:ea:45:
         44:ed:bb:ee:16:51:d2:9d:c8:3b:57:67:58:42:1b:3b:b9:9a:
         f1:33:c1:bd:83:b5:5f:31:2b:bc:91:bd:11:3d:17:5d:ac:d1:
         04:05:62:a6:c6:af:b9:01:e4:c6:ea:b9:5b:bb:ff:c7:e0:56:
         72:53:55:9b:bc:b6:48:8f:12:b9:ab:89:0c:ad:f4:d4:fa:22:
         eb:85:4f:8d:61:84:be:33:6c:ae:bc:da:41:ab:ce:97:95:b6:
         3d:95:24:10:f5:40:a9:c1:3e:c1:70:ac:a6:a2:6f:88:13:df:
         9f:77:47:e7:c0:11:a6:fd:07:3d:f6:2f:f2:a5:a1:ad:98:dc:
         27:8a:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:51 2024 by rpki-client on console-fra.rpki-client.org