Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa
File:                     f3b94909-4a1a-378f-8207-e0c0e8315af3.roa (raw, json)
Hash identifier:          CSyrsiVv+SLq51VuBCgks8RzBzYaf0SfLyypTUG8yZs=
Subject key identifier:   56:F4:2A:65:B9:19:21:0E:6B:D2:C6:24:ED:74:F0:A3:34:ED:02:D1
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F43285845777DC2B817A9B06862E9FC00
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     40033
IP address blocks:        66.35.15.0/24 maxlen: 24
                          66.35.8.0/24 maxlen: 24
                          207.32.193.0/24 maxlen: 24
                          207.32.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c2:b8:17:a9:b0:68:62:e9:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=53fcbd6a-e0ad-486c-9238-de230e6a9f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:b8:e1:a5:7d:f5:62:c1:05:cd:3d:f7:af:
                    00:e8:2b:f2:c5:aa:16:a3:7a:fd:b7:c9:a2:83:3d:
                    0c:88:0d:56:8f:88:62:d5:ab:e2:8d:19:6d:e5:57:
                    57:66:64:b9:38:8c:c7:a4:34:e1:25:58:80:cd:af:
                    0c:90:05:43:8c:d4:52:f5:e1:06:9d:6a:d1:e6:5d:
                    9b:40:c2:e7:18:6f:71:b6:f6:76:71:16:d9:c9:26:
                    cb:cc:71:ff:fc:e0:a6:0b:7e:3b:8f:be:fd:1f:3f:
                    c7:94:47:37:82:48:cb:7f:60:db:2b:53:70:00:c4:
                    41:0e:4d:9a:5c:04:5f:8c:6a:52:46:8a:f1:ca:30:
                    75:09:c2:a1:3d:47:44:be:35:b4:e9:db:b4:ff:60:
                    82:d3:f4:38:a0:c2:e4:91:66:77:86:12:52:6d:28:
                    ca:c8:01:6f:cd:bf:03:89:00:75:2c:ab:61:88:8b:
                    8d:7e:ff:af:0f:08:fa:78:ee:53:68:e4:01:bc:2d:
                    c1:e1:59:e0:a9:23:e5:4a:87:f6:1e:6c:95:43:c7:
                    a6:eb:10:3a:5a:24:5e:63:d6:b1:43:04:bd:9f:fc:
                    c4:2a:8f:b9:23:c9:9f:2a:76:22:a6:f8:71:2c:d4:
                    e5:7e:3c:77:f9:de:63:8e:22:b1:79:ad:29:af:14:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:2A:65:B9:19:21:0E:6B:D2:C6:24:ED:74:F0:A3:34:ED:02:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.8.0/24
                  66.35.15.0/24
                  207.32.193.0-207.32.195.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:78:59:c1:22:5c:29:42:4c:d0:31:32:4e:f5:cd:0b:23:77:
         2d:21:94:77:75:3b:7f:4f:8b:eb:75:ff:60:d4:64:90:8c:d9:
         b8:a1:d3:2a:a6:71:f4:c6:eb:08:00:e1:36:05:19:83:dc:05:
         e7:55:94:75:5a:29:13:07:b8:a3:36:4d:50:e3:20:7c:a3:8f:
         99:4b:4d:bc:0d:7c:1f:5c:58:d1:7c:01:44:8d:88:15:86:2f:
         52:1b:ad:db:a0:5f:60:d7:dd:3e:c4:e4:2f:d7:24:67:b6:32:
         a8:a2:f8:8f:81:4b:14:b7:6c:68:5d:f0:96:cf:fe:71:02:ac:
         e0:99:e3:ae:ed:ae:b0:7d:f0:88:74:58:6c:86:27:85:d1:ba:
         63:af:94:5a:78:5b:22:fd:bf:f3:11:d9:73:bd:92:c9:f0:7c:
         be:75:f2:1d:33:5e:27:c4:9a:72:fc:06:68:bf:ec:ae:6f:12:
         4d:91:e6:34:33:40:3e:dc:37:29:c1:b6:1f:48:73:46:48:fa:
         0f:88:fb:42:36:ee:a9:41:3d:6b:d8:de:f6:ea:f8:39:7d:dd:
         bd:27:f8:cd:21:1c:3b:a3:71:f3:41:75:36:cd:38:1d:f3:20:
         ee:8a:e1:17:5b:94:ac:a5:35:7d:54:38:ae:c5:a9:d1:e7:7f:
         9a:f7:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:37 2024 by rpki-client on console-ams.rpki-client.org