Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/042a3471-a69a-33d8-9566-1dff1b836b8e.roa
File:                     042a3471-a69a-33d8-9566-1dff1b836b8e.roa (raw, json)
Hash identifier:          eOMj8h7WDDIetcUCtOcCTZaiGWyT3waJi7gXEXzeq8w=
Subject key identifier:   34:60:63:4F:98:27:6E:E1:EB:EC:50:5A:7E:0D:60:E7:0E:5F:ED:7C
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584754E0EA53784B7CBA25CC4C60
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/042a3471-a69a-33d8-9566-1dff1b836b8e.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     33182
IP address blocks:        66.7.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ea:53:78:4b:7c:ba:25:cc:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=11babd40-d94b-4ee6-8915-8d68f8d1f4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:26:c6:2b:ef:15:24:b3:dd:69:0f:7e:b3:
                    2b:57:23:09:b0:d6:a5:39:92:28:cf:fb:0e:e6:72:
                    8c:6c:3d:a5:5b:92:4a:34:f1:6b:be:21:a0:b3:a5:
                    48:b2:f5:7c:de:c0:6b:32:86:91:cc:ef:7b:f7:94:
                    c6:d5:e3:7b:2d:d5:92:ba:c5:bb:03:3c:0c:a7:51:
                    69:38:d8:ec:40:96:a3:cc:59:92:85:bc:f8:ce:4c:
                    a3:f2:9c:b2:01:9f:ee:53:6f:e4:5d:dd:0d:0a:1c:
                    10:9f:22:97:bd:4f:1e:7b:4d:46:c0:e9:dc:8a:3b:
                    ca:53:80:0f:48:00:d2:f2:7a:d0:b1:24:d0:95:3c:
                    d4:a8:33:f2:47:16:59:7b:eb:71:cc:e3:fa:f8:61:
                    25:94:49:6f:2b:3b:4a:ee:e2:d8:9c:17:01:90:d9:
                    87:65:42:5e:7e:48:f4:67:36:b6:56:22:80:d5:c2:
                    79:dc:71:1d:72:cd:2b:90:ba:91:f7:c1:7f:c9:d0:
                    e9:cc:c8:bb:0a:5c:14:39:33:3b:fa:c5:36:14:9d:
                    54:f2:d1:fe:44:00:f0:bc:3e:ba:9a:8c:3a:3e:59:
                    5e:a4:e1:e5:a0:52:dc:00:72:db:37:b7:1e:d1:dd:
                    83:a7:71:25:da:22:72:b9:8e:f5:86:0e:29:36:c3:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:63:4F:98:27:6E:E1:EB:EC:50:5A:7E:0D:60:E7:0E:5F:ED:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/042a3471-a69a-33d8-9566-1dff1b836b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.7.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:ac:a9:23:2e:93:cc:c7:dc:97:be:3c:c5:3f:0d:58:9b:
         76:d1:ff:ca:5a:da:2c:79:a8:6a:cd:f9:f4:ed:cd:b0:02:bb:
         a2:39:94:f8:c4:b3:db:0c:21:73:94:b9:5f:2a:84:1b:6f:6b:
         ec:f3:b5:e1:36:4a:d1:bf:4a:a8:ad:ef:2e:42:0a:97:56:f0:
         33:b6:76:db:1a:89:56:99:c2:61:f9:4b:3f:12:75:dc:30:4e:
         41:fe:22:17:e7:c7:b0:e2:c2:c5:9f:44:7d:d9:83:d6:42:6e:
         97:8e:90:1f:e4:c6:6e:2d:bb:b1:25:0b:19:9e:61:66:7a:d3:
         a5:15:b2:25:0b:b3:f0:6c:46:81:10:a9:11:86:67:f4:7e:f0:
         de:19:92:14:e3:30:1d:59:c3:27:ec:7b:c9:ca:1b:d9:25:30:
         f1:ec:3b:82:6a:95:37:6f:96:58:2e:c4:75:6d:66:94:4d:63:
         7d:79:70:68:94:92:5e:a1:19:12:24:41:a3:73:d1:89:35:49:
         f3:5c:4f:09:c5:ac:df:58:48:a6:ff:f4:44:ef:22:05:a9:3e:
         89:83:cb:83:7f:01:88:91:bd:de:0f:1f:a7:8b:5e:11:c5:09:
         ae:9a:d7:d2:fe:40:18:2c:6a:db:27:59:bb:6b:0c:ae:e3:e4:
         e1:27:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org