Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
File:                     fbd0f42f-fbef-3f5d-b443-269369b555df.roa (raw, json)
Hash identifier:          BCVZmihcX/0j4jQjW9v6PlMygc4HT1cH6k604nzDdFw=
Subject key identifier:   0B:0C:59:89:D4:FF:DF:FF:0E:C1:22:C2:9D:BD:00:EF:4F:CD:1D:EA
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285847CE6F3C6709A144672D84E1B0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     397673
IP address blocks:        66.11.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3c:67:09:a1:44:67:2d:84:e1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=4675953e-04aa-493a-a8b9-a92d595490c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:de:03:6b:6f:f7:ce:6d:aa:aa:eb:76:c8:6c:
                    38:b4:48:e7:28:d9:05:88:b6:d2:bb:1f:51:0f:9c:
                    9a:61:3e:dd:89:03:b4:28:5a:54:e7:3a:fb:59:7a:
                    ba:17:c8:3f:10:e4:2b:34:f5:1f:3d:e8:04:c2:98:
                    c6:39:36:76:80:36:d8:e4:24:1a:c8:61:11:8b:e0:
                    1d:4c:c2:e8:87:91:20:82:4d:3e:ab:1a:0c:47:49:
                    68:f6:76:95:34:03:fe:89:c9:4a:8a:0a:a5:bd:c3:
                    88:60:05:b7:82:3b:26:67:6f:4c:24:f5:60:06:74:
                    63:99:c0:03:d2:c2:34:80:3d:13:49:fb:3e:ab:00:
                    d7:29:4f:90:3c:66:a2:1a:ae:71:e3:5e:46:f9:3c:
                    d8:27:c2:b8:b4:b9:29:ca:92:d6:bb:7a:ef:df:f3:
                    bf:7e:3c:40:71:42:7c:18:c3:7a:3c:31:1c:b3:7f:
                    8d:34:5f:bd:4e:02:e8:92:37:12:86:a4:2b:a8:55:
                    a6:52:66:b3:8b:f2:63:b5:3e:63:71:36:52:d2:f5:
                    60:24:4c:3d:64:f5:de:a7:73:12:dc:a7:f0:d3:a9:
                    e3:ab:78:6a:76:27:31:c8:1e:ef:d8:1d:4c:1c:2f:
                    e4:80:90:f9:fb:5a:b1:9b:b8:41:75:ec:28:5c:f1:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0C:59:89:D4:FF:DF:FF:0E:C1:22:C2:9D:BD:00:EF:4F:CD:1D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7a:32:54:1d:bf:12:29:83:a7:4e:97:26:99:67:7d:7b:06:
         78:eb:73:ca:33:44:19:e2:b3:93:2f:5c:50:34:b3:a1:ea:0b:
         3a:2d:e4:dc:99:bf:da:8f:f5:00:94:65:0a:d5:ad:a7:1a:19:
         86:62:20:11:43:ca:bf:07:55:21:20:e6:8b:1d:67:a1:6d:ed:
         7a:d1:93:7a:f6:18:2f:24:5e:ef:81:d9:60:64:08:39:b1:76:
         36:da:e5:79:a2:86:c2:dd:73:bb:eb:9d:58:b3:cf:67:28:9f:
         1e:4e:fb:75:3e:65:db:76:e9:8d:50:8b:eb:50:30:26:6c:50:
         a1:e8:80:24:9c:f0:9e:5e:e2:35:d5:29:60:ee:e7:71:35:01:
         5f:69:6c:ff:98:5e:a9:28:a2:f7:89:60:bb:96:85:96:4f:a0:
         38:93:53:4f:8f:31:46:3f:5c:25:fe:0b:47:b4:e1:5f:a1:a4:
         b3:be:11:e6:fe:a4:09:f5:5a:66:20:88:14:cc:b6:47:3a:45:
         3f:0d:73:a9:fa:48:6a:a9:77:5e:fe:ae:93:5f:ef:a5:46:0e:
         fd:ac:4f:04:cb:32:00:cc:c3:7d:8f:35:83:88:e7:cf:f6:27:
         d3:49:11:bb:01:6a:7e:91:f7:27:c5:67:fc:21:22:79:e3:fb:
         6a:89:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:14 2024 by rpki-client on console-fra.rpki-client.org