Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa
File:                     0fbc7760-8d2d-3877-bbbe-559392540a69.roa (raw, json)
Hash identifier:          0a43y/st/31BkQuM+T2S2IPXECicZYV++Q2tNp00fmE=
Subject key identifier:   61:45:9D:0C:A5:9B:65:64:E3:AE:18:00:95:D8:0D:53:1B:E4:99:06
Certificate issuer:       /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial:       010D0C9F43285845708305C2F697C3591DCC2EC0
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     63290
IP address blocks:        66.245.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:05:c2:f6:97:c3:59:1d:cc:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=2b2aa709-be5d-4e43-b3f3-834afd24a1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:95:78:82:30:7a:5b:8d:7e:4f:11:35:31:
                    47:af:41:02:c8:94:c7:af:5b:3f:6a:ca:3c:f8:d5:
                    e8:70:00:37:f6:1b:d6:1d:27:7b:2f:f1:6b:3e:dd:
                    e6:20:d7:e5:29:3e:d0:8a:67:f5:8c:07:fc:ed:4f:
                    1b:59:69:5f:7d:4b:25:bc:36:44:93:36:7f:85:3b:
                    72:17:49:80:96:ba:3e:fb:47:5a:b9:53:9c:21:26:
                    09:31:ec:bc:84:c4:96:c3:a1:a3:43:4a:6a:33:9a:
                    d1:f8:24:c2:03:60:eb:34:11:5b:e3:28:aa:b8:75:
                    e3:62:34:19:c8:0e:9a:c8:6e:5a:96:c6:e1:c9:bb:
                    7d:e2:6f:43:32:1e:ea:ff:b4:a0:fc:a3:c1:9f:10:
                    1f:cc:6d:31:30:a8:4d:2e:78:09:49:56:7d:33:a3:
                    57:50:e7:b6:71:70:3b:9a:cd:9b:2a:3d:6c:84:31:
                    bb:48:19:59:4d:4d:ac:1d:31:bf:10:c6:e4:76:83:
                    40:11:54:11:b7:30:be:54:44:8b:25:3f:b3:77:44:
                    9b:6c:5c:4e:16:26:3f:5d:e2:bf:cd:7f:05:1c:cf:
                    42:ac:41:85:c5:31:a5:5a:37:f6:3c:04:25:78:98:
                    35:7c:86:3f:8f:e1:52:9f:19:c6:51:e2:fd:3c:ba:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:45:9D:0C:A5:9B:65:64:E3:AE:18:00:95:D8:0D:53:1B:E4:99:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/0fbc7760-8d2d-3877-bbbe-559392540a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl

            X509v3 Authority Key Identifier:
                keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:56:42:ad:98:c2:51:86:81:0b:f1:bf:7e:7d:9d:e7:7d:5f:
         ec:28:c5:c6:df:73:08:7d:d5:26:7a:a4:52:c7:0e:47:22:d9:
         7d:91:68:27:d9:ae:6a:c1:48:c4:54:e0:9e:ee:ec:5f:fc:d4:
         0f:a3:9d:29:4c:94:b6:4e:11:7c:d2:60:bc:3c:ff:a0:58:7e:
         72:ba:a9:7f:a7:31:39:69:52:7e:80:11:ad:2e:f1:a2:9d:d0:
         2c:29:8b:a1:d9:23:9f:c1:33:8c:b8:c8:39:0c:20:a9:f8:f4:
         b3:e2:37:72:76:29:a5:c0:ef:0f:a6:f8:d0:ab:7b:cf:f5:1e:
         be:5f:74:df:86:0f:2f:a9:a2:ae:05:b6:d3:9e:47:48:88:8b:
         13:6f:8d:44:7f:9a:bc:57:ae:b5:6c:ca:d1:8e:32:48:7d:64:
         ae:ee:ad:d8:d8:78:05:b6:57:3d:51:c5:1a:e4:58:61:d8:2f:
         15:c3:14:3d:bb:2a:80:60:2f:cb:2f:6b:ad:32:f2:11:97:c3:
         51:44:94:1b:ab:c0:26:54:6a:3b:e6:6c:c7:a0:63:1d:48:eb:
         11:80:a8:82:59:37:18:b0:ee:28:8b:30:10:41:29:33:6e:ca:
         2c:47:ab:5b:2f:08:38:22:32:5d:a0:6e:19:91:b1:61:7b:58:
         bd:54:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:31 2024 by rpki-client on console-fra.rpki-client.org