Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
File:                     933cd287-75bf-387a-83e6-d85b86aba33d.roa (raw, json)
Hash identifier:          xr+e76IzUNTWNOUIhXlStje3dIUF+V8/SkYH4gWKs2Y=
Subject key identifier:   07:C8:82:84:77:F8:44:4F:B3:25:2D:FB:0C:F5:B7:A8:3B:46:D0:CD
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858457F063BB3661C927A1E05E800
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa
Signing time:             Wed 10 Apr 2024 05:46:18 +0000
ROA not before:           Wed 10 Apr 2024 05:46:18 +0000
ROA not after:            Tue 09 Jul 2024 05:46:18 +0000
asID:                     2734
IP address blocks:        66.35.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:06:3b:b3:66:1c:92:7a:1e:05:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr 10 05:46:18 2024 GMT
            Not After : Jul  9 05:46:18 2024 GMT
        Subject: CN=3c3c6f30-54b9-49f1-aec7-404975f97c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:d8:18:c0:82:5c:12:f4:a3:85:bb:d1:d6:
                    95:c5:0c:34:9d:5a:64:24:46:78:ce:da:b7:a8:cc:
                    d7:fb:37:f9:7d:1c:b5:2d:84:3b:b4:14:06:20:99:
                    10:06:73:e8:0f:ad:0a:9b:c7:92:06:ae:ef:0e:63:
                    60:8c:63:a3:e2:70:ef:08:6b:fb:c0:ee:ab:0b:a1:
                    02:6a:50:ca:7e:42:87:a0:89:aa:4b:e0:ee:70:f8:
                    b6:52:75:1d:38:b8:4a:05:6b:be:06:c1:a9:71:61:
                    36:06:6c:ae:44:70:44:b4:7d:f5:2d:44:cd:45:2f:
                    e7:6f:1a:64:eb:b3:10:c9:a4:f9:c4:44:64:a2:b3:
                    c9:58:bb:06:4e:27:8b:6a:3a:2a:71:eb:23:04:18:
                    cf:32:c8:43:22:a0:11:49:b9:d7:92:36:87:be:a7:
                    71:d6:68:44:cf:e9:83:62:9a:a7:b0:7e:06:03:1d:
                    df:04:48:d1:69:01:37:f6:b1:6f:47:d9:d3:17:92:
                    e0:dd:05:d7:7b:ab:37:b2:1a:e4:74:1c:31:44:35:
                    ee:2a:65:25:87:99:47:15:55:c0:8b:a6:eb:67:7e:
                    d5:0d:79:cd:b8:12:e9:00:ff:22:5b:af:8c:76:4c:
                    e3:4d:0d:f1:35:fb:03:30:eb:6d:ac:80:3f:6d:56:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C8:82:84:77:F8:44:4F:B3:25:2D:FB:0C:F5:B7:A8:3B:46:D0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/933cd287-75bf-387a-83e6-d85b86aba33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1b:48:a3:82:63:84:8e:cd:f5:f4:b0:bf:cf:39:b5:c1:a5:
         f1:f4:4c:c7:d6:54:cb:c0:15:9f:30:10:6a:c1:cd:75:21:36:
         fb:37:f4:30:eb:54:f7:f4:59:17:cf:66:4a:48:66:5d:29:68:
         b6:3d:0d:da:7a:a3:92:fe:34:23:fb:61:ac:f0:c4:d0:83:e4:
         45:6c:07:ff:aa:cd:50:f9:07:e7:f9:61:53:30:55:a2:6e:fa:
         d7:84:10:17:5c:3e:5c:36:08:71:d5:f0:f7:03:dc:8c:86:bb:
         9b:59:55:df:d9:d7:b8:0b:94:cf:e7:25:3b:8c:08:c4:1c:5c:
         6a:10:17:d7:8d:3f:ac:be:70:46:a2:d2:fb:97:14:3c:ca:20:
         ae:a4:c5:80:37:2c:69:99:b7:c1:26:28:59:83:da:bf:a6:48:
         d0:61:1b:df:9d:98:56:81:1c:b5:df:bd:49:2d:fa:85:b4:f8:
         78:39:11:79:6e:fa:d6:f9:b9:87:72:d7:7d:b9:10:d4:60:13:
         ed:51:53:ad:e8:03:b1:b5:00:b9:d4:cf:9c:64:80:eb:da:33:
         5b:27:94:44:01:d9:7e:a1:45:d6:6a:5f:f8:d7:35:34:9e:51:
         83:a4:e1:7e:b5:99:30:96:40:92:3a:ff:1c:8e:1f:c5:0a:da:
         00:93:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:20:08 2024 by rpki-client on console-ams.rpki-client.org