Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ebeeaed6-5c1c-3432-9111-45e1d4ab24b5.roa
File:                     ebeeaed6-5c1c-3432-9111-45e1d4ab24b5.roa (raw, json)
Hash identifier:          H0LtFymEZsCFfYX6FLybBNYzkNdYtjnSSRb/C8LpSGE=
Subject key identifier:   E1:1A:A7:44:F3:82:E2:DB:EF:B9:EB:6A:5B:02:B2:9E:28:EC:06:71
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858472F307E953B7C7F51DBE35210
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ebeeaed6-5c1c-3432-9111-45e1d4ab24b5.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     2734
IP address blocks:        66.128.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7e:95:3b:7c:7f:51:db:e3:52:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=47210454-5fa3-4786-b62a-5389e224147f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:4b:c0:70:69:5b:07:58:32:98:31:24:1a:
                    eb:0f:47:84:b6:e8:59:24:00:53:c9:82:cf:84:17:
                    7e:c8:c2:be:c8:66:b8:b2:37:ec:ab:3a:5b:4c:da:
                    c7:58:db:bc:f1:bf:93:3b:7d:e4:74:25:8b:02:cb:
                    19:cb:ec:ad:11:c4:2b:4e:30:71:b1:5f:a1:ee:22:
                    69:57:28:03:14:6c:ea:f0:bc:05:97:4d:19:b8:bd:
                    ad:d1:9a:2c:37:80:d9:67:13:e1:52:5d:77:3a:2c:
                    c8:21:75:6b:53:33:4e:1c:74:6d:d3:89:51:68:ac:
                    1b:3c:6a:b2:bc:df:c5:52:ff:88:d1:f7:4f:dc:d3:
                    8e:b9:d3:68:a3:f8:09:de:42:3c:9a:82:db:0e:3b:
                    da:83:fd:a2:e4:94:c8:3f:a4:07:c1:f0:c7:32:e8:
                    15:b1:c1:6a:66:03:f2:ce:af:35:2e:ec:ae:06:f0:
                    a2:2a:b6:49:97:ec:91:01:2e:05:88:6c:ad:ad:c6:
                    84:22:61:8b:3c:bd:8c:f6:b8:46:2a:e3:7b:89:53:
                    91:9c:7b:20:d9:8c:eb:db:7b:91:52:f1:37:c9:29:
                    c3:b4:e8:42:ef:5c:8a:a4:96:f2:b1:70:bd:53:a6:
                    83:2e:67:cb:91:70:f2:6f:30:57:84:e9:b2:63:7b:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1A:A7:44:F3:82:E2:DB:EF:B9:EB:6A:5B:02:B2:9E:28:EC:06:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/ebeeaed6-5c1c-3432-9111-45e1d4ab24b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:de:0b:27:97:e0:0a:79:e9:99:ac:31:91:76:f7:31:80:e8:
         0e:4c:28:87:28:1f:56:29:5d:96:52:8d:3b:5a:3b:3c:2a:81:
         c3:f9:e8:93:cd:fa:5c:16:52:9a:f8:83:ad:07:ec:b7:20:88:
         3b:7a:fc:94:b3:6d:3a:1f:43:b3:9f:b3:e6:76:31:df:fe:7c:
         e4:a6:88:10:bc:b5:b3:9b:1f:85:72:ec:0d:6a:fc:62:32:ec:
         df:ed:fb:48:1a:d6:04:67:ee:1d:a4:c5:da:1b:fb:e6:cb:81:
         a1:66:f2:41:a9:22:e9:e9:5f:bf:6e:40:6b:b4:46:74:2a:18:
         c9:6b:30:4c:cd:2c:7a:8b:c1:77:88:36:c6:89:e1:75:b6:8a:
         d3:58:36:c1:20:69:72:89:71:e9:f7:38:1a:d6:5f:95:4e:0a:
         43:54:dc:3d:0c:d8:ab:dc:04:a7:0c:85:b4:fd:7c:69:b4:ca:
         60:14:36:dc:01:42:3e:22:41:ea:ad:44:5e:ca:31:ed:bc:d2:
         6b:5f:f9:bf:e0:c6:ae:96:41:56:5a:52:1c:d2:d4:63:7a:f9:
         e5:89:49:e1:61:0a:f6:31:ce:78:a8:b5:5e:49:0c:40:fe:be:
         7e:3b:41:94:7c:8a:90:eb:1d:7e:45:79:9b:ce:e5:14:90:a8:
         30:e4:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:10 2024 by rpki-client on console-ams.rpki-client.org