Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3561488-ce7a-3be2-92d1-dd356984b6d0.roa
File:                     e3561488-ce7a-3be2-92d1-dd356984b6d0.roa (raw, json)
Hash identifier:          6CL23rTfc/y6vmHHBrQ/EK1PigNchpaU6GME4iCNHvo=
Subject key identifier:   73:F5:95:AB:53:A5:A2:42:5A:1E:26:63:84:F3:B4:26:28:93:C4:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B9B45C1516262A4F81180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3561488-ce7a-3be2-92d1-dd356984b6d0.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     36183
IP address blocks:        172.224.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:9b:45:c1:51:62:62:a4:f8:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=8e823884-c696-46f5-8d8d-c589fa2af747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:a4:8e:b4:61:58:6f:f5:4f:01:34:0c:c4:
                    d3:6f:55:05:6c:2a:b7:8e:42:c3:3f:fe:07:71:55:
                    db:ff:36:64:34:97:f7:a3:20:18:e1:f7:c8:3b:3c:
                    76:21:cb:4a:d8:97:71:23:49:25:b7:fa:c1:3b:6c:
                    bd:23:dd:bf:93:47:07:2f:ce:68:18:ad:3f:a2:b1:
                    f1:67:57:f6:c3:28:21:ad:14:6f:dd:e6:0e:12:cc:
                    2a:48:ba:4b:3c:b6:87:3f:63:06:31:41:d8:a4:10:
                    0f:5e:b8:a3:a4:6c:49:c5:c2:99:09:0c:d8:86:0a:
                    75:c6:ef:bc:4b:1c:91:62:ed:dc:8a:bb:70:4a:5c:
                    92:60:8e:2e:ae:68:77:0f:99:74:5a:0b:18:23:78:
                    11:b1:6c:d8:73:48:fc:3b:a9:5a:ea:e9:1c:49:57:
                    5e:e5:da:b0:be:8d:d5:df:a8:f2:60:57:d5:10:c4:
                    88:7d:7d:8d:22:39:d5:d8:06:78:79:12:5f:fb:2b:
                    a0:f7:37:bf:1f:81:f9:20:6d:19:da:25:8a:1f:46:
                    46:a1:9a:7b:58:bc:23:59:94:c3:c0:6d:0b:fd:95:
                    2b:f8:7e:40:2e:e6:2b:55:b1:43:6e:63:b6:27:52:
                    7e:86:83:b0:55:a5:33:20:9b:11:ed:e5:13:0b:87:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:95:AB:53:A5:A2:42:5A:1E:26:63:84:F3:B4:26:28:93:C4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3561488-ce7a-3be2-92d1-dd356984b6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:e1:48:86:36:fe:0d:da:d5:ad:b4:58:06:eb:95:ea:b8:
         75:68:be:77:10:ef:ca:d1:b9:9a:c9:b4:88:ae:ef:8b:65:e9:
         d3:4f:20:f2:65:6d:8c:10:13:f3:7d:06:34:49:b1:01:6d:a4:
         01:82:89:91:e8:61:fa:c7:1a:27:4c:e1:e2:6b:99:45:34:df:
         f9:5c:cf:7b:08:f1:52:fa:da:a9:a5:28:74:ac:cf:79:86:e2:
         98:06:63:7f:a6:51:ea:86:f5:fb:3c:70:cb:a6:8f:d9:ee:c9:
         12:a5:3b:64:dc:20:20:0a:82:7a:96:a0:f7:25:76:82:eb:3d:
         89:20:3d:aa:1f:34:79:20:1e:60:3e:56:e7:6c:5c:25:e3:48:
         f5:15:6f:42:f4:e3:7a:cf:bd:0f:3d:a4:38:6b:91:b3:cf:f4:
         27:4d:6d:39:a9:05:43:73:1e:9b:c0:65:98:44:7b:c1:e9:50:
         2e:dd:2b:12:c8:61:8b:41:65:22:54:63:c3:13:55:37:e6:51:
         68:8b:9b:5a:f1:1a:73:ef:bd:de:95:3a:72:bc:b2:05:39:3b:
         6c:d0:43:04:8b:26:14:97:46:56:88:0b:62:65:5f:0b:e6:bd:
         9c:89:30:f6:86:e0:ce:52:85:0c:bf:8f:c9:94:54:50:83:f1:
         f9:f2:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:53 2024 by rpki-client on console-fra.rpki-client.org