Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa
File:                     77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa (raw, json)
Hash identifier:          J71vaFoURt6QadbL0NX2nPMUpSL4IV/7t1/mFl00YHc=
Subject key identifier:   89:FF:D7:14:A7:7D:5B:8B:65:A8:9C:9E:A8:93:BD:A6:B1:B0:38:D5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454902D1828B8562C00D311C80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa
Signing time:             Thu 21 Mar 2024 21:25:46 +0000
ROA not before:           Thu 21 Mar 2024 21:25:46 +0000
ROA not after:            Wed 19 Jun 2024 21:25:46 +0000
asID:                     15169
IP address blocks:        66.102.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:02:d1:82:8b:85:62:c0:0d:31:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:25:46 2024 GMT
            Not After : Jun 19 21:25:46 2024 GMT
        Subject: CN=4c1721f5-9e4f-432b-9aa0-17ff340532b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:ba:74:8b:06:61:37:b7:58:61:ef:9c:49:
                    cd:a5:1d:00:26:3d:3c:97:12:90:97:85:b3:fd:1c:
                    90:11:08:07:60:2b:42:ca:6d:9b:88:23:1a:2e:8d:
                    c1:66:6f:50:45:b1:08:b1:03:98:17:a5:00:1d:1a:
                    27:a7:a2:6c:88:0d:eb:a2:9b:a5:e5:2e:78:97:14:
                    5e:a8:28:b0:37:db:b9:5c:6c:6c:4a:b3:03:dd:a2:
                    88:db:ac:a2:da:33:05:2e:05:c3:ae:3c:70:92:2e:
                    fe:89:79:46:d6:a1:fc:7b:a6:c9:c7:4e:5b:3a:28:
                    02:52:07:74:a2:21:35:67:7d:49:ea:e0:56:04:6a:
                    60:64:84:92:11:29:c1:a7:88:34:45:e2:05:1c:40:
                    cb:c7:10:ef:f9:00:e6:b1:8c:e9:85:b9:9e:d0:2d:
                    70:45:24:11:5b:7a:07:7d:7c:86:2a:5c:7d:ab:37:
                    5a:2f:2b:fa:8d:13:e5:64:15:75:ad:fc:cf:5f:c3:
                    6a:d0:26:f0:bb:f9:b2:9a:10:7c:e7:b9:26:fa:ee:
                    2b:e5:5c:08:06:32:a3:e1:44:1a:37:f6:92:70:0f:
                    da:51:24:e3:ba:21:45:df:13:8d:c0:b1:e0:c4:c9:
                    7e:4e:1b:f6:b1:47:45:da:5b:93:2b:25:89:58:30:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FF:D7:14:A7:7D:5B:8B:65:A8:9C:9E:A8:93:BD:A6:B1:B0:38:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77dd14d3-b048-3018-8e12-cf80d2a45d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:54:0c:d8:11:10:17:5e:7c:63:c3:93:f0:0d:a7:6e:b6:e0:
         43:13:ab:b5:07:08:7c:6e:ab:7f:14:a5:a1:a5:dc:15:9c:7b:
         f6:58:dc:65:3f:cc:03:df:4e:8b:4f:3b:d4:a3:b7:7f:31:4c:
         5c:44:3e:f1:63:cc:8f:2f:e2:98:bb:71:c0:3a:58:9a:73:e3:
         cc:17:df:d5:03:57:b7:5e:ba:b6:73:7a:ee:5f:e4:00:3a:2d:
         a0:1a:0e:7e:51:34:e8:cb:f2:55:4a:5b:b2:cd:9e:31:be:28:
         28:58:bd:d8:eb:61:d1:95:e6:f0:78:34:a6:40:87:c6:8f:6d:
         7e:42:f4:58:05:76:41:97:a8:fd:0d:8b:4d:7b:10:2c:38:ee:
         2c:71:5b:ad:8f:e2:7f:44:ac:ea:65:8f:26:d3:ca:23:7c:45:
         c5:7b:36:12:6f:c0:ea:83:c4:1a:63:ee:86:23:2d:82:18:39:
         b3:52:98:8a:f9:08:27:37:06:dd:f9:e4:f1:3e:c7:b5:a3:b8:
         1e:42:76:59:98:f8:23:1c:7b:9c:d8:e0:8b:95:65:10:fd:31:
         85:ad:0c:53:ab:dc:fc:4a:37:05:0f:d1:7c:f5:e0:f6:aa:d7:
         a1:2b:2e:e4:7f:e8:cf:89:f5:ab:43:9d:c8:6e:72:b1:0b:23:
         13:d3:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:30 2024 by rpki-client on console-ams.rpki-client.org