Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa
File:                     d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa (raw, json)
Hash identifier:          2J8NmsSOgWjVlEgJay8SbltPZEQKKBQLV4P7JPyDjxs=
Subject key identifier:   67:6F:99:61:AF:B7:BE:E5:9E:78:5F:6C:31:26:FB:D8:B5:84:B9:08
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628DEE4E50BA233BB75B04C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        66.168.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:ee:4e:50:ba:23:3b:b7:5b:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=d2b616a0-2452-46b0-9363-890f3102328f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:e3:67:73:e0:87:26:da:10:bd:4a:7c:80:
                    f2:9c:60:12:84:fc:0d:82:ee:5a:e8:c7:ca:02:52:
                    20:81:ea:ca:f2:b4:c1:e6:76:ef:d2:bd:1d:3a:ef:
                    84:79:8b:b0:c7:61:31:b1:1f:26:9a:81:d2:da:49:
                    b2:82:61:f8:26:5e:23:20:fa:41:a2:ed:f6:1b:dc:
                    46:23:2a:d1:4c:fa:a3:4b:7d:78:c1:96:bc:a2:f9:
                    22:42:c4:cd:bb:ae:5b:4d:32:40:23:55:6c:8e:4d:
                    e1:90:75:33:1b:27:14:c8:03:3f:0b:c6:c5:b2:8d:
                    5f:0c:ac:63:80:47:8b:44:f4:d5:1a:ee:16:c8:a3:
                    92:b1:48:3d:c2:dd:74:29:cb:b9:ab:cc:9e:2a:6c:
                    d9:cb:0f:c4:2b:39:f5:ed:c9:5f:c3:e9:53:75:df:
                    f4:46:65:54:a0:b4:c0:64:f6:43:0a:4a:9a:e3:64:
                    88:20:df:d3:19:29:ef:b7:dc:f2:9f:da:7f:af:cd:
                    1a:73:8b:62:b5:69:de:90:69:f9:0c:b2:5a:c3:49:
                    71:1e:41:77:bd:05:ab:b0:da:5b:9e:77:c3:f6:08:
                    0c:55:c8:29:1c:52:bf:99:9e:66:23:f7:18:0a:85:
                    81:4a:f5:37:71:12:cb:cb:bb:62:db:04:34:cc:5c:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6F:99:61:AF:B7:BE:E5:9E:78:5F:6C:31:26:FB:D8:B5:84:B9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:26:d4:ac:e5:6a:6b:31:53:46:e8:7d:4f:86:10:5f:bb:9b:
         bd:a0:77:39:97:20:89:8b:49:a7:6f:e2:7a:9f:46:34:15:2e:
         f5:f6:72:44:7f:01:7c:6e:90:33:b8:c6:60:f7:0f:08:7b:2e:
         01:b0:95:b9:d9:62:68:cc:7a:16:9a:82:42:af:2c:8e:4f:cf:
         ee:f4:57:ca:9f:bc:c8:d9:e0:98:ef:02:40:45:c2:54:1e:1c:
         6e:14:17:15:e0:cb:73:69:b8:7a:cf:77:36:98:5f:4c:9a:01:
         d0:6f:c6:8e:80:f5:1d:f0:83:85:9a:c8:20:d7:32:9e:92:8f:
         2d:de:00:ae:5f:ec:1c:ec:22:db:76:f0:74:8a:f6:27:07:a7:
         f7:90:32:96:6f:bf:79:64:30:20:a6:1a:ac:0b:9f:28:b1:a7:
         46:b6:04:7c:98:e9:72:58:8f:8f:f7:32:32:d8:f0:6d:91:4c:
         7c:9e:8a:c6:f1:ea:58:47:57:a6:23:91:57:77:5f:ca:d2:48:
         78:3e:5e:f4:cd:01:f6:d7:2a:98:21:04:a1:e9:de:4d:f8:6a:
         0f:f2:e0:2f:a5:38:4f:f2:13:ea:cc:f8:eb:47:8b:55:70:ad:
         4f:17:71:5d:b2:5e:66:d4:12:92:20:c6:ea:20:f8:7c:aa:14:
         d2:8b:b1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 16:00:30 2024 by rpki-client on console-fra.rpki-client.org