Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa
File:                     69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa (raw, json)
Hash identifier:          eGdMdykfJXeD82vKn3YI5xHvt7SRDG37kwrqRoaPUOk=
Subject key identifier:   F0:04:07:0B:D4:EB:AE:EF:1D:EF:E5:66:59:E9:0C:B9:B2:A6:6F:88
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858457EA17AE52F5098B7D05AA600
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa
Signing time:             Wed 10 Apr 2024 02:23:17 +0000
ROA not before:           Wed 10 Apr 2024 02:23:17 +0000
ROA not after:            Tue 09 Jul 2024 02:23:17 +0000
asID:                     13445
IP address blocks:        66.163.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7e:a1:7a:e5:2f:50:98:b7:d0:5a:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Apr 10 02:23:17 2024 GMT
            Not After : Jul  9 02:23:17 2024 GMT
        Subject: CN=3e007c98-20b2-4b8a-8455-5688665d6807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:b9:9c:22:6b:38:bd:1a:6e:06:98:9e:e8:
                    67:23:d6:2f:0b:69:76:76:d6:5c:4f:4c:85:c4:10:
                    c6:01:6f:94:08:b7:f7:98:1c:e1:68:55:d1:ba:23:
                    da:0b:ea:99:b0:0a:17:23:06:22:95:1b:97:53:e5:
                    95:12:f4:1c:21:35:03:43:af:58:77:1f:ab:6b:f6:
                    ef:1b:84:4b:fe:cb:c5:3e:fd:d2:a7:e2:74:94:92:
                    d9:7c:c6:ed:3b:c3:da:e5:59:53:49:79:f8:3b:b0:
                    ad:26:e0:c2:30:e3:2b:08:dc:2f:2b:b1:b4:3d:88:
                    1e:6b:da:c6:6d:23:76:ad:0d:f1:46:b9:0f:22:c0:
                    42:53:13:db:f2:56:d4:09:cc:38:13:33:e3:ff:6a:
                    c5:b6:06:d0:16:dd:93:2e:4c:fd:e9:65:fd:e7:26:
                    2f:55:90:5b:0d:ae:e2:d2:bd:08:6a:72:a0:d5:d5:
                    87:5a:b2:23:70:53:14:3e:8c:af:e1:69:a6:66:bd:
                    f4:31:b6:35:d6:0d:3b:d7:4a:1b:85:6d:a2:62:35:
                    6a:7c:6b:7d:d1:a4:23:89:f0:95:4b:03:5b:c5:49:
                    a7:8f:2b:80:38:37:7a:93:dc:74:1c:7d:27:e0:a5:
                    62:9f:74:a7:5a:59:49:ed:79:cb:8b:46:73:2b:4c:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:07:0B:D4:EB:AE:EF:1D:EF:E5:66:59:E9:0C:B9:B2:A6:6F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/69eef6ac-d3a0-3c2d-ad1d-606889c0d411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:82:9c:5f:9b:39:f1:39:ad:9e:36:74:fe:91:b2:9b:d7:5d:
         c4:8b:7b:6f:3b:5a:b5:01:89:14:a3:68:ab:05:00:ee:a8:d4:
         57:fb:25:c4:cb:f4:f1:c8:fc:0a:9c:b7:3a:99:1a:13:be:8e:
         fa:84:36:50:31:f8:6a:d9:ec:c0:a1:e0:2c:5f:19:de:50:01:
         75:a9:24:20:77:b3:e0:9a:da:af:12:f8:88:17:65:f9:55:13:
         65:f8:f5:80:89:2a:c6:4a:07:1f:5b:7c:7b:a9:98:77:ab:a7:
         1f:b2:bf:b2:02:cf:58:fc:30:13:bd:f5:7c:41:cb:d5:03:49:
         e6:b9:de:35:0a:f0:4e:90:68:7f:e7:dd:eb:b5:d7:58:f7:da:
         24:d7:83:c6:d2:87:e4:07:ad:2b:fa:67:1c:65:2c:66:6c:f2:
         43:be:a3:5d:58:f1:f8:a3:79:a8:ba:ff:c9:43:ab:24:cd:43:
         76:c5:9c:bd:fc:50:1b:21:37:43:5e:c7:42:af:34:7c:61:25:
         a1:13:e7:1f:b1:f0:bd:2f:75:62:96:d0:ff:56:60:2c:4c:cf:
         32:b7:67:46:04:dd:82:4b:3f:4e:75:fd:3b:f7:5b:3e:fb:e2:
         f5:9b:65:11:a0:7b:29:24:f5:17:f0:ac:f9:77:dc:b9:71:36:
         4d:06:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:58:24 2024 by rpki-client on console-fra.rpki-client.org