Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/61d2c398-4a09-3ea4-8d87-9d9f6d3c73d1.roa
File:                     61d2c398-4a09-3ea4-8d87-9d9f6d3c73d1.roa (raw, json)
Hash identifier:          8jG9joq36KYr6BEwjCbCv5l2sINiv3oJkQLBmS/jldM=
Subject key identifier:   0F:76:9C:BE:63:C7:27:17:9A:EE:B9:17:2A:E5:C7:2B:A5:CC:4F:B1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285844E50A87CF881E7A67066AF2C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/61d2c398-4a09-3ea4-8d87-9d9f6d3c73d1.roa
Signing time:             Thu 15 Feb 2024 02:00:26 +0000
ROA not before:           Thu 15 Feb 2024 02:00:26 +0000
ROA not after:            Wed 15 May 2024 01:00:26 +0000
asID:                     30058
IP address blocks:        66.90.117.0/24 maxlen: 24
                          2001:49f0:d112::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e5:0a:87:cf:88:1e:7a:67:06:6a:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 15 02:00:26 2024 GMT
            Not After : May 15 01:00:26 2024 GMT
        Subject: CN=58c66112-396c-4383-aa59-5cde40f1fbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:03:76:48:7a:c2:8a:50:c2:fd:55:7f:c1:75:
                    8a:80:07:6d:93:86:fc:4e:7e:c2:66:f4:0e:18:a8:
                    07:5f:e8:8c:0e:70:6b:aa:8d:ee:18:ba:ef:05:c0:
                    08:b2:f9:6d:2c:06:4f:a4:6a:82:48:18:10:88:37:
                    ea:1c:91:20:aa:2b:0f:37:0a:d0:76:80:df:2c:12:
                    45:75:b4:b3:f6:0d:1d:77:2a:80:da:96:9d:d0:c6:
                    50:3f:a3:43:28:64:2b:be:a5:2d:9a:62:c4:7c:67:
                    1b:65:41:f0:64:36:a6:3a:61:b3:27:a4:a0:5b:a0:
                    59:5e:1a:8e:a6:fe:8f:0d:1d:f3:5b:ab:04:25:17:
                    21:a9:cf:00:b9:cf:5f:65:05:65:35:43:f4:79:40:
                    53:18:af:f0:36:7d:32:51:b9:07:72:c3:49:d3:00:
                    3b:47:17:51:e1:48:23:78:49:7c:57:79:62:b3:68:
                    0a:48:73:9d:b0:15:c5:9a:3a:b2:15:37:85:3e:2d:
                    0d:9b:79:26:c6:6d:77:6c:2c:54:2e:a9:7e:d7:6a:
                    70:47:e9:8d:af:3b:03:82:a2:47:ce:f9:28:18:d5:
                    a9:47:71:25:b5:23:e1:8c:0d:22:92:ac:af:47:7c:
                    9c:bb:0e:1f:e8:42:d4:7c:af:bd:fc:4e:e2:c4:b2:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:9C:BE:63:C7:27:17:9A:EE:B9:17:2A:E5:C7:2B:A5:CC:4F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/61d2c398-4a09-3ea4-8d87-9d9f6d3c73d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.117.0/24
                IPv6:
                  2001:49f0:d112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:20:cf:95:14:3e:46:53:68:29:ce:cb:a5:c6:4c:6c:be:
         4b:a0:d5:20:1e:d4:d0:29:be:cf:63:8a:5c:6c:ba:9b:10:25:
         67:3e:23:d6:4e:cf:6b:ea:ee:9d:36:09:f7:b8:f5:cc:6f:a4:
         20:88:24:58:a3:99:d9:e0:40:db:1d:3d:bd:6d:d0:6c:71:ea:
         6f:4f:70:0e:7e:60:2e:5f:5c:8b:b0:53:a1:46:d4:73:23:de:
         f8:2a:e3:76:31:22:8a:cb:22:da:f4:46:32:7d:9a:d2:92:47:
         0f:42:01:a7:b3:37:1d:d8:12:c3:c5:72:cb:59:26:f1:6f:e8:
         31:5f:89:e7:ad:48:04:05:3f:e1:db:2b:3b:03:78:64:ee:54:
         d3:23:30:c0:dd:33:31:09:f1:0b:3d:48:cc:87:ea:bc:9d:76:
         45:d0:37:e1:80:d2:72:b1:bd:4f:90:10:87:ea:b8:b6:2f:4d:
         00:3a:0c:ac:77:cc:44:6a:91:f4:60:b0:00:9a:df:f9:be:57:
         37:7b:70:4f:f0:eb:90:17:59:6f:99:93:4e:6d:50:c6:ed:e6:
         99:5a:ac:3e:14:70:c6:c2:da:ef:8e:97:bf:44:ce:4b:ed:0c:
         17:53:20:59:7b:e5:93:c8:56:7e:fe:d0:a4:f9:5d:06:10:f3:
         97:05:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:46 2024 by rpki-client on console-fra.rpki-client.org