Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/894da94b-4159-316d-b243-deff1713a67a.roa
File:                     894da94b-4159-316d-b243-deff1713a67a.roa (raw, json)
Hash identifier:          H0zj9c40+Tg/bBuOJ4kKPxptq2+qHNhOdYpZIf3HOcM=
Subject key identifier:   36:3A:2B:4D:43:6E:08:3E:1A:8F:26:9E:6F:FD:F5:32:5E:44:1A:DD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F89560D8033D0A43C62461D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/894da94b-4159-316d-b243-deff1713a67a.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     63949
IP address blocks:        66.220.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:60:d8:03:3d:0a:43:c6:24:61:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=19ee0276-a43d-4ef0-95dd-c135335738b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:63:75:ef:81:3b:63:9e:19:b9:5a:d2:fc:
                    2c:77:7d:cc:48:04:54:a6:c5:44:d3:f6:31:14:90:
                    29:3b:26:cf:a0:df:66:e3:c2:90:d7:25:e9:42:30:
                    f3:6f:5b:e0:de:20:c4:20:0d:a1:46:78:92:c4:32:
                    32:19:3a:d2:e2:ed:dd:5f:9c:88:ef:30:8a:d7:fe:
                    23:49:92:65:ea:34:1d:3e:c6:3a:3a:8a:b8:50:95:
                    5c:77:46:ea:1b:60:d2:cb:53:13:9a:be:d1:51:09:
                    28:ea:5e:0e:37:64:6d:d4:e2:24:7a:1a:8c:c7:31:
                    5f:d2:bb:a0:fa:ed:d4:2c:c7:ae:18:9b:e7:12:29:
                    dd:9a:2d:d3:1d:e8:f4:a6:19:7a:09:47:42:41:df:
                    53:5e:5c:97:7b:af:54:50:a1:b3:52:99:19:f7:99:
                    e6:e5:51:b4:b8:c7:3e:af:12:5c:12:4c:13:e9:9a:
                    10:d2:a4:6c:39:5d:ce:d3:7c:5f:6a:4d:6a:21:73:
                    ec:59:71:73:01:f3:70:b3:b3:f6:96:33:d4:12:3a:
                    cc:7a:59:6a:8d:ed:f9:28:d7:b6:2f:8f:5e:18:b9:
                    16:8d:84:75:5e:66:fc:7d:e5:5b:3d:ba:d7:64:71:
                    41:8a:0e:c7:5f:8a:0f:79:c7:5d:5a:20:da:fe:5e:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:2B:4D:43:6E:08:3E:1A:8F:26:9E:6F:FD:F5:32:5E:44:1A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/894da94b-4159-316d-b243-deff1713a67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:6c:91:e7:84:53:f6:97:bf:0a:f4:7c:56:d6:d4:56:17:43:
         cc:2c:50:04:b7:06:83:64:01:e9:c8:b0:49:5c:cb:fe:b5:92:
         c4:8a:dd:8b:08:5a:0d:0d:d6:0f:14:b5:7a:dd:e5:5f:68:56:
         08:a3:fc:f9:3f:ba:15:ac:1a:fc:40:d2:18:1e:2a:94:60:fc:
         72:7e:30:31:64:04:26:21:11:b3:d4:93:b8:18:24:5c:ca:ac:
         66:69:69:96:7e:cb:79:06:91:84:e4:b5:7d:5c:c2:7b:f1:79:
         38:14:d0:f9:ad:af:1c:34:49:ec:d2:83:5d:25:40:51:30:81:
         b9:84:a0:64:e1:1a:38:eb:e0:c9:d2:43:18:fd:88:3e:98:f6:
         81:54:90:30:31:64:9c:fb:67:10:83:32:6f:38:89:e3:30:2e:
         f7:ca:fe:3c:d3:0d:53:da:9e:95:26:b5:59:e6:16:a0:bf:d8:
         6a:88:3e:46:62:0f:be:dd:5c:de:1a:48:4e:a2:7c:5e:95:15:
         04:d0:b0:45:9a:b1:bc:57:c1:cd:62:32:48:02:08:d8:3d:6d:
         6b:ac:c8:97:af:70:bf:b8:34:4b:b4:09:4f:80:f5:fc:ea:cc:
         da:f1:9c:a2:ac:f8:d6:9d:ca:53:af:2a:b7:e6:bc:e4:0b:55:
         f2:42:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:28 2024 by rpki-client on console-fra.rpki-client.org