Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
File:                     88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa (raw, json)
Hash identifier:          4zKvVMbXLxiY4zmrKiSiNT0wfXHJXzK+HNneYeBxmuI=
Subject key identifier:   72:6D:45:6F:8A:E9:A0:00:39:74:1F:A2:9A:B6:28:4D:0F:A8:C5:72
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285847362B5A33F72B82813F0FAD00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     12129
IP address blocks:        66.103.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5a:33:f7:2b:82:81:3f:0f:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=a9f7fec3-ddab-4908-8ac7-1d3d0d5c059a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:98:80:6d:0c:fe:ad:83:67:83:54:a9:db:
                    c0:cc:00:a7:2f:b5:82:74:da:5d:3c:27:38:b0:38:
                    97:e6:a0:8c:c7:40:49:a9:4a:36:dc:29:7d:1e:d2:
                    b0:7c:0c:1e:3c:53:86:3c:b7:6d:d7:18:90:f6:ab:
                    9b:a1:0c:be:2e:33:03:ff:65:20:f5:be:a9:6a:70:
                    53:81:93:4c:d4:42:2b:4f:6f:fd:b7:95:d5:2f:d6:
                    b3:96:49:de:29:df:56:92:69:eb:d1:be:0e:bf:64:
                    e4:f6:47:d7:f6:e1:d3:b9:d0:72:0a:e1:e1:5b:3d:
                    99:16:93:58:33:c3:1b:f8:c6:8d:42:d0:f1:0b:ee:
                    d6:c5:e7:d8:bb:94:12:bc:7c:59:e7:a1:89:71:76:
                    46:c0:a1:dc:fa:01:d9:d5:38:cf:f5:1e:88:06:b4:
                    28:9a:ae:6e:63:49:ec:a2:b9:0b:0a:c7:6f:34:8a:
                    fc:e6:da:cd:47:a6:f4:b1:08:1c:16:99:bb:98:1c:
                    a1:60:0c:74:31:f8:99:84:9a:45:42:28:04:db:f7:
                    27:55:5e:ba:4f:e9:a1:ab:68:40:ab:9c:e7:96:ab:
                    c0:42:74:ba:eb:05:0f:93:95:5c:e6:ec:16:87:b8:
                    e1:74:76:db:a7:32:5d:c1:84:1b:97:65:c9:1b:f2:
                    55:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:45:6F:8A:E9:A0:00:39:74:1F:A2:9A:B6:28:4D:0F:A8:C5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/88acdfbc-c3a5-3458-9125-dfdb5b8d432c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:98:94:ed:e0:07:60:f7:ce:a5:60:c0:8e:a7:4d:5a:55:a7:
         f8:6a:fe:3f:b2:18:8a:db:c7:6d:0c:10:0a:e7:49:1a:0c:4d:
         aa:e2:98:cf:e1:ef:58:cb:54:1b:f2:87:bb:7e:91:5e:05:e3:
         2f:8f:9c:fe:89:c6:fe:32:ca:0b:67:c4:2a:de:7f:8d:03:53:
         59:62:35:3e:c6:f8:68:ce:03:6c:07:8b:b2:e9:31:5e:68:e1:
         7d:39:e2:99:b4:19:c1:83:cf:5f:8c:7f:6a:da:ba:bc:c9:cb:
         c8:16:4d:62:bc:1a:b7:45:30:50:61:33:e1:4b:4b:6e:ac:44:
         38:29:4c:e3:dd:79:a8:0d:59:f3:73:d0:2a:2a:e2:ad:05:15:
         b1:da:55:35:23:cf:17:f9:9d:de:73:c9:0a:3b:ea:5d:5f:f0:
         b8:ae:1e:60:3d:f0:e3:89:55:57:4a:3c:7b:0b:cf:b6:11:ae:
         17:e2:69:4c:22:43:8f:e2:d2:73:94:33:4f:35:de:e7:51:b7:
         f1:2a:36:70:8f:dc:2a:db:ef:dc:4e:a3:2b:3c:a8:6c:d3:2d:
         50:ac:ed:f0:09:1b:7c:33:07:d0:57:61:f2:6f:76:78:ee:b4:
         06:bc:f9:65:a6:92:75:80:22:71:2e:40:bd:68:35:a0:40:2a:
         ed:7d:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:23 2024 by rpki-client on console-ams.rpki-client.org