Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/992199eb-1cac-3def-82a6-bf5a5d7744cd.roa
File:                     992199eb-1cac-3def-82a6-bf5a5d7744cd.roa (raw, json)
Hash identifier:          kFNGotUfzWAUmb72s+C91hJP6f80By1X9F2hUz7BXBw=
Subject key identifier:   63:EC:BC:CB:74:FE:FC:D8:37:C3:15:4C:7E:3B:B1:96:60:65:7F:57
Certificate issuer:       /CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
Certificate serial:       010D0C9F43285845D12700E337B568DECDE65800
Authority key identifier: 09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/992199eb-1cac-3def-82a6-bf5a5d7744cd.roa
Signing time:             Thu 09 May 2024 15:48:36 +0000
ROA not before:           Thu 09 May 2024 15:48:36 +0000
ROA not after:            Wed 07 Aug 2024 15:48:36 +0000
asID:                     13911
IP address blocks:        66.51.96.0/20 maxlen: 20
                          198.161.206.0/24 maxlen: 24
                          216.194.64.0/20 maxlen: 20
                          216.234.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d1:27:00:e3:37:b5:68:de:cd:e6:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9ac143-3f26-4b9b-8997-3d3fbd310f8f
        Validity
            Not Before: May  9 15:48:36 2024 GMT
            Not After : Aug  7 15:48:36 2024 GMT
        Subject: CN=9e5f3748-aaa1-4833-94ac-b6e7da6c8a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:09:34:7b:94:f7:64:53:bd:0a:3c:5f:08:
                    56:ad:b3:dd:82:8b:f0:3d:19:23:b9:90:41:b4:b6:
                    00:9e:61:1e:17:5c:39:17:4f:71:70:8c:c7:a5:a4:
                    8f:77:a5:5d:48:1f:ac:a1:90:23:01:59:a3:8e:a4:
                    18:e0:8d:42:cd:b4:ef:67:c1:5c:34:3b:0a:5c:7c:
                    f1:3d:51:4a:3e:1d:e8:c2:a0:3d:24:65:84:ef:d0:
                    fb:1e:b8:dc:3c:61:45:71:b0:40:5c:b8:f8:f4:df:
                    6e:ef:4b:bc:4b:14:66:99:d1:d8:a1:1b:07:b7:d8:
                    1c:0f:8e:bc:fd:78:12:92:7c:52:45:78:bd:db:ad:
                    cd:75:62:54:af:06:f4:0b:76:08:bf:64:29:37:7b:
                    0b:ca:7d:02:64:cf:ad:03:00:11:65:f8:0a:66:82:
                    10:6f:0e:0b:72:c0:e2:f8:5f:7c:23:ac:d8:9f:14:
                    85:c4:9b:7c:5c:57:4e:8d:44:a8:51:39:9d:9f:e2:
                    21:c1:97:66:d4:37:ec:2b:6d:0d:78:d9:33:42:15:
                    e3:c6:d2:fa:6f:91:73:67:91:94:e0:f7:88:82:e3:
                    f6:dd:38:0a:2c:3d:1d:54:40:6f:b9:8c:26:dc:9e:
                    af:b3:90:d1:bc:50:4f:cc:d0:64:f0:76:2c:c4:4f:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EC:BC:CB:74:FE:FC:D8:37:C3:15:4C:7E:3B:B1:96:60:65:7F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/992199eb-1cac-3def-82a6-bf5a5d7744cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.crl

            X509v3 Authority Key Identifier:
                keyid:09:6A:67:2E:DB:60:79:88:AA:30:A8:4E:AC:8E:B8:A2:3D:59:18:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef9ac143-3f26-4b9b-8997-3d3fbd310f8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.96.0/20
                  198.161.206.0/24
                  216.194.64.0/20
                  216.234.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d8:93:5a:c5:83:02:d3:b4:9c:7b:2e:1a:d3:65:bf:e3:0f:
         39:a7:8b:86:37:63:ab:fc:b5:b8:eb:36:56:e1:98:74:6e:97:
         da:2d:56:18:6d:fd:27:91:4c:ac:6a:f7:d9:85:98:9c:d8:d3:
         f5:d7:22:a8:87:bf:8b:8c:a0:fd:af:75:e6:c4:34:41:31:31:
         cd:a0:b4:74:4d:d4:63:15:96:b3:24:3b:9a:80:42:65:68:65:
         07:98:fc:08:ac:3f:d1:0b:5b:44:f5:3f:2f:44:c4:fc:ae:83:
         35:14:47:8a:54:e3:c2:37:d8:fb:80:0f:a9:fd:b2:71:62:79:
         cc:04:43:bb:f6:a2:9c:0c:e1:cf:76:5b:f1:a3:2e:8d:ea:2b:
         ec:ac:b1:4f:ac:0f:22:aa:61:b3:00:99:70:64:1c:2e:1e:32:
         21:2c:8a:d2:a5:1a:d8:7d:00:ef:88:80:4e:a3:8d:bb:c1:69:
         3a:b2:b9:7d:d6:d3:53:72:f1:9d:8a:dc:61:68:d1:15:c0:8e:
         54:b6:bf:9a:d0:ce:b1:87:99:6a:29:60:3b:95:84:4a:2c:3c:
         ea:57:19:00:cf:c8:33:b5:25:76:16:0c:c8:f6:f0:d1:bc:d4:
         eb:72:fc:52:15:8f:5e:75:5c:a3:4e:50:71:33:5a:a6:18:03:
         66:39:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:25:00 2024 by rpki-client on console-fra.rpki-client.org