Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa
File:                     a43cf8c1-2497-3003-b8de-65129c6513b9.roa (raw, json)
Hash identifier:          iTN8jFWRtjrKLbwH09/fd/gSa5aCbhPlBhLCPu4goS4=
Subject key identifier:   6F:4B:14:F3:D1:07:50:11:50:39:AA:69:19:E4:16:73:CE:6E:23:42
Certificate issuer:       /CN=129538be-cccb-40d0-8a7d-ac02bf86976a
Certificate serial:       010D0C9F43285845BA7E2AECF9672EBC9ADE7DC0
Authority key identifier: ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        198.212.172.0/22 maxlen: 22
                          198.212.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2a:ec:f9:67:2e:bc:9a:de:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129538be-cccb-40d0-8a7d-ac02bf86976a
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=3e68f96b-414f-41e2-8480-4c7ef8bc2d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:38:65:18:75:fb:61:91:36:d3:1f:55:98:
                    19:6e:bb:69:bc:b6:b4:61:72:9e:37:35:97:b4:87:
                    bb:4d:f0:af:61:bb:0d:2c:70:19:cb:04:bc:cb:a9:
                    60:47:e8:fe:4c:2f:61:a9:3b:64:c6:02:1b:99:20:
                    ef:64:4a:52:3a:40:b4:a4:ce:b6:81:1c:64:c4:72:
                    35:dd:40:9c:90:76:fc:0d:38:bc:f0:c0:3b:c7:61:
                    65:11:92:01:c4:f7:4d:92:5b:34:c9:47:90:05:24:
                    ca:b3:1a:82:39:4b:36:f5:04:e3:70:c8:99:68:e2:
                    c8:ba:34:73:95:71:cb:e1:69:e8:cb:26:be:f3:39:
                    6a:bd:f1:a0:f1:67:09:9b:cd:f9:85:71:8f:41:ef:
                    87:a6:98:87:06:98:a1:90:d9:a6:35:21:eb:d4:da:
                    dc:cb:da:78:20:53:f5:6e:1a:c6:18:0a:83:c4:e1:
                    62:d4:b3:ef:2f:9d:4d:e0:cd:ae:4b:60:55:52:31:
                    6c:d7:e8:64:4c:aa:1b:cd:ea:60:ec:a1:91:22:e7:
                    f4:5e:42:2b:77:0d:37:cf:6f:5a:e9:3b:8d:37:ab:
                    e6:fb:a4:4d:a0:19:0c:31:0a:d5:c7:d1:f0:eb:20:
                    28:a8:c4:bd:8c:b2:92:55:8e:4f:5d:0f:94:16:1d:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:14:F3:D1:07:50:11:50:39:AA:69:19:E4:16:73:CE:6E:23:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/a43cf8c1-2497-3003-b8de-65129c6513b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a/129538be-cccb-40d0-8a7d-ac02bf86976a.crl

            X509v3 Authority Key Identifier:
                keyid:ED:6A:E0:E8:80:3F:B4:BB:6D:95:60:DC:8E:5D:F0:3F:8B:2A:D0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/129538be-cccb-40d0-8a7d-ac02bf86976a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.172.0-198.212.176.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:82:65:8f:6c:43:2c:10:15:d2:db:8a:38:7f:14:b4:f2:72:
         fe:51:1c:03:4d:5e:b0:e8:5f:86:e1:ad:e6:70:6c:dd:c2:d1:
         0f:e8:97:ef:6f:98:e4:02:8b:ff:3b:78:57:e4:f5:45:44:61:
         55:68:12:c6:69:ae:01:85:7b:db:6e:d6:a0:2c:97:ce:93:6f:
         2e:4e:e0:10:01:ef:06:9b:8c:24:ec:6a:dd:b6:d1:ba:a0:f4:
         1f:3e:06:cf:1e:80:fe:f3:d3:3a:8e:b8:bd:e5:14:3d:b6:ae:
         5f:0a:e6:1e:b6:da:19:4b:a4:95:50:9a:43:ac:9b:ab:45:11:
         9d:b5:1f:f5:f5:72:ab:7e:bd:e5:ff:00:d5:cb:59:c5:7d:87:
         23:7a:59:ab:4f:fc:d8:83:ab:39:e7:b5:48:09:a2:a7:93:d4:
         42:30:50:0c:af:6b:cb:e9:5f:1a:8b:b5:94:86:32:e0:69:84:
         80:ab:a3:30:ce:f2:6d:29:68:76:6d:02:0b:cf:10:42:f4:0c:
         78:dd:a6:0e:50:c3:77:0f:62:ec:09:7d:b1:80:47:38:82:48:
         37:05:57:6e:9a:eb:6a:12:51:3d:b7:64:13:8b:dc:07:fd:ae:
         1d:31:c7:d9:07:ec:60:22:76:be:6e:a7:de:3d:55:3d:86:bb:
         c2:16:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:34 2024 by rpki-client on console-fra.rpki-client.org