Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
File:                     2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa (raw, json)
Hash identifier:          56mQzwWpL7siG+/eWKcFCKC+AefDy2AGqPhaHYvbiws=
Subject key identifier:   EF:E2:03:E5:7A:E5:21:63:16:25:E0:6A:3D:6F:E2:DD:97:98:07:86
Certificate issuer:       /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial:       010D0C9F43285845BA7E33EE85A0C3114A1FAB00
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     11998
IP address blocks:        162.252.134.0/24 maxlen: 24
                          162.252.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:33:ee:85:a0:c3:11:4a:1f:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=482e4807-d2c8-49a1-98b5-051578aea650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:82:d8:70:5b:06:df:d9:d6:39:1c:8a:57:
                    70:f0:04:29:45:6e:ab:20:06:2d:70:74:03:f9:d2:
                    3b:50:a5:c6:66:77:96:34:fc:2f:cb:be:05:8d:bb:
                    b4:f9:f7:f0:9f:fd:55:19:e0:15:5b:a8:eb:eb:12:
                    2f:24:0e:dd:eb:1e:60:e6:a0:e9:0d:d3:94:9e:8a:
                    a8:c9:9f:69:35:94:a3:c4:f3:af:25:15:af:e9:04:
                    a1:76:3d:77:c7:0a:a9:3e:2e:f8:f0:21:d7:89:e1:
                    24:1c:be:38:24:75:78:16:61:15:da:54:85:82:43:
                    00:e1:f1:86:9e:a7:91:aa:e0:85:96:5d:f4:a4:81:
                    46:e4:b3:67:f8:53:b5:ce:30:e8:bb:41:23:31:3b:
                    1e:79:92:88:fb:85:33:a1:0a:39:7a:5d:ed:e9:24:
                    d7:74:9a:66:62:66:0e:cd:5b:e3:03:a8:c7:d9:05:
                    58:c5:1a:80:a3:0f:af:cc:a2:36:7d:05:3c:de:63:
                    ff:44:97:1d:c8:48:64:16:6d:74:d2:b9:fb:20:28:
                    cd:07:b9:dd:4b:d9:3c:6a:eb:e8:76:18:81:79:6e:
                    dd:7e:2b:db:26:b5:a5:30:15:e6:1a:2b:eb:7e:4f:
                    11:42:d9:76:82:6c:92:70:73:e9:a9:c8:c9:5e:1e:
                    ba:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:03:E5:7A:E5:21:63:16:25:E0:6A:3D:6F:E2:DD:97:98:07:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl

            X509v3 Authority Key Identifier:
                keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:83:de:5f:c2:bd:99:5d:13:2b:8e:6b:a1:66:ec:1d:a1:2e:
         85:5c:2b:1b:38:ea:a6:07:f7:93:00:c3:b3:aa:7f:d2:c8:69:
         c8:a6:ed:22:75:3e:fa:c8:46:d9:10:9e:ea:67:14:f3:1b:a7:
         d1:cf:99:b8:72:66:34:62:12:f7:cb:fc:cd:4f:67:33:ab:bd:
         85:01:5b:73:48:7c:6b:a9:2c:4b:d2:8f:35:08:f9:60:37:5c:
         be:a9:27:ee:64:24:3e:f5:c4:2f:02:9b:80:fb:84:d8:b1:86:
         ca:62:90:a5:33:e2:71:c5:7b:ae:47:01:80:fb:4f:db:d3:b6:
         6b:a4:0e:07:4c:3c:a7:06:03:57:46:da:9e:de:93:f1:a5:4e:
         38:5f:6b:8c:47:99:85:55:53:95:59:0a:84:76:3c:84:3d:50:
         a8:4c:5b:16:fe:08:6d:26:3f:ef:52:8c:88:04:43:61:91:da:
         ec:df:c7:81:f3:69:03:85:24:17:ea:0e:7e:38:fd:5c:fd:c6:
         e5:e1:10:38:41:02:f7:82:4a:86:c0:57:7a:da:3c:8f:df:a7:
         20:32:21:74:34:0e:eb:b3:b2:88:ca:7b:78:11:97:0b:08:14:
         73:0d:ea:c6:5f:80:74:10:9b:0c:52:18:b3:5b:ec:e6:3b:58:
         d5:9e:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:46 2024 by rpki-client on console-ams.rpki-client.org