Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
File:                     0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa (raw, json)
Hash identifier:          XZyfwkglU43nXHInRsKavuluZp3XPYNrulbsgmS6QMU=
Subject key identifier:   EE:94:A2:F7:48:D2:D0:79:3B:3F:30:D7:F4:9A:0D:BA:42:0E:D0:D4
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F432858454D9D7A623AEADA01F06EAA40
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     26337
IP address blocks:        108.179.192.0/18 maxlen: 24
                          192.254.128.0/17 maxlen: 24
                          216.172.160.0/19 maxlen: 24
                          192.185.0.0/16 maxlen: 24
                          192.232.192.0/18 maxlen: 24
                          108.167.128.0/18 maxlen: 24
                          50.116.64.0/18 maxlen: 24
                          96.125.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7a:62:3a:ea:da:01:f0:6e:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=6c321736-a830-428c-9ad6-7217ed99b136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:1f:63:70:66:16:a9:78:36:4f:9c:21:e2:
                    2b:f4:8c:0b:bf:f0:31:16:89:8a:7b:53:22:77:77:
                    4c:2b:b7:ae:3b:58:18:b9:16:2b:32:07:11:8d:68:
                    7f:8b:da:5a:2f:38:7b:a0:52:6a:20:0e:98:96:ce:
                    c9:50:ba:d9:3b:2f:f4:a2:14:6b:4d:5c:47:a6:48:
                    64:50:f4:f8:79:93:09:fb:f3:03:93:01:64:2c:b6:
                    34:97:9d:b8:be:d5:de:e6:82:16:c7:a4:61:d3:04:
                    ba:07:d5:a5:ec:8f:ac:2b:00:2d:42:10:66:01:bf:
                    eb:7f:85:93:40:13:50:39:d2:13:c6:ef:0b:69:e2:
                    48:48:11:00:d2:75:a6:54:f4:c8:ec:2e:2c:c5:6f:
                    5e:98:16:66:00:25:5d:79:da:1f:77:79:f1:4e:12:
                    6e:15:7e:af:47:0a:b9:91:6e:91:5b:1e:35:a5:bd:
                    14:c2:4f:21:1d:2f:bc:23:5d:a7:d3:32:f0:31:70:
                    04:96:0a:dc:4f:09:db:9e:1d:fa:02:dc:4b:25:5d:
                    a2:6e:a2:41:08:75:c7:a6:6a:58:72:4c:a0:48:9f:
                    35:3e:f0:bd:1c:8b:3c:ef:b9:c4:f4:79:d4:00:f3:
                    ef:39:5e:6e:14:86:01:46:c5:db:95:d2:6f:4b:92:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:94:A2:F7:48:D2:D0:79:3B:3F:30:D7:F4:9A:0D:BA:42:0E:D0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a56a0f0-405a-3140-aaf6-95c33c33f32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.179.192.0/18
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:bb:cc:23:55:2e:9a:81:80:55:ba:4f:83:6e:42:0b:7e:7d:
         2d:fb:fa:e2:fc:c5:1d:ea:25:0c:92:b9:b9:32:a6:a3:8a:d7:
         ce:8a:fe:79:8b:b4:13:1e:fd:1b:7f:f7:fd:27:d3:23:5b:88:
         e6:45:21:a9:ba:79:db:a3:8e:b8:bf:3d:71:72:42:cf:be:8a:
         d7:63:16:96:52:a8:a6:8d:d3:d9:bb:77:f1:d5:34:d0:75:9c:
         7b:26:2d:3d:3e:40:a1:1b:eb:10:93:ee:33:89:46:ec:5a:f4:
         09:48:36:ec:65:69:9e:c6:80:9c:fb:39:8b:6b:0d:f3:2c:72:
         3e:29:07:04:bc:d5:a2:ca:36:42:ab:4b:dc:b9:1a:b5:49:c4:
         a4:1d:ed:bd:df:d5:07:18:81:30:2c:64:50:2d:ae:63:dc:49:
         b7:73:d4:01:9d:c4:42:c0:8d:93:f0:c6:52:75:8b:c2:76:49:
         d9:af:fb:0e:18:bf:a9:ac:e5:38:0b:8f:9c:83:26:58:b2:ce:
         95:47:e1:fd:97:e4:e9:54:89:91:03:c7:3a:3c:eb:01:29:d5:
         26:a6:ae:36:2f:c2:e9:8b:1e:b2:5f:df:f8:ed:f4:5d:6d:52:
         dd:c9:e9:d4:23:26:27:3b:f3:a7:46:68:cf:9b:21:09:c2:e0:
         a1:6f:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:23:30 2024 by rpki-client on console-ams.rpki-client.org