Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
File:                     f72adc35-9eb4-3118-8c85-285ff915009f.roa (raw, json)
Hash identifier:          /JB6+QA0lXoZrWuEhEohBa1BxAIROy5Alg1dY4Xtax0=
Subject key identifier:   26:18:C7:74:92:FB:F3:AD:6D:4F:E5:10:D1:79:06:75:D8:73:B9:FA
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584526A5AA744A19BBD9C4F152C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     396982
IP address blocks:        198.154.224.0/19 maxlen: 19
                          108.179.208.0/22 maxlen: 22
                          108.179.216.0/21 maxlen: 21
                          50.116.96.0/21 maxlen: 21
                          96.125.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:aa:74:4a:19:bb:d9:c4:f1:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=9c7d0b94-b049-4794-8b5d-49666bd4ddbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:b7:3e:66:ee:5e:7d:e5:fd:c6:6c:19:7f:80:
                    ff:d0:b5:a6:9a:39:ff:1d:ab:c4:50:4d:75:bb:51:
                    b5:e3:d9:32:d8:b7:3e:86:8f:57:b8:bb:03:cf:6b:
                    31:7c:80:2d:f2:a1:c9:8e:06:08:40:ac:d8:f1:ba:
                    31:e3:28:1b:69:8b:d1:b1:32:02:e3:60:cf:6c:e8:
                    1a:28:0a:41:81:c5:a8:78:d2:17:56:d9:42:69:bc:
                    5c:9d:a7:df:fe:1e:b1:de:48:bd:37:05:21:fd:84:
                    51:1a:47:3a:af:b2:d5:62:1d:4d:85:80:f0:f4:f8:
                    3d:40:0f:23:85:20:61:74:5e:47:a1:7c:18:55:f2:
                    1f:1c:2e:d0:32:1f:00:c9:82:ab:bd:81:4d:a6:75:
                    e3:5f:02:0c:3e:f4:a9:99:fc:ec:70:17:c0:f9:1d:
                    68:b7:4c:5b:35:4b:20:a4:b2:b7:b8:6b:a1:74:28:
                    b8:e0:e3:d3:40:43:1c:f5:6b:73:87:2a:a7:18:29:
                    d3:e9:12:73:8d:2a:99:6c:73:23:c2:a2:3a:1e:be:
                    ad:73:a8:73:27:3a:59:f0:2e:99:39:d4:70:34:04:
                    48:ae:0e:9d:3b:47:75:2c:01:d2:dc:04:cb:0e:0d:
                    87:8c:98:48:10:e9:28:79:b5:4f:3a:24:48:94:d1:
                    d4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:18:C7:74:92:FB:F3:AD:6D:4F:E5:10:D1:79:06:75:D8:73:B9:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/f72adc35-9eb4-3118-8c85-285ff915009f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.96.0/21
                  96.125.168.0/22
                  108.179.208.0/22
                  108.179.216.0/21
                  198.154.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:95:e4:17:a6:d6:b9:d3:1c:b4:a0:22:48:05:ea:f0:87:
         fe:27:a5:0c:95:3b:d4:83:de:99:d0:b5:d1:ba:0c:ed:ff:6e:
         0d:d2:6d:50:94:3e:16:a9:c2:5b:2f:b7:da:3a:96:25:e7:a0:
         b2:46:d5:66:04:26:a8:15:7b:70:a7:1b:b4:30:d1:fc:bf:6b:
         63:51:5f:b4:a1:71:64:d1:13:68:d7:b9:f4:11:d5:66:40:3b:
         2d:38:99:25:05:48:b0:e9:f4:c6:c2:4f:da:6f:0b:26:62:dd:
         be:9a:83:bb:c2:69:25:c2:b0:cd:b3:b4:1f:69:8a:3c:1e:d7:
         eb:28:31:a9:e6:73:e8:9c:88:99:c0:ec:94:8b:72:bc:f4:e8:
         a5:5f:8e:69:c5:21:b5:4d:01:69:f8:56:d1:00:41:90:2e:e3:
         b4:e0:5c:8e:c0:0a:ed:73:dc:57:c9:e7:cc:d1:d5:77:ed:bb:
         c5:07:e6:a5:cd:27:a7:35:de:03:69:36:6c:bb:9e:c0:2b:6d:
         3c:ce:9e:93:f0:10:09:88:6d:12:1b:13:0a:55:a0:94:0a:e0:
         a2:3f:97:ef:93:90:b2:39:ad:c8:de:dc:23:35:14:14:63:f1:
         0b:bb:a2:79:25:3e:eb:5d:2e:55:7d:8e:23:c2:71:88:14:81:
         42:2e:b8:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 5 15:30:25 2024 by rpki-client on console-ams.rpki-client.org