Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa
File:                     5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa (raw, json)
Hash identifier:          uQu4BKnxuGobbT8IHu9V64TpJRaXrFsBT+kcjs4W1sA=
Subject key identifier:   0F:92:C5:E7:C1:16:A1:DB:4E:A3:4B:7F:55:FA:5F:05:C5:5E:B5:04
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584558C83E4751C9ADC31DD45700
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     6621
IP address blocks:        67.44.16.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:3e:47:51:c9:ad:c3:1d:d4:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=1e908922-cf86-4945-ac33-490baff27d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:82:84:be:b3:da:a0:13:94:3e:54:b2:e5:
                    c6:0f:3f:3d:8f:86:4e:20:34:fc:58:1b:3c:0a:00:
                    3e:13:bd:18:34:b2:22:81:e6:33:3d:81:3e:47:c3:
                    d7:fc:e7:60:c8:b5:df:25:cf:bf:76:08:d1:6a:7f:
                    eb:e9:a3:42:b3:a4:27:f8:c3:86:ba:59:49:21:7f:
                    44:98:d5:30:d7:9f:09:52:f2:08:6e:4d:60:e9:dd:
                    91:89:18:b5:74:dc:5e:99:4b:52:94:a8:2d:4e:fe:
                    84:3b:8c:c1:81:05:df:03:48:f7:d7:b8:5d:bb:4f:
                    82:ed:dd:ea:b3:2c:3d:b9:8f:b3:6f:a2:41:25:67:
                    02:0e:2c:66:48:da:b5:45:16:32:a2:33:3b:db:92:
                    5a:d2:55:17:e0:69:e4:dc:aa:0d:65:1c:5d:fd:2d:
                    97:89:65:7c:3f:5e:fa:ae:a2:f3:ca:4f:a4:22:9b:
                    03:19:57:f2:94:5a:15:bc:72:97:0a:f6:9b:49:67:
                    e7:38:ea:cd:4f:19:5a:72:0d:01:b3:70:0a:ca:6c:
                    ea:e9:71:9c:d7:e0:11:aa:72:2d:fc:1c:09:50:83:
                    36:1a:07:1e:b1:73:48:d0:a3:11:4a:3e:5a:3a:00:
                    cc:14:cf:ce:be:19:5f:03:53:11:c9:73:6f:89:b5:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:C5:E7:C1:16:A1:DB:4E:A3:4B:7F:55:FA:5F:05:C5:5E:B5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:00:3b:b4:31:de:c9:e3:91:db:aa:8e:93:c5:87:4e:04:
         38:97:d6:94:a2:54:ee:86:0c:79:ee:e7:46:0f:5f:66:0f:6c:
         f5:67:43:6e:74:53:5c:77:8c:4c:dd:bd:e3:ba:86:ba:4a:d6:
         be:b9:87:3c:da:ed:fe:55:56:d4:d0:85:89:40:61:5b:7a:12:
         b6:77:16:38:cb:69:ce:c0:f9:6c:ec:f5:8b:22:1a:fe:55:e1:
         cf:84:a1:91:85:76:8b:80:2c:ab:b9:bb:b3:01:7d:66:92:d7:
         53:02:21:30:38:02:78:15:7e:20:18:a4:9e:19:3a:e3:65:ae:
         06:6b:51:af:bb:80:34:ee:0e:0b:59:f0:12:34:b0:65:20:c7:
         16:4e:82:17:52:a7:86:8e:c1:a2:87:33:59:59:a0:7f:09:57:
         63:ac:2f:6c:10:7f:6e:a4:32:98:bc:cc:db:9f:ba:4a:63:fa:
         90:ad:80:40:a3:7b:83:23:1b:f6:2e:b6:0d:94:63:1b:12:da:
         5f:0e:35:eb:75:be:b9:af:5d:57:1b:32:99:c1:bd:ff:60:5a:
         b4:01:b7:55:0e:5a:54:af:5d:7c:5e:e4:77:ce:66:26:33:98:
         db:71:e3:a9:63:a7:61:7d:99:d4:1a:13:35:4e:4a:b5:bc:43:
         26:75:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:40 2024 by rpki-client on console-fra.rpki-client.org