Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa
File:                     d0848359-cc87-3030-8bdc-18cf636b6387.roa (raw, json)
Hash identifier:          3GLKrYTKFMve5+ibGphgB/E+GP75fYWehLIFlqwDIGw=
Subject key identifier:   41:C1:35:B5:2F:07:86:BF:22:01:0A:D3:76:04:94:CB:0B:17:C0:A7
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285845131AE192E9651B5E324067E0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     6621
IP address blocks:        67.44.188.0/22 maxlen: 22
                          67.44.172.0/22 maxlen: 22
                          67.44.0.0/17 maxlen: 17
                          67.44.180.0/22 maxlen: 22
                          67.44.164.0/22 maxlen: 22
                          67.44.244.0/22 maxlen: 22
                          67.44.248.0/22 maxlen: 22
                          67.44.236.0/22 maxlen: 22
                          67.44.240.0/22 maxlen: 22
                          67.44.220.0/22 maxlen: 22
                          67.44.224.0/22 maxlen: 22
                          67.44.212.0/22 maxlen: 22
                          67.44.216.0/22 maxlen: 22
                          67.44.228.0/22 maxlen: 22
                          67.44.232.0/22 maxlen: 22
                          67.44.176.0/22 maxlen: 22
                          67.44.184.0/22 maxlen: 22
                          67.44.160.0/22 maxlen: 22
                          67.44.168.0/22 maxlen: 22
                          67.44.128.0/21 maxlen: 21
                          67.44.208.0/22 maxlen: 22
                          67.44.200.0/22 maxlen: 22
                          67.44.204.0/22 maxlen: 22
                          67.44.252.0/22 maxlen: 22
                          67.44.192.0/22 maxlen: 22
                          67.44.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e1:92:e9:65:1b:5e:32:40:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=70d85476-8742-4efb-bf0f-2f148008f70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:84:23:c5:3b:ef:5b:ce:11:98:f8:cd:4c:9f:
                    69:cf:96:c7:05:ab:aa:b5:7c:51:e6:50:3c:4a:b8:
                    4b:4f:53:e9:55:12:f0:cd:d8:c1:aa:0f:8b:8d:fc:
                    41:32:05:09:a0:4f:6d:92:a4:0f:7a:87:89:e1:81:
                    af:25:7a:10:86:d0:83:55:83:12:87:5b:49:1e:a2:
                    50:f5:90:76:03:31:37:b6:d7:1e:1c:43:0f:df:38:
                    c6:ec:73:3c:fe:da:f1:ee:c7:73:9a:4d:b2:f2:5c:
                    15:54:ee:ac:9e:ed:ba:ab:e5:d4:56:23:62:01:4f:
                    ac:a1:bf:94:30:3d:67:c6:19:33:b9:48:86:a3:42:
                    fc:38:70:0b:b8:63:48:ca:70:d7:61:d0:f3:f1:ce:
                    f8:94:47:11:0f:d8:2b:c4:1f:4b:ca:85:1d:75:19:
                    8a:52:d6:aa:80:63:2d:2a:3c:2a:4e:2d:64:8a:83:
                    a6:30:25:95:26:58:ef:bc:ae:e6:60:b6:2a:1f:88:
                    ce:42:f1:80:b0:43:95:be:04:a4:d8:8f:9b:f1:0b:
                    b8:d1:1a:b9:3e:e1:84:60:11:8a:8e:bd:66:c7:a5:
                    41:f2:6b:e6:c4:50:89:3e:16:d7:be:9d:53:4f:44:
                    e3:06:b4:a7:9f:b4:eb:f8:7e:ea:77:84:1b:cf:0e:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:35:B5:2F:07:86:BF:22:01:0A:D3:76:04:94:CB:0B:17:C0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d0848359-cc87-3030-8bdc-18cf636b6387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.0.0-67.44.135.255
                  67.44.160.0-67.44.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:5f:b5:0a:2c:1c:36:fe:d3:d3:94:f2:d1:3d:72:9c:6b:
         dd:73:bf:f8:3d:ca:44:50:5a:e1:e1:6d:27:00:11:dd:63:f4:
         e7:f8:f7:8f:32:03:66:bf:c1:ae:ee:15:69:66:35:04:d9:93:
         d2:18:05:c5:eb:5e:59:5d:64:d9:96:23:3b:58:d8:5e:db:00:
         6e:7c:7b:33:fc:94:7c:54:ed:79:7c:39:c3:83:f6:62:2b:45:
         22:58:7c:58:69:e4:9d:3e:35:0b:64:c0:c4:42:8b:bb:e2:cc:
         24:75:12:2e:08:10:c0:78:bb:7a:e4:77:15:a1:b7:3a:9e:84:
         13:24:bd:a3:a7:bf:c2:3e:44:ce:8e:27:a0:70:48:96:e4:64:
         e4:ce:fe:fc:ae:0a:20:f2:06:87:ec:75:12:86:d2:35:76:ba:
         98:27:17:b5:d5:05:a2:1d:77:04:85:6c:a0:53:ea:fa:47:e8:
         c1:7f:12:1c:a3:72:a4:07:8c:55:25:0d:6f:51:2d:23:bd:02:
         09:36:60:2b:96:e6:e9:81:23:59:e5:f4:fb:9b:4d:f9:aa:5a:
         b3:e4:58:16:22:ab:db:5d:09:78:fd:83:96:20:d9:91:eb:e3:
         87:d1:c0:8f:99:d9:8d:e5:fe:ff:5e:70:4f:a4:3b:29:9d:90:
         23:c9:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:58 2024 by rpki-client on console-ams.rpki-client.org