Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa
File:                     8a37a60a-eebd-367b-baaf-9445a8a0316f.roa (raw, json)
Hash identifier:          lr/1xrvJ8O6dKKpTqU0sB0/TH7CKRiy3hEhWFC31fMM=
Subject key identifier:   94:1E:37:8E:85:D9:EE:39:21:83:6C:62:ED:02:38:46:8C:35:6C:94
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845DC98122C0BC38575AF61925A
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa
Signing time:             Mon 13 May 2024 18:10:19 +0000
ROA not before:           Mon 13 May 2024 18:10:19 +0000
ROA not after:            Sun 11 Aug 2024 18:10:19 +0000
asID:                     3561
IP address blocks:        208.132.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:98:12:2c:0b:c3:85:75:af:61:92:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 13 18:10:19 2024 GMT
            Not After : Aug 11 18:10:19 2024 GMT
        Subject: CN=28a358fc-92ae-43d6-8999-5184d98dc67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:88:d9:07:63:e1:67:28:61:d6:e8:72:fb:
                    ed:ce:d1:55:38:3d:e1:c6:83:9c:77:0e:63:74:c7:
                    17:2f:ca:7b:ca:f1:bc:c4:02:f8:1f:c6:68:5d:a4:
                    01:5b:96:a3:1f:8a:eb:bf:b7:bc:9d:8c:5a:22:db:
                    7c:d2:18:f9:6c:a1:4d:00:43:e6:12:cb:85:68:38:
                    24:dc:b8:7c:ad:0c:ec:11:e0:60:0d:39:40:d9:0f:
                    fb:8c:3b:07:70:80:c3:fb:e1:f6:d8:1b:a6:c1:5a:
                    2d:7a:ba:b2:ac:c2:8e:e3:ba:49:83:c5:49:f0:e3:
                    3d:99:d2:b7:dd:2f:53:83:f3:21:3e:d3:fd:ef:f9:
                    af:f0:6b:0f:9f:57:37:5f:04:33:0c:c8:97:35:6a:
                    83:8c:a6:cd:9d:87:8c:45:66:f5:f7:90:2c:84:6c:
                    1f:9c:5b:fe:35:b0:2f:28:6a:70:81:aa:24:f0:c4:
                    6e:d3:47:94:38:c7:c0:10:de:98:7b:74:1f:fb:3f:
                    ad:53:41:cf:54:24:f8:5d:bd:e1:33:66:4d:09:ca:
                    4e:6f:4c:3c:1d:f7:e1:b9:6e:cd:90:ce:1e:42:0b:
                    c0:a2:d4:99:4c:ef:a4:76:16:6c:18:ab:46:a6:28:
                    39:4e:ea:57:e6:d5:49:17:2e:6f:09:40:63:57:49:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1E:37:8E:85:D9:EE:39:21:83:6C:62:ED:02:38:46:8C:35:6C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.132.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:60:c5:3e:a8:e7:49:aa:3c:8e:13:57:18:e9:80:04:bf:2c:
         65:6b:77:50:4e:b4:ba:4c:3f:c9:dd:e1:29:2c:d8:12:e8:d3:
         bb:4c:f6:3c:ea:da:aa:6f:e6:c1:df:c1:60:d3:5c:c2:dd:d7:
         8f:68:2b:5a:0c:57:c6:3d:cb:d5:4e:0d:38:59:68:cc:88:9b:
         e7:ae:1a:62:fb:d4:22:ac:76:0d:ff:ab:67:54:c5:43:b8:3d:
         a2:6b:e1:30:de:02:db:ff:a4:5c:5e:07:d9:da:3e:2a:42:2f:
         5e:bf:84:31:a2:28:dd:38:52:1a:7f:3a:1d:5f:f0:d3:79:6f:
         fc:0f:25:d0:3d:78:55:cd:37:e7:d1:b2:71:1a:94:07:ef:ad:
         78:40:4b:92:ac:32:43:8e:ce:70:42:fd:c0:90:5d:bb:01:9e:
         57:81:7d:8a:d8:28:89:0a:48:97:c3:33:d5:91:8a:a7:00:a7:
         2d:4c:94:d0:2d:48:20:d5:fb:f2:a1:12:ea:3c:7d:b5:b9:3c:
         a2:fd:bd:ec:52:5a:e3:2e:0f:10:41:4b:83:1b:bd:b1:d6:2a:
         72:e5:89:11:4f:a3:c9:1c:a2:20:07:7a:8f:5b:a8:7b:21:a8:
         ed:e0:16:20:fa:cb:58:6c:99:ca:d1:58:36:41:ef:50:f3:48:
         03:0b:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:27:37 2024 by rpki-client on console-fra.rpki-client.org