Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa
File:                     0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa (raw, json)
Hash identifier:          yjYOj1AbeUGuVY+1e6bdqvm7BSmdcdYyMi2o0hQcHnE=
Subject key identifier:   2C:A3:AD:97:36:08:5D:09:9E:AD:6C:88:EB:05:C4:F8:D6:B6:C6:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AAB504BD7DFACA79A0840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33657
IP address blocks:        71.200.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:ab:50:4b:d7:df:ac:a7:9a:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=bbdaf691-74d5-4b58-8f01-ac48783913c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:24:3f:f6:10:e1:d0:e8:07:cc:c2:f3:cf:
                    f4:59:fc:49:9b:4b:a6:ed:93:fc:54:5b:00:89:71:
                    53:54:4a:99:c0:61:99:7a:a9:a8:15:03:5e:1a:5a:
                    17:fa:d3:80:df:e8:da:98:a1:e9:4d:a7:43:a3:2a:
                    fd:21:e6:b0:e4:ce:87:2e:24:a4:cf:8f:7f:d0:18:
                    d5:67:44:de:7f:ce:9e:b9:e9:6c:38:f5:78:90:a9:
                    6a:fc:45:43:90:cc:53:67:0f:b9:e8:de:a6:a8:87:
                    d0:dd:46:19:42:4c:9c:69:40:5e:79:ff:3c:11:25:
                    02:5d:81:0c:e6:da:d5:a2:e2:e7:38:4a:0b:b1:6c:
                    7b:1e:3b:a4:67:5b:78:aa:21:cf:a7:7c:ba:6c:76:
                    0a:da:4a:ce:04:f0:e3:25:51:f8:34:71:9a:76:d7:
                    9f:74:9b:f0:b1:8e:ee:41:9e:68:f8:c3:6b:65:7d:
                    81:d2:17:8e:28:17:a9:8b:6b:38:80:e3:94:40:e2:
                    99:36:0e:8b:06:30:2b:6e:e5:41:a6:55:0b:85:e6:
                    90:67:ce:36:0a:0b:65:82:70:84:9f:fd:82:30:a2:
                    b9:9a:57:a2:dd:9f:d4:43:bb:1e:6f:1a:2b:f4:27:
                    e0:8e:bb:ce:c7:4f:f3:60:8a:a3:d9:e5:76:25:5e:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A3:AD:97:36:08:5D:09:9E:AD:6C:88:EB:05:C4:F8:D6:B6:C6:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.200.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:29:f6:4f:3a:9d:a9:72:74:7c:b1:5e:50:9a:39:5b:57:5d:
         9a:d2:51:13:3f:e8:80:57:3d:55:79:ad:d3:14:38:aa:73:9e:
         b0:18:e6:57:4e:f5:34:95:c0:6d:8d:eb:98:75:da:02:74:c2:
         1c:d5:24:e8:32:f7:b8:0c:1a:c0:ee:8a:53:8f:a0:11:21:41:
         cc:1c:57:b9:79:9a:d2:8b:b3:74:f6:20:ec:cf:46:10:47:5c:
         21:77:22:1f:6b:f0:6b:4e:96:b7:9a:da:38:6a:41:5f:05:1f:
         b7:db:fa:cc:e1:72:ac:c6:ff:73:71:68:b4:6e:88:27:df:8c:
         33:a5:d2:d1:0f:af:38:e7:f8:73:82:b6:59:b4:cf:28:9e:bf:
         ac:e3:68:3f:fa:dc:64:3a:84:2b:d0:f4:9f:c4:e8:83:9c:6e:
         18:53:75:09:1c:c7:8d:23:52:30:cc:e6:d1:a7:74:cb:45:cf:
         b8:5b:e5:18:d5:28:9a:f5:57:dd:ab:3e:85:7e:ef:a8:5f:e6:
         43:e1:c9:0e:2f:fb:7b:b3:8d:79:90:7d:73:69:51:44:9d:f2:
         f6:30:c9:48:14:f2:78:24:43:e5:f5:bf:03:73:22:ca:9d:19:
         05:1d:e2:cd:5f:66:85:40:11:f0:58:4c:f7:2c:b6:6f:21:dd:
         4d:10:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:27:58 2024 by rpki-client on console-fra.rpki-client.org