Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca279d5e-bac0-35e1-919b-ce688fae689b.roa
File:                     ca279d5e-bac0-35e1-919b-ce688fae689b.roa (raw, json)
Hash identifier:          hxWfO0HVaKxfm6Tp1h3ly0NQ1ZqgP3+9x3a2xbOWJcI=
Subject key identifier:   5E:4A:10:7C:34:43:34:6C:6E:44:C9:8D:86:E8:E7:0B:DA:C3:D7:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B7F89B280C4702E7A8B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca279d5e-bac0-35e1-919b-ce688fae689b.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33650
IP address blocks:        71.24.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:7f:89:b2:80:c4:70:2e:7a:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=08c86844-8a66-4d64-83d3-6a1776ea2295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:c5:e1:96:e0:bc:bc:ac:2a:f9:84:57:7c:
                    a8:a2:d5:fd:0f:4e:f9:73:6e:90:aa:2a:19:4c:60:
                    7d:6a:b4:5e:da:4c:39:31:fd:5f:25:b8:8d:8c:bf:
                    82:11:49:41:21:50:a7:7a:fc:5e:3e:ad:a4:04:fd:
                    49:73:a9:dd:bf:d0:5c:d4:85:5d:0c:3d:5d:53:f9:
                    6b:1d:c9:31:d7:95:36:42:2e:67:39:3d:fd:25:94:
                    31:e2:4e:1f:02:ac:7c:8a:da:cf:aa:27:e0:ec:5e:
                    54:05:02:16:f5:68:25:27:15:79:b8:c9:be:7b:b0:
                    57:6c:52:5c:78:30:0e:90:79:e3:5c:b4:04:4f:18:
                    49:84:9e:bc:0d:68:c3:ee:33:07:3b:ae:da:d1:04:
                    08:20:1b:22:20:47:a9:16:35:19:1d:6e:b2:33:1b:
                    73:8f:44:ef:98:49:60:cc:7f:54:3a:92:22:4d:f0:
                    5c:39:56:5b:f6:c6:25:a9:cb:f2:7f:be:9d:ae:0b:
                    ce:1a:a5:d4:f6:9a:22:31:66:7e:71:d7:a5:e4:9e:
                    c7:58:4b:b5:e0:7a:71:91:08:96:c7:27:55:e2:82:
                    68:18:53:f8:27:7c:ca:a5:0c:04:b9:ae:a7:87:4d:
                    af:3a:b2:7a:cf:0d:e3:0b:a9:ac:5b:0f:ad:55:51:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4A:10:7C:34:43:34:6C:6E:44:C9:8D:86:E8:E7:0B:DA:C3:D7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca279d5e-bac0-35e1-919b-ce688fae689b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.24.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:af:f4:72:e0:24:d5:58:a0:09:a0:be:6a:4d:65:b4:1b:1c:
         56:e7:08:db:94:b1:ff:75:82:37:14:cf:0e:9a:23:d4:a1:7a:
         b5:3a:47:67:d7:7a:54:27:86:a9:92:5b:6f:c4:16:77:7c:b7:
         f2:b2:b7:33:ae:c2:2c:46:3a:ae:5d:1c:c3:37:29:72:8d:1b:
         dc:8c:52:18:c8:06:ad:54:17:09:06:97:b0:a7:a7:cc:ab:4f:
         20:cf:55:a3:27:f0:62:84:fa:50:ed:81:bc:0e:75:3b:36:69:
         06:38:1c:69:2a:72:af:85:cf:01:60:87:45:3c:5b:d1:50:7c:
         bc:51:24:90:9b:0a:37:aa:23:62:cf:3b:0a:d0:fe:3f:51:4e:
         5e:b4:3a:8f:2e:66:fd:f7:98:b6:f5:ca:73:12:ed:d6:99:ff:
         96:92:07:4a:19:71:9c:0e:86:cb:8b:e7:42:1a:e8:37:80:e3:
         7b:47:76:35:0d:a0:7b:bd:0d:0e:20:af:e0:93:80:ee:2f:1a:
         a4:74:17:5e:cc:ef:e0:d8:25:c0:4f:3a:c7:d3:8b:be:38:a4:
         1e:e5:2d:09:9b:83:65:d6:48:25:d8:b7:ef:10:17:19:66:0d:
         2b:52:65:a6:8e:9e:72:f1:b5:66:32:e7:ba:83:ad:14:44:94:
         26:18:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:14:47 2024 by rpki-client on console-ams.rpki-client.org