Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd1b7c40-59c8-3887-b238-131d2cbdf89f.roa
File:                     dd1b7c40-59c8-3887-b238-131d2cbdf89f.roa (raw, json)
Hash identifier:          M7aGINmkE+nAHwsnJoiOV3ekIyK0MAH15/knWAJqd28=
Subject key identifier:   26:C5:DC:5F:39:65:A2:06:74:A4:65:17:08:0E:26:F3:BC:1C:D6:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B34242DFFFDEEB6EF7800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd1b7c40-59c8-3887-b238-131d2cbdf89f.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33666
IP address blocks:        69.243.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:34:24:2d:ff:fd:ee:b6:ef:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=4b324f92-65b8-4324-9117-84d9225eb86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:95:b1:38:c3:a3:ca:68:b5:95:68:21:fc:
                    f8:db:3b:4b:5b:b4:9c:1c:6b:ea:16:cf:50:71:ff:
                    4f:72:4b:44:04:67:ab:0f:6a:3c:04:e7:b7:41:f3:
                    38:6c:d6:8d:22:d6:30:5f:87:a5:07:b4:ed:e8:2b:
                    5b:9c:0e:46:fb:e8:e8:ff:6f:46:13:a5:1d:b6:18:
                    db:f9:05:4b:d0:c2:e2:ad:42:df:a2:7b:0d:b5:e2:
                    fc:6a:72:72:fa:7a:53:37:7d:54:86:b5:a9:59:59:
                    08:a0:d3:e4:9e:0b:d2:5e:0a:76:05:b0:6f:4c:f0:
                    59:2b:32:4c:22:5e:ad:e1:ef:97:92:6f:9f:53:95:
                    c6:8b:6c:7f:bc:6e:d9:e9:c0:02:5c:f9:8e:ba:3c:
                    a1:ea:76:c5:1e:82:ff:a9:69:ef:e9:c4:ee:96:51:
                    d9:4d:54:97:85:b8:e2:84:29:db:4b:a7:f7:05:99:
                    81:52:9f:3a:12:7f:08:80:b4:04:9c:81:e6:00:5c:
                    1a:95:b6:05:51:63:a3:ff:0d:cc:b2:da:be:bc:01:
                    c8:eb:0b:32:5a:8b:c5:bd:ac:aa:5e:f3:54:35:07:
                    19:24:3f:7f:28:7c:35:9b:51:d5:76:de:9a:64:23:
                    9f:83:a2:58:45:cd:f9:5f:e4:fa:5e:58:ff:f6:a7:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C5:DC:5F:39:65:A2:06:74:A4:65:17:08:0E:26:F3:BC:1C:D6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd1b7c40-59c8-3887-b238-131d2cbdf89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.243.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:ba:d1:cf:ec:49:19:d7:1c:aa:9b:bc:16:f8:18:e6:5b:
         7a:2a:08:75:9e:a9:fe:5b:91:3e:c8:81:12:a9:d6:a4:3a:e9:
         dd:fb:a8:1e:56:7b:36:c4:33:b9:15:49:de:d9:c3:ef:ad:5e:
         36:3e:6f:64:77:ca:b9:be:08:f4:53:cc:82:12:69:71:9b:7d:
         8d:6a:7f:74:98:a7:4a:21:bd:d0:87:48:54:bd:ac:16:07:ae:
         3f:a3:60:da:6f:33:32:d8:e2:61:73:49:a7:63:cb:d8:42:5a:
         96:5a:23:66:77:1b:d8:7f:7c:9d:b3:3e:22:4f:c4:29:82:db:
         a5:aa:ee:7e:c7:09:52:2b:61:d6:d7:eb:3c:25:24:b3:d8:3f:
         7e:38:63:0e:89:48:d3:f1:ff:72:21:b7:a7:e3:8c:e7:74:00:
         a8:b7:5f:00:da:30:0f:72:41:72:75:ab:08:34:dd:a7:72:f6:
         10:53:58:03:df:50:bf:61:28:d4:06:e3:fb:c5:bd:e6:fe:a9:
         cd:65:a8:46:9a:8b:5b:dc:1e:45:54:ff:51:ef:8f:bd:c3:cc:
         1f:e2:f1:a6:ce:2e:7a:17:4a:48:1a:16:4f:1e:9d:73:66:de:
         0f:5f:75:aa:3f:05:ef:39:96:9c:2b:a9:1d:b0:1f:4c:a4:70:
         33:13:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:20:50 2024 by rpki-client on console-fra.rpki-client.org