Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
File:                     5322ee79-9c85-3eee-9d78-27a6894643bc.roa (raw, json)
Hash identifier:          x3BEpAXI+k22LwI/AGUuFWOA7Tv8eYqezjdL8sY6uHA=
Subject key identifier:   6C:48:3D:3F:41:B8:C2:9A:55:46:A6:40:B8:7E:A8:25:30:C2:90:AA
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584591E12F17A4215D4607E6C740
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
Signing time:             Tue 16 Apr 2024 23:52:00 +0000
ROA not before:           Tue 16 Apr 2024 23:52:00 +0000
ROA not after:            Mon 15 Jul 2024 23:52:00 +0000
asID:                     396982
IP address blocks:        192.111.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:91:e1:2f:17:a4:21:5d:46:07:e6:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Apr 16 23:52:00 2024 GMT
            Not After : Jul 15 23:52:00 2024 GMT
        Subject: CN=4e32a8c4-cefd-45f9-af7f-6d8da1644464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d1:6f:25:62:cc:43:37:40:fb:88:40:4e:f9:
                    24:68:4a:71:b1:76:b3:ff:24:b3:83:dc:20:b9:73:
                    73:40:1f:10:1f:e6:36:eb:d8:cc:9c:f5:5b:b3:50:
                    08:a6:a4:0a:9a:e5:1c:c3:d7:64:fc:10:0b:07:4e:
                    6e:fb:bc:5b:1a:7a:e0:18:97:ea:55:23:90:f4:57:
                    e8:3e:60:53:4f:48:8a:94:2b:0b:b7:b6:53:6c:f3:
                    1a:f3:46:94:dd:1d:2f:86:15:16:de:0f:54:26:73:
                    2c:2f:2e:25:4d:ce:84:89:f1:72:ad:63:ce:e8:cd:
                    72:23:4e:e1:47:a0:b0:02:88:a2:33:cc:c5:f4:77:
                    0f:ad:53:18:6a:b5:2f:02:a8:a3:c3:26:7a:60:03:
                    a3:a7:6a:18:9d:47:65:47:72:38:43:71:f8:aa:24:
                    86:a1:e3:78:4c:08:02:5c:30:74:9b:67:c0:b6:6a:
                    b4:03:c6:61:5d:e3:0f:de:4d:ce:fb:18:09:b5:17:
                    1b:6d:1c:cc:05:33:18:aa:1d:50:4b:5e:db:bd:a6:
                    1b:2b:5f:6c:30:ee:72:9e:86:3e:85:d1:3c:03:12:
                    c1:17:29:6b:5e:00:e0:8d:e2:b7:5a:05:5d:89:67:
                    c2:dd:1b:3e:1d:3a:46:f9:cf:e1:98:de:7b:11:9f:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:48:3D:3F:41:B8:C2:9A:55:46:A6:40:B8:7E:A8:25:30:C2:90:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:f5:ec:c1:46:54:35:39:a5:77:7a:46:63:89:4e:c0:a4:
         48:8f:ff:8d:59:15:fd:40:cf:6f:6a:5f:05:2f:76:00:5a:16:
         8c:ac:df:89:1a:35:55:0d:3a:6f:2c:97:90:6e:1e:38:49:db:
         d2:13:cb:ee:88:23:62:98:a2:97:0c:f4:07:d3:41:5b:be:94:
         02:a2:b7:ef:82:fe:ca:70:59:ec:c2:e0:21:11:05:a3:5f:cd:
         87:fb:62:e2:9d:cd:ea:16:14:09:c0:f2:cc:a3:1e:d7:62:a3:
         b7:4d:dd:07:2a:ba:b0:32:f3:18:d5:60:d6:69:96:ce:b2:fe:
         f2:20:1d:57:75:a8:c0:d4:36:8d:9a:48:f4:08:af:b3:b8:17:
         b8:1d:d8:46:83:10:97:66:e7:92:21:62:64:25:b1:3b:3d:93:
         ee:28:2b:50:b2:28:41:a0:e2:3a:a3:76:03:07:31:d1:04:0d:
         4b:21:f0:0f:d7:c9:4b:cf:4c:f8:bf:48:d0:1c:a5:ef:b4:5b:
         ae:94:56:d6:73:c6:11:85:f8:1b:4a:53:44:e3:29:84:ba:18:
         2a:62:fd:98:04:cd:ce:15:76:4b:df:17:70:98:7a:8a:ab:5d:
         e6:ce:14:e6:62:be:dc:00:c7:46:ff:50:f4:fc:fd:54:6b:2c:
         da:8b:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:54:06 2024 by rpki-client on console-ams.rpki-client.org