Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa
File:                     cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa (raw, json)
Hash identifier:          s5tcSzE0FXl7RWCiE56N6WmjFwCjTIvtfAcup0MdsZY=
Subject key identifier:   4A:4A:A4:DB:96:D7:27:7E:53:3F:40:EC:72:D4:48:7F:AC:7A:22:4D
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285845CB9DE955C1A4233B1B45AD40
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa
Signing time:             Tue 07 May 2024 16:13:20 +0000
ROA not before:           Tue 07 May 2024 16:13:20 +0000
ROA not after:            Mon 05 Aug 2024 16:13:20 +0000
asID:                     44273
IP address blocks:        208.109.139.0/24 maxlen: 24
                          208.109.140.0/24 maxlen: 24
                          2603:4:1014::/48 maxlen: 48
                          2603:4:1015::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:9d:e9:55:c1:a4:23:3b:1b:45:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: May  7 16:13:20 2024 GMT
            Not After : Aug  5 16:13:20 2024 GMT
        Subject: CN=5c75d833-a0e9-471d-b9fe-cd1bef3d5442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:7f:87:78:3a:51:ff:bd:2d:b4:9f:f6:43:
                    eb:61:d9:0d:68:2d:c5:fa:54:a0:e0:61:ec:2f:f5:
                    7e:a9:e8:67:14:68:1f:37:20:09:ce:48:1d:f7:9d:
                    bd:65:dd:65:72:43:b7:d4:d8:74:e1:25:4f:cc:b0:
                    a7:c9:9e:e7:88:45:eb:ba:36:b8:12:f9:ed:b2:12:
                    a8:f9:aa:86:6f:74:cc:51:56:b6:6b:bd:a1:14:4a:
                    02:2a:00:ce:bb:87:dc:e4:8f:11:2c:cc:db:d0:9b:
                    2b:f7:8e:79:7a:78:e5:d1:54:94:57:78:b5:b9:4f:
                    43:b9:f7:68:c7:f1:ac:f2:56:33:f9:7f:02:19:59:
                    0d:6d:85:85:a6:26:b7:ae:62:c0:38:44:2a:bf:c5:
                    0f:cc:82:39:d8:7a:b4:b3:fb:b7:73:40:63:89:e9:
                    e7:84:00:df:11:19:85:41:13:97:1a:2d:bd:51:61:
                    9d:de:97:db:b4:20:37:87:3e:20:b8:78:30:0f:c4:
                    d9:8c:e1:3d:68:62:f3:5b:0c:ee:ee:71:34:b1:2c:
                    de:87:3a:e9:71:0e:7e:4b:f9:26:ce:2a:6e:ba:db:
                    7e:a8:2a:5d:09:b1:52:22:d5:d0:b1:7a:88:a4:e4:
                    a3:44:10:97:b5:a8:c9:96:d8:7f:4b:f2:98:ee:a8:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:A4:DB:96:D7:27:7E:53:3F:40:EC:72:D4:48:7F:AC:7A:22:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.139.0-208.109.140.255
                IPv6:
                  2603:4:1014::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:95:27:75:17:69:72:3d:75:8c:5c:a3:1e:82:d1:a4:21:
         03:25:55:0b:97:7e:59:04:d4:a4:f5:83:ed:84:3b:26:03:b8:
         85:0c:0b:8c:c2:92:aa:80:7b:45:70:84:62:5f:08:c7:0b:bc:
         1a:98:da:b8:fe:57:31:15:8a:ab:e5:ce:8e:49:18:6f:4c:a8:
         46:53:d7:73:bb:54:45:30:a2:47:d8:f9:ba:bb:90:d1:e9:70:
         34:4a:21:f3:35:df:0e:59:7b:d0:de:d0:57:ca:67:7e:53:3d:
         e6:31:82:e3:bf:5f:ed:de:de:68:b6:15:54:cc:ca:4f:3e:17:
         ef:6c:8c:27:ca:bf:48:62:36:0d:c9:c6:d5:f4:ef:4f:f8:5b:
         2d:9d:3b:ad:b4:e2:ac:9d:de:8e:08:b9:fd:b1:92:dd:25:de:
         c7:61:c8:cf:15:7f:e1:b5:c5:f2:9a:f2:17:23:49:32:ed:3b:
         85:d2:d9:14:d5:58:18:0f:4e:6c:28:2d:c6:a8:c5:5d:8f:25:
         56:00:06:75:54:10:63:40:52:c5:17:ff:80:0a:88:40:60:b9:
         2b:b4:24:9a:d3:44:c6:85:f6:e3:6a:e3:d1:9e:21:31:9c:01:
         45:ce:57:db:95:16:0f:e0:2c:4f:9b:2f:36:d3:95:e3:91:57:
         e0:45:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 14:03:24 2024 by rpki-client on console-fra.rpki-client.org