Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa
File:                     f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa (raw, json)
Hash identifier:          NkKC4AF4DWqwEHZE5CE9KCnx7ZPw7l4ZE3svWSOgrnw=
Subject key identifier:   46:BB:4D:F6:2F:D3:49:E0:F6:23:DC:88:E8:C7:25:81:A1:18:01:7B
Certificate issuer:       /CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
Certificate serial:       010D0C9F43285845E193C90003F31FABD0416B80
Authority key identifier: CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     54145
IP address blocks:        204.194.22.0/23 maxlen: 24
                          2620:95:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c9:00:03:f3:1f:ab:d0:41:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=081a3246-7fa2-4218-b914-274238f7fdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:d9:c5:5b:9b:17:19:af:ee:53:f0:aa:fb:
                    3b:7d:20:60:74:47:f1:98:65:6d:d3:54:dc:1a:41:
                    67:f3:70:a7:88:8e:b0:0c:a2:30:a5:70:2d:f4:b8:
                    52:eb:12:bd:b4:a3:67:71:a9:70:27:e0:c7:e0:b4:
                    4e:b3:90:b9:8e:52:e1:ce:47:a6:fd:b3:b0:5a:30:
                    2b:f7:6a:30:32:06:d7:cc:11:7f:c1:fb:2e:c2:ff:
                    6e:d4:c8:ac:84:7e:96:04:ca:5f:1a:e5:ac:b7:2d:
                    47:7e:be:bc:02:59:3d:91:be:9d:89:1e:ce:34:c0:
                    bb:63:21:e4:cc:df:f0:92:b0:77:be:d7:88:9e:08:
                    9a:4e:76:61:ed:66:06:96:ac:41:d1:62:af:17:1e:
                    0a:88:c8:03:b6:4d:b6:6a:48:cf:15:28:f6:c4:ef:
                    a4:d5:fb:a8:cb:20:50:98:c2:56:b8:56:42:ca:64:
                    ee:a1:e6:93:db:36:03:c0:ec:cc:f4:16:91:e7:08:
                    cd:15:0d:de:e0:23:60:89:04:45:65:bb:be:35:a5:
                    e6:29:66:45:5c:26:a6:fd:65:5a:c0:6d:55:00:39:
                    d2:6c:7f:26:15:e5:32:5b:47:52:30:fb:18:e2:5e:
                    3c:4e:75:32:07:de:22:fb:bf:6b:91:54:48:5d:86:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BB:4D:F6:2F:D3:49:E0:F6:23:DC:88:E8:C7:25:81:A1:18:01:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl

            X509v3 Authority Key Identifier:
                keyid:CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.22.0/23
                IPv6:
                  2620:95:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:fa:49:ec:59:9e:0d:4f:0a:e4:c3:df:9b:a2:7c:39:68:
         8f:e5:bc:1e:ec:56:ba:42:5b:11:70:80:f8:79:d1:08:19:5e:
         25:fe:58:cb:41:2f:19:50:9a:a3:9e:2a:33:1d:27:19:d7:88:
         71:19:f8:35:23:c4:cd:7a:0c:cf:10:20:20:8e:0e:b8:b6:48:
         30:e0:bd:0f:14:af:fa:9b:ff:f2:cc:3e:6b:a4:0e:a9:44:72:
         a0:1b:3e:90:87:1f:03:0b:9f:28:df:7d:e7:e1:81:50:eb:60:
         9d:0b:3d:d5:93:de:42:18:fa:d4:82:ec:a9:6b:ff:a4:14:8d:
         37:39:e4:f4:87:69:92:7e:19:30:1c:fd:92:a1:91:52:f1:98:
         2d:52:ce:5d:6b:7d:64:95:b0:28:c2:11:66:a2:23:62:40:2a:
         31:b8:55:36:e8:fa:78:9d:0b:d1:92:c5:36:3e:82:a0:d1:0e:
         33:60:e8:19:2b:c9:9e:e3:ee:b7:d5:02:78:a5:72:f3:f7:89:
         33:87:51:36:21:e0:31:0a:25:cf:7a:d2:03:5e:26:66:84:39:
         9e:22:20:3d:46:0f:65:e0:69:5a:65:ed:a8:00:6b:48:01:4a:
         b1:3f:e6:f8:18:95:9d:a5:cb:51:43:37:cb:f0:8c:b2:a7:ce:
         f9:1c:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:31:19 2024 by rpki-client on console-ams.rpki-client.org