Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa
File:                     a407ccb2-6152-35cb-88b0-b37aec438e5b.roa (raw, json)
Hash identifier:          g8p/7bIS+ffozMyNfGX2dfroXjvkRDpNlepZUunpMUU=
Subject key identifier:   BB:5D:38:07:76:D9:F0:A3:7D:FA:42:9F:C8:2F:21:48:EC:B1:05:1A
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F43285845E45E6D13DDB6C52405A736C0
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     36289
IP address blocks:        128.254.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:6d:13:dd:b6:c5:24:05:a7:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=4bc6c2eb-a775-4efb-a5bc-60fd814ff42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:4e:00:63:b2:00:5c:f9:02:fe:74:c7:2b:
                    91:bc:fc:3e:16:fd:09:e6:e3:87:63:f8:09:ea:2e:
                    8f:6f:cc:a0:c3:27:2d:71:87:14:bf:2d:e4:d1:cf:
                    52:72:14:fa:46:e3:9d:c0:d3:14:4e:ef:d7:5b:dc:
                    86:13:04:d0:4a:aa:25:10:b8:86:23:18:48:68:b7:
                    59:de:3a:2b:0a:38:88:de:42:34:fc:24:8d:13:4c:
                    23:61:bf:09:72:25:87:4b:53:d0:7d:46:1c:e8:d3:
                    b9:44:3b:19:96:99:50:0d:d9:0d:d6:ea:61:b2:5e:
                    32:4c:6b:3d:9a:79:fd:50:cd:27:74:9d:82:18:32:
                    5f:ff:e8:c9:72:90:42:d2:fe:74:e2:58:5e:cb:aa:
                    70:a7:33:e9:cd:3d:57:27:6c:fc:ac:eb:ed:b9:88:
                    bd:2c:21:de:ba:4a:34:d5:31:a8:06:e0:5c:89:47:
                    13:5f:d3:32:2e:50:58:d4:7d:1f:cc:92:99:f4:36:
                    d1:45:2e:39:dd:df:84:00:53:40:4b:f1:3c:b9:58:
                    75:67:39:3d:f2:d3:14:d2:c8:55:74:15:da:98:05:
                    67:c5:7d:b9:b7:10:14:ab:42:b4:4f:4d:47:a9:e7:
                    70:ef:f8:16:7a:0c:4a:a7:87:84:54:a6:7a:34:97:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5D:38:07:76:D9:F0:A3:7D:FA:42:9F:C8:2F:21:48:EC:B1:05:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/a407ccb2-6152-35cb-88b0-b37aec438e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:e3:b6:63:b9:22:69:59:ca:04:79:d0:0e:b1:ee:82:96:
         98:30:52:06:9b:25:92:b4:7e:48:84:b7:f9:e4:81:9f:96:5b:
         5b:43:00:04:8a:2d:0c:8f:a1:c9:57:54:34:46:41:0c:44:fd:
         5d:af:e5:db:79:49:ba:67:97:5f:46:1c:57:ee:02:eb:05:5e:
         d1:14:92:e6:19:45:f3:0d:74:fb:92:35:23:c4:2d:c6:62:d6:
         18:3d:5d:f2:5d:f0:33:27:19:be:3a:b7:d1:12:99:da:0b:c2:
         20:c0:db:cd:46:f8:5e:37:12:b9:2a:16:34:0c:2e:49:ba:b2:
         05:4f:c5:2b:05:0a:99:60:4b:ae:d9:82:f8:f6:9b:d3:30:4c:
         ce:43:df:d9:93:f0:e7:a6:6a:a9:d6:b7:99:60:de:07:c9:f4:
         04:9b:f7:df:99:a9:0b:f9:ee:ef:59:61:c0:af:67:58:57:ae:
         37:b6:69:f4:bb:03:d1:05:78:7b:2b:5d:d0:a3:04:89:f6:77:
         18:7f:b9:43:3e:57:96:9e:6e:60:6c:d4:38:c6:bd:23:1a:71:
         bb:33:02:80:13:c4:99:c1:65:c0:e7:14:04:cb:3f:ec:b3:f9:
         16:ab:ef:8a:45:ad:90:f0:5a:42:ee:97:07:d4:b5:5a:0b:f7:
         64:07:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:24 2024 by rpki-client on console-ams.rpki-client.org