Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
File:                     3401e74f-a936-383a-95be-c5719615d9b9.roa (raw, json)
Hash identifier:          8fVmUlszbQyY/5DaF0mkm1l+jyxK6KVhD6jC9C3kmJs=
Subject key identifier:   63:C4:06:C6:9B:C8:52:04:9E:AC:FA:64:29:60:44:51:3E:ED:F3:63
Certificate issuer:       /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial:       010D0C9F43285845A9BE09B0F6F31C8E59B35C80
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     13959
IP address blocks:        216.150.36.0/24 maxlen: 24
                          216.150.34.0/24 maxlen: 24
                          216.150.38.0/24 maxlen: 24
                          216.150.37.0/24 maxlen: 24
                          216.150.41.0/24 maxlen: 24
                          216.150.40.0/24 maxlen: 24
                          216.150.33.0/24 maxlen: 24
                          216.150.35.0/24 maxlen: 24
                          216.150.32.0/24 maxlen: 24
                          216.150.42.0/24 maxlen: 24
                          216.150.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:09:b0:f6:f3:1c:8e:59:b3:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=071a825e-de94-4cf4-ad93-07337dc17244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:51:d6:6e:d5:65:3a:18:5a:28:24:2f:41:
                    e6:28:8f:56:f6:a7:31:b7:9b:d1:c4:99:86:d8:13:
                    50:9b:29:e2:be:c7:8d:0d:8d:d7:1a:70:75:71:b4:
                    c6:06:18:ea:70:85:18:fe:2e:5e:9d:88:1b:89:13:
                    60:c2:1d:24:20:1e:c1:41:81:fb:2a:33:53:22:e1:
                    1c:c1:d3:e6:b5:e6:ab:cc:5c:8f:dc:c0:50:d4:5f:
                    ef:de:50:40:d2:b1:a9:92:2a:f7:a4:d5:65:c7:3d:
                    ed:13:9b:c8:d6:26:92:64:c9:3b:88:ec:3b:42:18:
                    df:8c:76:b0:cc:6b:f2:0d:bc:30:06:5e:88:ec:c4:
                    dc:52:9d:15:de:66:bd:b7:0c:e5:8f:2e:b2:b4:7d:
                    59:07:ba:67:ce:c6:49:9d:f9:f5:13:fb:4e:4a:14:
                    42:cb:64:4d:f4:44:25:75:43:c4:06:72:cb:21:ff:
                    89:78:5d:d2:d8:4e:4b:c8:f9:ac:23:e0:95:48:dc:
                    5f:dd:47:58:e4:78:2d:19:d6:e3:8c:00:c6:83:ed:
                    d3:eb:b4:a7:fb:79:89:2f:0a:42:19:b7:2c:aa:eb:
                    28:74:a7:e5:d7:57:b5:c3:10:6a:d6:4b:59:5d:e6:
                    a9:31:9b:3c:9e:5c:f0:c5:c3:80:3b:81:b8:14:a4:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C4:06:C6:9B:C8:52:04:9E:AC:FA:64:29:60:44:51:3E:ED:F3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl

            X509v3 Authority Key Identifier:
                keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.32.0-216.150.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:35:d2:8f:ee:fd:69:5f:7b:01:b7:af:a3:3d:f4:62:b9:c4:
         22:64:b3:8a:2d:95:a0:8f:1f:d0:96:68:f6:a5:92:a6:e8:ac:
         b9:90:71:8d:44:80:35:67:41:01:aa:ad:be:26:1f:3c:01:d4:
         e3:1d:ab:ce:ac:b1:97:56:e3:db:e3:9f:c3:c2:a2:2b:c8:32:
         62:16:57:4c:c1:51:29:90:fa:ad:3c:e4:f2:99:ca:45:48:c9:
         7b:f2:6f:54:6e:af:51:aa:f4:0d:af:74:a9:99:ed:4f:41:7b:
         b3:71:80:68:80:45:de:2f:e0:ed:a0:b8:4f:28:52:26:87:bd:
         0c:e7:da:fe:6e:f1:ce:a9:67:21:a9:69:9a:cc:2a:78:d5:de:
         25:37:36:92:9d:77:d9:cb:44:10:36:3a:1f:52:a7:12:06:2f:
         e4:f0:19:73:5c:de:e7:fd:a4:8c:49:a4:62:bc:86:e0:8e:e0:
         5d:04:17:d4:26:2c:8b:df:c3:17:8f:ba:dc:66:24:b3:37:9c:
         a4:e0:66:54:42:56:b6:4d:0b:79:6f:ea:cf:a6:5b:32:42:9e:
         7d:fb:57:77:b7:f2:99:10:8d:da:ab:b2:65:e7:4f:85:6f:5f:
         ec:a1:f4:8e:0e:c2:0c:f5:b5:57:88:8d:62:c3:6b:78:65:f4:
         ab:17:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:54:38 2024 by rpki-client on console-fra.rpki-client.org