Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
File:                     f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa (raw, json)
Hash identifier:          5HC7V8mpf24AkN/ToSfQ8eKjpRqyC29CiZ7lM0RJbNw=
Subject key identifier:   49:2E:F7:F2:25:17:93:BA:7A:24:D8:BB:A8:98:D0:08:1A:FC:29:56
Certificate issuer:       /CN=39fdcce5-d149-4129-97c3-c60e86600fb8
Certificate serial:       010D0C9F43285845DC7295E46F50C1502C11A780
Authority key identifier: 8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
Signing time:             Mon 13 May 2024 16:54:47 +0000
ROA not before:           Mon 13 May 2024 16:54:47 +0000
ROA not after:            Sun 11 Aug 2024 16:54:47 +0000
asID:                     15121
IP address blocks:        66.102.144.0/20 maxlen: 24
                          198.105.28.0/22 maxlen: 24
                          2604:a780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:72:95:e4:6f:50:c1:50:2c:11:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fdcce5-d149-4129-97c3-c60e86600fb8
        Validity
            Not Before: May 13 16:54:47 2024 GMT
            Not After : Aug 11 16:54:47 2024 GMT
        Subject: CN=7a4a377e-1896-4789-95c6-9129dc6a74bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:97:a8:84:a6:f5:ce:10:4e:6a:51:43:12:
                    22:87:8b:a8:6e:ef:06:da:f0:9f:74:b2:49:2e:2d:
                    c5:e4:ea:af:cf:90:0d:b6:da:15:6c:49:b2:06:82:
                    8b:a2:e3:01:64:9f:71:61:81:e5:75:27:bf:60:7b:
                    9d:06:b6:b1:c4:2d:0e:7d:09:c0:ab:45:14:bb:da:
                    cd:2a:66:66:98:30:8f:8e:90:24:93:e3:ec:bb:b0:
                    3f:51:19:6a:63:69:8d:37:47:d2:43:19:98:a8:bc:
                    56:1a:a3:8e:00:43:06:61:67:e9:08:4d:5e:b8:94:
                    8b:0f:6c:06:ec:40:fe:cf:3b:58:cf:cf:62:ff:99:
                    b0:5f:df:37:a6:bf:0a:54:4f:eb:88:ba:16:31:61:
                    6f:83:fb:9e:64:e3:e8:c0:41:10:07:0c:5d:8f:a8:
                    2a:c7:41:b4:68:4c:f6:b5:58:a7:c0:eb:7e:2b:36:
                    29:be:d2:86:21:b6:0b:7d:f0:5b:8f:c6:04:ef:9e:
                    0b:fe:4f:a7:d1:5b:03:db:ea:36:e4:37:34:79:af:
                    15:8a:e7:d2:d1:aa:f1:c6:67:0a:84:bb:84:a5:ec:
                    cf:58:cd:41:2d:32:c5:8a:45:89:f0:8c:d6:02:27:
                    16:16:8e:09:40:77:9b:27:7b:ff:20:2f:5c:c2:12:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:F7:F2:25:17:93:BA:7A:24:D8:BB:A8:98:D0:08:1A:FC:29:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl

            X509v3 Authority Key Identifier:
                keyid:8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.144.0/20
                  198.105.28.0/22
                IPv6:
                  2604:a780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:08:a9:a4:bc:aa:70:30:4c:b1:e1:bc:3b:5a:38:9c:2c:
         a0:63:75:1a:c8:bc:d9:d1:d0:7a:82:df:33:71:f3:e2:42:12:
         e3:97:d3:3d:d0:62:b0:67:76:e2:55:60:d3:76:e5:d8:f6:e8:
         4d:b2:55:fe:fb:3b:da:14:ba:57:91:3e:11:27:24:17:ba:09:
         3a:8b:c2:0b:a9:8e:17:38:80:e9:e7:8e:f6:9b:38:df:9f:c8:
         68:48:ca:92:66:83:30:78:a1:8e:a2:37:8f:bb:dd:e9:1a:0c:
         4e:fe:12:89:02:d7:8a:22:b2:b8:a3:60:45:35:38:d3:82:b3:
         7a:91:a1:aa:e2:bd:a8:e8:fa:78:58:25:34:21:fd:08:ac:00:
         ae:de:7a:fa:98:18:ee:c5:0a:5b:fa:de:94:8c:b2:88:e7:6e:
         22:b1:a9:bc:11:c0:56:47:c0:f8:dd:ed:06:30:4a:5f:e4:a9:
         b2:66:c0:a9:42:4f:cc:37:52:d4:9f:d7:f0:52:9e:b0:f7:af:
         94:5a:f9:82:92:1a:dc:47:f8:38:48:46:66:4b:19:a3:3a:28:
         82:14:42:65:18:25:49:e7:54:7a:87:8c:27:86:e6:5d:a4:72:
         6c:d6:dc:e1:a9:9b:57:db:51:f7:fc:b0:b6:63:dc:fb:03:0c:
         3d:eb:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:42 2024 by rpki-client on console-ams.rpki-client.org