Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/3888cc2a-41a4-34a6-98f4-0ef7f86b858d.roa
File:                     3888cc2a-41a4-34a6-98f4-0ef7f86b858d.roa (raw, json)
Hash identifier:          c98udOe4zSZId7jOnGc5589Hy/bkBAxJvVIPTmwNtoA=
Subject key identifier:   95:A2:DC:54:C2:60:94:C1:86:F3:E3:77:29:1B:EC:37:C0:8D:2F:6D
Certificate issuer:       /CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
Certificate serial:       010D0C9F432858461FD837485CCE6D0D970EBCC0
Authority key identifier: 61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/3888cc2a-41a4-34a6-98f4-0ef7f86b858d.roa
Signing time:             Thu 06 Jun 2024 20:18:43 +0000
ROA not before:           Thu 06 Jun 2024 20:18:43 +0000
ROA not after:            Wed 04 Sep 2024 20:18:43 +0000
asID:                     30182
IP address blocks:        45.59.172.0/22 maxlen: 24
                          199.87.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1f:d8:37:48:5c:ce:6d:0d:97:0e:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
        Validity
            Not Before: Jun  6 20:18:43 2024 GMT
            Not After : Sep  4 20:18:43 2024 GMT
        Subject: CN=500878e6-1bfe-4c79-83ce-02ff69e5ca5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:a5:e4:8f:0c:41:b2:7b:37:33:fc:c6:2a:
                    bc:49:15:ab:29:3d:e5:2c:63:53:c0:65:b1:8a:21:
                    90:0b:42:2d:95:3a:7e:62:18:58:06:1b:03:3b:11:
                    37:21:96:fd:32:c8:18:40:ec:08:d7:ad:d0:6e:03:
                    28:24:8d:42:77:54:90:47:44:c7:b0:b7:2f:ae:01:
                    89:69:2a:a3:01:dc:36:72:b9:de:70:89:29:4e:24:
                    fd:68:78:18:3f:32:c5:86:93:3f:46:44:b8:39:7e:
                    90:ed:18:7a:13:36:2c:6e:c0:85:03:e1:45:da:b5:
                    28:22:df:6b:bf:9b:f2:97:7c:58:42:94:b2:b1:27:
                    f8:bb:d8:fd:4c:76:c7:e6:a9:d5:a9:9e:13:13:b0:
                    50:bd:d1:65:8c:40:ec:b7:3c:3c:f3:2c:ff:80:66:
                    89:0b:13:d9:37:b8:dd:69:04:7c:d2:59:52:58:99:
                    3f:d6:27:30:65:9f:e0:b7:cf:aa:3a:00:f6:5b:2f:
                    16:8a:96:88:2b:cc:66:6d:4e:d3:51:84:ea:20:ee:
                    3d:f2:cd:3f:ba:0b:6e:05:2f:bc:1a:6f:2e:24:f2:
                    f9:05:c4:0e:27:db:84:16:42:08:e0:1f:c0:7a:0f:
                    5b:e7:6d:c3:8b:28:da:d4:11:37:6b:44:c2:86:a4:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:DC:54:C2:60:94:C1:86:F3:E3:77:29:1B:EC:37:C0:8D:2F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/3888cc2a-41a4-34a6-98f4-0ef7f86b858d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl

            X509v3 Authority Key Identifier:
                keyid:61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.172.0/22
                  199.87.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:64:a4:cd:3d:bf:bf:57:1f:de:4a:09:48:ae:5c:04:d8:25:
         3b:15:4b:a9:0f:8c:fb:62:bc:80:87:7c:96:48:21:4f:ad:80:
         36:4a:06:c0:6c:a2:05:d4:4b:f0:48:fe:fd:c7:dd:ad:2b:3c:
         e9:6b:67:6e:52:10:92:be:4b:b6:f5:01:e6:19:3a:72:84:54:
         3b:43:fe:3a:70:04:5d:4e:3a:e4:65:5a:77:e0:e3:01:78:64:
         1d:a1:cb:4d:cf:be:5d:03:2b:42:35:4d:a7:ba:85:fc:5f:7b:
         79:72:5b:10:70:1c:6c:e5:50:27:21:cc:3e:fc:19:3a:4d:c6:
         8e:d0:8b:4a:91:59:6c:77:ca:ab:86:07:63:a1:06:09:6e:3b:
         1f:6c:fa:9a:fc:db:c2:b2:e2:b2:a8:c6:5f:e4:b2:5f:b4:b8:
         b3:30:88:4f:02:86:00:40:a6:59:21:e5:e1:6c:cd:9e:41:e0:
         14:f5:62:6f:ca:4c:8a:c7:a4:f0:ed:97:ac:3f:ba:9d:cb:58:
         ef:00:b3:b2:92:73:1c:98:f3:56:ac:9f:d4:2f:5a:85:7d:6b:
         bc:89:0c:2e:e9:10:60:dc:0d:00:eb:c2:c7:d9:68:51:c4:04:
         de:19:f6:09:dc:83:df:22:86:b9:fa:fb:b5:24:45:48:bf:00:
         aa:b2:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:57 2024 by rpki-client on console-fra.rpki-client.org