Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
File:                     ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa (raw, json)
Hash identifier:          qGnyimaMbfAydlE5XQ/d5tp/Ugrpe9YuDgNq8ZAf8rQ=
Subject key identifier:   DE:30:B4:A7:31:5E:59:9D:CC:14:0C:1F:A8:E9:11:58:67:D9:46:01
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F43285845ACB0BC305BE62D7E93E54F60
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
Signing time:             Fri 26 Apr 2024 14:21:13 +0000
ROA not before:           Fri 26 Apr 2024 14:21:13 +0000
ROA not after:            Thu 25 Jul 2024 14:21:13 +0000
asID:                     19905
IP address blocks:        24.225.112.0/20 maxlen: 24
                          216.172.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:b0:bc:30:5b:e6:2d:7e:93:e5:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Apr 26 14:21:13 2024 GMT
            Not After : Jul 25 14:21:13 2024 GMT
        Subject: CN=989ccd3c-0076-4818-ad1b-d8070a5b1cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:70:73:5a:b2:98:88:e2:ca:f1:21:c2:de:
                    85:e0:84:40:7f:db:4c:d8:6b:13:f9:bf:6a:50:a4:
                    fc:a1:ea:18:62:e5:93:74:0d:53:c0:6d:23:4d:36:
                    47:d4:da:1d:4a:af:6e:0a:a4:2f:50:40:33:13:0e:
                    4f:57:50:dd:d5:86:0b:60:50:c5:e1:b4:3e:9b:f1:
                    b0:3c:25:68:e1:8f:c3:15:3b:a3:87:a1:a6:2b:bd:
                    99:a6:5b:64:01:3b:af:a3:e5:ea:ad:fc:a0:da:73:
                    10:72:c9:a3:34:f1:9e:f7:b7:be:a6:c4:3a:b1:66:
                    76:47:66:be:e6:e7:d9:51:41:ef:f5:b2:3a:00:6c:
                    63:e0:a2:8b:5d:f2:74:bc:8d:4e:bb:84:e8:67:7a:
                    16:cf:9a:81:4e:85:93:4f:dd:aa:b8:79:49:58:b3:
                    ca:df:b0:91:b0:9b:a3:f7:24:81:91:13:46:c2:37:
                    a7:d3:08:b6:65:43:89:f2:af:74:15:82:f7:78:14:
                    5c:47:d5:68:08:06:0e:44:91:dd:91:9e:e4:64:c5:
                    85:6d:13:d2:21:e4:ff:83:5e:a8:e4:9e:57:f3:1f:
                    ee:a5:09:ad:23:c2:b7:32:be:a9:72:e5:7b:38:cb:
                    6d:8e:70:a2:58:5e:0f:4a:a2:b4:c8:2c:ef:18:95:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:B4:A7:31:5E:59:9D:CC:14:0C:1F:A8:E9:11:58:67:D9:46:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.112.0/20
                  216.172.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:64:ad:2d:ea:1e:31:43:43:a8:fd:d1:db:39:b0:a4:6c:
         65:91:0d:bb:4c:56:c7:9a:8f:f1:3f:4d:2e:b5:57:5a:f3:48:
         e2:17:ac:f6:60:ec:2d:4d:b0:e4:e1:44:cc:70:66:69:fb:51:
         22:e7:33:7c:81:7a:00:43:38:29:2b:29:de:1f:a2:64:6d:3d:
         36:87:65:a0:38:1d:8f:80:bb:6f:8e:20:02:5c:1c:c9:ee:44:
         a9:e5:63:dd:bf:9f:55:c6:da:25:d8:12:f1:84:fa:24:90:9d:
         dc:a6:df:c8:dd:d5:61:c3:55:c9:51:fe:be:34:93:3e:4a:40:
         a0:ce:09:29:3a:ac:b6:b1:9c:2b:08:95:8f:ee:5c:b6:98:5c:
         f8:b5:8a:bb:fd:62:e0:ab:e0:f3:55:48:84:87:05:d3:33:79:
         94:a7:c9:19:2a:28:eb:7e:fd:79:c0:4f:57:65:ed:e6:96:7f:
         d5:f5:a0:a1:01:ac:ea:e1:d0:e6:58:70:7f:f8:46:63:dd:b3:
         13:29:ca:aa:9e:a2:44:16:95:47:67:bd:57:ca:48:af:c7:cc:
         bd:d2:d9:7d:3f:13:9b:52:8b:69:1f:8a:e4:fc:dc:cf:57:d9:
         3a:b0:8d:02:38:28:fd:b6:b3:35:e8:b2:0d:d6:5a:49:4f:cd:
         a2:c9:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:37:00 2024 by rpki-client on console-fra.rpki-client.org