Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa
File:                     e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa (raw, json)
Hash identifier:          fIp2YRNTrxMOfLMn+EsdPYBzr0AenaV2raVNnyg/CIQ=
Subject key identifier:   08:77:40:AE:E8:F0:4D:7F:E6:5B:34:FD:75:55:03:83:A0:4D:92:62
Certificate issuer:       /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial:       010D0C9F43285845BA7E2C0658B8D6BE56D86A00
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     53587
IP address blocks:        168.235.240.0/20 maxlen: 24
                          45.61.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2c:06:58:b8:d6:be:56:d8:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=b1181406-fb7f-459d-889c-891c7035c3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dc:6e:bc:d4:ce:aa:62:1a:d1:c1:ac:4b:83:
                    04:21:87:ea:6f:85:da:31:a3:74:a3:1b:81:05:0c:
                    1c:21:c0:4e:4e:e6:7d:c8:40:38:64:e8:58:35:fc:
                    7c:25:da:65:f4:9b:8e:51:56:6d:fd:f8:db:75:db:
                    8d:2a:79:9f:50:16:37:07:36:30:f8:d5:0f:79:e4:
                    3e:91:72:cb:fd:da:df:ee:75:ee:cf:2a:f2:5d:96:
                    48:a3:84:bd:6b:14:2a:eb:e7:97:a8:6e:81:9c:5b:
                    94:a0:e7:df:9f:3c:fc:21:fd:59:a9:d4:ce:42:82:
                    02:67:d6:ac:b0:bc:ae:3d:23:c4:57:e6:9f:27:64:
                    d3:ad:7f:b5:ea:a2:bd:86:22:f0:e2:ab:e5:29:a6:
                    ad:4f:63:0f:0c:d2:cc:de:70:69:21:02:f3:9e:67:
                    f7:44:72:85:4c:ac:12:1d:ab:ec:f1:bf:7f:e1:7a:
                    42:27:de:4c:97:e9:50:e4:8b:53:0e:bf:e3:7a:1f:
                    2f:5c:39:a4:b7:ca:45:03:ef:17:13:59:f2:0a:de:
                    c9:e7:72:9b:fa:11:3c:24:2c:16:d0:8c:ad:24:43:
                    50:57:1a:fd:7f:db:ae:be:07:51:f5:bf:0a:ac:ff:
                    a3:f2:35:29:3e:57:f0:8c:03:f5:21:6c:e4:da:39:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:77:40:AE:E8:F0:4D:7F:E6:5B:34:FD:75:55:03:83:A0:4D:92:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl

            X509v3 Authority Key Identifier:
                keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.192.0/18
                  168.235.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:71:43:e8:28:3e:84:ba:1d:a9:3c:0a:e8:6b:96:60:86:
         12:28:c6:d3:42:93:0c:87:68:9f:08:5c:21:0f:c1:a7:1b:7c:
         26:b5:66:6d:27:03:77:5a:1a:0b:1c:96:57:c7:cb:e6:f8:1e:
         38:1d:54:4a:55:78:98:fb:66:43:2b:66:e6:4c:ab:5e:28:ef:
         04:8c:68:ca:90:ba:5e:76:f1:77:6b:88:d7:67:b1:10:95:8d:
         77:9a:33:b9:bc:e0:da:b3:d3:46:da:96:be:6d:f5:d8:75:3a:
         89:97:9a:c5:62:4b:6a:f3:d8:10:f8:0a:c9:2d:97:2b:bf:f8:
         3f:59:78:72:f5:93:17:7a:8a:c9:84:0d:d7:1a:67:04:76:d9:
         d9:0d:a0:99:7d:7b:ef:54:57:c7:0b:84:16:fd:82:c2:c6:a5:
         68:a9:ca:62:01:01:de:f1:fb:bd:3b:55:4f:c2:aa:3f:2d:67:
         79:5a:3b:53:73:79:cf:d4:d8:14:ac:b1:b0:37:30:60:6d:aa:
         48:3c:59:45:0b:34:8b:bc:9c:8c:bf:de:d4:48:a0:2b:74:b3:
         8a:67:96:fa:e8:df:d8:d1:cd:f2:47:17:5c:c8:2c:06:1f:bd:
         98:7c:f9:01:61:79:99:ec:6b:b2:d3:5d:c2:ec:86:7a:ab:98:
         63:90:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 10:25:55 2024 by rpki-client on console-fra.rpki-client.org