Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
File:                     9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa (raw, json)
Hash identifier:          4cBqDpNZSoGrlnkQNaWBLekt8E31hHfA1ou6/QjWdlQ=
Subject key identifier:   DC:19:A9:23:F1:26:50:DC:DC:AA:83:D1:C5:E4:53:B9:91:8C:90:33
Certificate issuer:       /CN=6d271821-206b-40ae-ba11-9112dbf17eb4
Certificate serial:       010D0C9F4328584582A897A9A3804C8DC9147900
Authority key identifier: F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     12129
IP address blocks:        192.96.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:97:a9:a3:80:4c:8d:c9:14:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d271821-206b-40ae-ba11-9112dbf17eb4
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=16064308-04e2-4344-b496-60177669fc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:44:56:85:08:4a:7b:54:20:33:bd:b2:d0:
                    d5:70:e1:b0:06:b3:8e:88:80:6f:ea:75:82:ed:54:
                    6e:74:08:1a:b7:e4:14:6c:d1:77:46:59:77:f0:5e:
                    1f:b5:d7:88:55:f7:03:73:e2:08:04:56:7a:37:8a:
                    d4:32:49:d2:3d:e8:9a:9d:29:ad:45:7a:5d:f8:ea:
                    1e:68:95:8b:49:e3:7b:80:c9:33:47:3a:c5:e8:9b:
                    7e:c1:9f:e6:2d:9a:52:e1:f7:28:1e:09:11:bb:5b:
                    e9:e3:f3:34:06:c2:4b:be:c4:e7:bc:0d:74:59:fc:
                    b6:45:e6:34:84:e5:de:02:b0:81:5d:d2:d6:1b:88:
                    7a:99:85:ca:9e:95:43:1f:50:5a:0c:10:3b:b2:60:
                    33:42:75:41:72:09:89:96:c0:26:1f:5a:d3:6d:7d:
                    b7:f5:bc:ac:9d:74:fc:79:4f:ed:89:47:17:a3:f9:
                    c7:1e:0c:1c:fa:de:f0:a6:f8:f2:53:8e:61:97:0a:
                    a9:32:d3:56:91:56:09:e0:bb:a9:b2:c1:13:ed:b5:
                    1c:f3:cd:a1:09:e6:62:8f:5c:7b:44:15:b1:52:0d:
                    03:77:7e:0f:2d:28:84:32:a8:f1:6c:fa:c9:c7:b9:
                    fe:c0:03:f8:0a:80:0d:7f:ce:00:64:20:8c:f7:4c:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:19:A9:23:F1:26:50:DC:DC:AA:83:D1:C5:E4:53:B9:91:8C:90:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:44:a3:fd:8b:24:4f:e1:8d:e4:be:5a:87:b1:df:4e:cf:a7:
         83:9c:69:fe:21:94:b1:a4:65:a0:dd:16:89:e5:da:9e:fc:54:
         ba:cb:70:c5:30:52:08:43:98:f7:7d:ff:8e:53:4d:a2:79:5a:
         f7:8f:2c:92:f5:78:85:fa:f6:70:06:6e:b5:86:4a:59:61:68:
         2f:89:dd:d5:92:00:35:c0:a8:a4:0f:7d:9b:ae:49:52:ac:bd:
         01:13:ef:67:f3:bb:1e:9d:1b:b4:70:63:3e:9a:98:41:2d:37:
         6d:c9:8e:36:3b:45:3d:3f:e6:84:2f:d6:04:a0:f2:b7:63:c5:
         0e:8d:ac:f3:60:63:e3:83:8f:30:15:9f:cc:cc:9d:88:8c:e3:
         80:d2:8e:f2:61:7f:ae:f4:66:c4:8c:f7:c2:c8:3a:18:9d:27:
         43:68:1b:52:87:55:89:8f:67:b4:38:c1:28:db:5b:30:d9:b3:
         3c:01:69:2c:e8:ba:a1:3c:5f:62:da:c7:cb:d5:05:fb:89:68:
         57:71:e1:1c:93:6c:f9:be:00:34:e7:93:70:6b:e7:97:9c:9b:
         04:39:58:53:f5:1e:58:98:02:96:56:fe:bf:c4:41:94:bf:6a:
         0d:f3:1c:45:f0:b5:19:2b:b1:60:4e:40:b5:08:fb:53:4a:46:
         61:bd:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:00 2024 by rpki-client on console-fra.rpki-client.org