Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa
File:                     c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa (raw, json)
Hash identifier:          yTMHJmDxWhUR4nXTskWM1nq79Ls15jpc6AskcZ8qN9U=
Subject key identifier:   AF:CF:20:5A:79:63:89:0C:DD:51:32:4C:B7:F2:CF:B2:06:05:F2:2D
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F43285845CB3E414C08A9CB1D82236080
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     11260
IP address blocks:        24.207.0.0/17 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:41:4c:08:a9:cb:1d:82:23:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=595b92f5-3c41-40ab-b20e-722dc607ef7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:08:58:60:23:a0:da:83:15:0d:c9:11:ca:
                    7c:32:5a:e4:40:11:42:9b:1b:d9:fa:a0:9f:cd:cc:
                    99:16:70:b0:4c:fd:45:b1:c9:ab:bd:72:50:fa:6f:
                    6c:41:64:6c:58:6f:0f:bd:c7:4f:ff:ff:16:6e:38:
                    63:08:ba:20:c5:41:5a:30:61:5e:66:a6:8a:2f:b7:
                    d5:1f:0f:78:45:fe:18:a4:cc:13:71:f5:63:86:2a:
                    ac:02:31:1c:ea:34:d0:8e:bd:44:24:1f:f1:2d:65:
                    b2:56:02:a5:d8:39:11:e0:52:71:a8:ee:c7:9a:aa:
                    b7:4c:3a:5c:97:d7:3e:fb:d3:b5:06:03:13:7a:71:
                    43:48:4e:4d:09:7f:e7:e8:63:0f:aa:ab:82:f5:24:
                    63:ab:f2:cd:2c:c6:8a:75:5b:5e:5f:6a:9a:59:21:
                    50:7a:30:46:b0:9f:6b:e9:b9:35:c2:79:40:ca:e2:
                    2b:84:70:ab:f7:88:13:51:a2:c5:27:52:47:32:83:
                    de:f5:c6:d8:f2:72:0f:dd:cc:4b:9f:e4:8a:5e:4c:
                    f8:8e:b0:11:6c:cc:06:60:88:f3:e5:71:51:32:56:
                    bb:d2:9e:5b:df:54:1e:83:e3:b2:5d:d2:94:49:f2:
                    dd:54:8c:3a:54:84:cf:8a:46:eb:88:80:1e:26:3b:
                    f0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CF:20:5A:79:63:89:0C:DD:51:32:4C:B7:F2:CF:B2:06:05:F2:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:89:19:54:ab:86:f7:b1:24:58:f5:8e:8e:d8:22:07:d6:
         5b:53:c8:03:0e:ad:e1:7a:36:48:cb:85:d0:27:7b:9d:71:96:
         31:53:61:64:30:4b:5b:d2:91:e0:74:c3:e2:a8:f7:3c:53:09:
         44:8e:cd:5d:b1:c7:e0:fb:9e:0e:e8:4e:4e:23:aa:02:2c:2c:
         4c:7c:e6:f2:7e:ad:1e:69:86:35:b1:8c:15:25:6f:f6:5d:89:
         05:fb:4c:97:2b:5c:72:3c:31:a9:3f:f6:92:72:54:be:76:34:
         ba:67:77:c8:59:43:31:dc:f9:ec:d2:14:91:85:a7:d5:c1:ca:
         42:2e:e7:96:b5:cf:86:24:e3:5a:77:bb:b5:89:9f:c3:fd:70:
         a8:0a:41:36:be:ce:0a:da:23:01:f5:72:42:31:e3:a6:67:05:
         85:73:5c:14:62:fe:64:c3:da:37:21:96:7e:df:34:b2:b0:a7:
         ae:89:cf:24:dc:60:6e:e4:2d:33:b4:0f:8c:ac:c3:d6:f0:78:
         7e:cd:57:a2:a1:61:af:fb:25:0d:25:21:c5:2d:a7:67:1a:88:
         c9:67:2c:8a:21:ea:70:1c:92:5e:ce:9f:f9:ff:50:ce:c2:e7:
         92:32:47:f9:dd:96:c7:9f:e3:1a:c4:ba:39:b4:e3:80:c0:be:
         89:c8:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:28 2024 by rpki-client on console-ams.rpki-client.org