Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa
File:                     bdc3244e-4ea8-3a24-8894-2a79f0924702.roa (raw, json)
Hash identifier:          aKfRupKcVQYBV2d5OKlFNncAABnvlnGV9M8Q//YxkP0=
Subject key identifier:   CF:FC:7B:EB:4D:24:F9:E6:4C:8F:74:DD:8E:3A:9D:51:50:BF:B6:0B
Certificate issuer:       /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial:       010D0C9F4328584582A88C7ACEA975152E248B80
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     32181
IP address blocks:        69.65.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8c:7a:ce:a9:75:15:2e:24:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=2c255ca2-1825-4f95-84fe-ee90edfb006f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:54:05:32:c2:e0:da:09:3c:61:cf:71:40:
                    61:bc:e3:1d:20:c9:d7:a1:e7:66:17:ad:d2:e1:3c:
                    09:8c:c6:ef:4c:73:72:54:04:ee:8e:83:cb:86:9d:
                    7b:40:d3:91:2c:b4:9f:88:00:2d:a3:34:a5:fe:9e:
                    c5:b2:3d:9a:8b:92:4e:02:83:68:fd:30:9f:47:6f:
                    36:77:47:42:b5:f4:e1:e3:eb:c5:0d:48:01:a7:a6:
                    f0:fc:92:56:e3:98:4b:86:ae:06:79:3a:d9:eb:98:
                    8c:d0:2a:53:2e:46:76:87:fb:d2:0c:ae:37:bc:18:
                    b4:59:88:c8:7a:88:98:7c:fd:6b:98:e8:ac:dd:cd:
                    10:b2:07:23:42:4b:6e:b2:fc:ff:9a:88:56:0e:33:
                    e3:72:52:17:fe:c0:12:bf:e1:b6:2b:77:62:13:7c:
                    07:61:95:be:45:09:3c:3f:fb:af:c1:8e:94:8e:f8:
                    5b:1c:9e:a3:90:50:65:08:d6:39:2e:82:49:55:f9:
                    51:0e:92:f2:75:58:9f:83:65:30:08:b2:e5:4f:9b:
                    df:61:59:a9:a5:b8:9e:72:90:bc:3b:06:9b:10:a3:
                    db:ef:18:f1:ae:b3:04:f8:28:18:6a:7f:3b:34:6b:
                    14:46:76:04:ec:2a:f5:9d:cf:52:9f:be:6b:f1:99:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FC:7B:EB:4D:24:F9:E6:4C:8F:74:DD:8E:3A:9D:51:50:BF:B6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.65.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:91:cd:d2:90:0e:0f:a8:41:35:40:f7:29:9c:91:33:73:99:
         56:3a:42:48:17:d5:41:b6:b3:e3:4d:37:08:f2:b8:0d:75:d5:
         cc:bc:e7:2c:d9:8d:f4:5a:6e:a0:8f:55:39:d5:b5:ec:7a:30:
         0b:db:91:21:ca:a7:a5:03:4a:f8:b1:6f:27:60:7b:9a:7a:fa:
         87:60:74:94:c6:03:c1:ca:c3:87:bd:eb:d0:56:47:68:08:3e:
         23:1d:c1:cc:11:09:de:7e:10:d8:ce:c3:fc:9d:0d:ca:97:85:
         1e:e9:9c:67:c5:23:f5:82:8a:ca:44:ab:38:25:67:1c:47:21:
         db:09:06:ad:0e:08:d6:91:98:bb:33:07:06:09:94:49:76:28:
         17:3e:21:9e:72:30:cf:5a:1f:7c:0b:4a:eb:1e:21:89:bb:e6:
         31:e1:34:bc:8b:1e:73:eb:4e:a9:9d:4a:29:56:0f:2a:5b:5b:
         16:81:9d:a9:f1:af:e0:7b:90:b6:0f:52:db:14:45:9c:96:66:
         6b:1a:f7:d7:4b:ff:0f:9b:7f:2f:d0:ae:db:f9:02:db:89:67:
         b3:28:24:85:ee:ac:8a:18:0a:da:bb:b1:a5:e1:2c:4b:1f:a2:
         e8:39:c6:74:de:e7:2b:00:43:5d:b9:f9:29:3b:ba:57:c7:5e:
         f2:43:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:56 2024 by rpki-client on console-ams.rpki-client.org