Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/f3578b44-ad8d-33f3-a9c1-5b5e351481c3.roa
File:                     f3578b44-ad8d-33f3-a9c1-5b5e351481c3.roa (raw, json)
Hash identifier:          hV1M3k+Yvrwf5jgH7nCdAJ5VoEy4DRChw8jyr5oxmQM=
Subject key identifier:   9A:2E:71:0B:99:EA:FE:32:13:5E:F3:E3:21:DA:80:A1:3A:8D:3B:FB
Certificate issuer:       /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
Certificate serial:       010D0C9F432858454683D1571C2ABEA33287BA80
Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/f3578b44-ad8d-33f3-a9c1-5b5e351481c3.roa
Signing time:             Wed 20 Mar 2024 23:58:15 +0000
ROA not before:           Wed 20 Mar 2024 23:58:15 +0000
ROA not after:            Tue 18 Jun 2024 23:58:15 +0000
asID:                     20473
IP address blocks:        192.81.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:83:d1:57:1c:2a:be:a3:32:87:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
        Validity
            Not Before: Mar 20 23:58:15 2024 GMT
            Not After : Jun 18 23:58:15 2024 GMT
        Subject: CN=bdfc7c6f-bd65-4dca-b4aa-2e935923ffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:03:d7:91:be:48:26:d2:91:93:1e:31:d6:
                    49:4b:41:f0:d2:19:4a:c6:60:ba:22:a9:38:11:20:
                    bc:a6:f7:f9:be:18:df:69:60:6a:e9:ff:3e:cd:09:
                    23:85:ee:f2:ab:17:df:e2:e3:eb:52:f1:ad:3c:23:
                    86:ba:a6:17:ee:24:db:eb:55:6d:ca:33:c2:81:a2:
                    1c:ad:12:ed:e7:82:ac:07:50:be:6d:c5:51:23:29:
                    74:89:25:3b:4a:37:4b:9f:e7:35:24:6c:16:97:96:
                    86:55:95:49:37:ab:b6:8b:f5:48:74:bb:cf:55:33:
                    c1:4f:47:a6:ac:3a:42:3e:f2:cf:78:f5:c4:e8:5b:
                    67:c9:d7:7d:24:40:45:f3:13:12:96:d6:9d:96:cb:
                    e6:4d:f8:e1:c5:79:e8:f7:55:76:25:a9:1f:ed:79:
                    24:73:e4:4d:bc:a2:99:93:71:9d:46:19:93:e4:a1:
                    95:5a:25:18:e2:7f:85:b2:6d:55:ae:65:2c:f5:69:
                    1f:a7:a8:6d:52:d8:8e:4b:cd:ff:c1:fb:42:fc:29:
                    a0:93:65:7a:cd:e9:24:10:19:22:a2:95:8b:16:82:
                    5d:9c:61:12:8b:57:05:ca:ef:13:d7:48:0a:bb:4b:
                    ed:08:cc:9a:b5:e2:13:52:26:16:56:96:70:32:78:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2E:71:0B:99:EA:FE:32:13:5E:F3:E3:21:DA:80:A1:3A:8D:3B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/f3578b44-ad8d-33f3-a9c1-5b5e351481c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:a7:6a:97:c1:b9:4b:87:78:ee:c2:f3:7e:58:14:00:20:
         e6:9e:ac:77:dc:7a:fe:ef:b1:1a:52:4b:2e:1f:f6:5c:ef:64:
         35:37:59:0f:a5:15:73:90:58:c9:28:a0:a3:70:b9:61:3d:65:
         c3:2e:4f:1e:a0:bf:25:37:99:31:f6:e8:1d:e1:b4:36:69:16:
         8d:f8:66:2b:c4:ad:b2:f2:8f:e4:71:b3:85:f5:d8:c3:78:22:
         87:bd:5f:11:9f:4b:57:9c:5d:93:8b:4e:f6:e5:4d:ed:2b:ac:
         20:e1:88:a8:3c:76:84:23:0b:1c:81:06:3f:a6:a4:27:53:f4:
         45:61:de:45:67:4e:58:ab:8a:c8:74:28:d1:30:a1:b0:b9:59:
         27:b2:9b:93:27:a4:f4:15:87:a5:77:c3:8f:ca:c9:bd:e0:5d:
         33:75:fe:28:06:ae:67:f9:2a:9b:2d:18:b7:59:f3:d8:d1:93:
         ed:c9:df:ac:50:88:69:dc:77:e1:1a:64:39:d5:70:af:77:88:
         4d:26:6b:e8:05:03:be:c6:63:bd:57:e9:df:26:99:de:97:1b:
         3e:44:e3:2a:20:9c:14:1a:b6:91:27:5c:62:5f:c6:d5:70:42:
         3f:74:12:f7:40:d0:55:22:f6:1a:2b:6e:ea:14:61:2c:33:89:
         8e:65:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:20:35 2024 by rpki-client on console-ams.rpki-client.org