Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/e68761d5-9813-3666-a2c1-4eca57ef2471.roa
File:                     e68761d5-9813-3666-a2c1-4eca57ef2471.roa (raw, json)
Hash identifier:          t+qcErkVUNimZtf3E4zLwiHdSwjogSW4o0fpIHMl/sk=
Subject key identifier:   39:2A:0B:EF:D7:80:C8:D4:3B:1B:99:DD:F8:9A:DF:36:C8:7A:24:78
Certificate issuer:       /CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
Certificate serial:       010D0C9F43285845A6F364F24B0E2A776CF27840
Authority key identifier: A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/e68761d5-9813-3666-a2c1-4eca57ef2471.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     400164
IP address blocks:        65.75.212.0/22 maxlen: 22
                          2606:8ac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:64:f2:4b:0e:2a:77:6c:f2:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=4acd91e6-ad56-4c40-afd7-0622006079bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:a0:c0:33:cf:ca:3d:d4:d3:6e:20:77:ff:
                    d7:38:39:68:cf:6b:4a:c1:1b:80:2a:f6:bf:ab:c2:
                    76:1f:8a:c4:71:8e:c9:51:e1:09:e9:62:93:12:f9:
                    f0:3a:8a:14:76:f9:c2:1b:9a:52:00:76:80:02:67:
                    17:c3:dc:5d:2e:3b:57:e1:80:49:d5:3a:60:13:51:
                    de:1f:73:88:1c:62:74:a1:10:5a:4f:45:70:4a:a5:
                    12:d5:e7:57:b9:83:a8:60:cd:1b:21:90:f6:ba:bb:
                    51:8f:60:6d:f2:df:ff:ee:78:cf:ba:8e:ef:68:fa:
                    94:d5:5e:4a:02:9e:f1:9e:dc:67:1d:38:2b:cf:b4:
                    5d:85:0d:1d:b1:93:e9:01:56:a3:6d:96:b7:a9:9a:
                    4d:54:77:b2:3f:47:6e:04:b0:4d:f0:1d:70:c0:53:
                    78:48:07:33:25:15:23:a3:3b:57:59:1b:e2:fb:87:
                    ae:a0:47:5a:d0:83:85:15:59:a4:63:7e:75:86:b4:
                    2d:21:2f:86:36:ba:06:b9:f4:74:86:27:e6:80:3b:
                    13:cc:c8:45:d1:4d:fe:a5:c3:54:ee:39:92:d9:af:
                    ee:99:07:62:23:72:a9:94:fc:23:9d:00:98:54:f6:
                    07:33:d8:bf:74:cb:e1:50:7e:8f:93:80:0d:4b:d6:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2A:0B:EF:D7:80:C8:D4:3B:1B:99:DD:F8:9A:DF:36:C8:7A:24:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/e68761d5-9813-3666-a2c1-4eca57ef2471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl

            X509v3 Authority Key Identifier:
                keyid:A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.212.0/22
                IPv6:
                  2606:8ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b8:fa:29:e3:bb:6e:9a:1b:bd:de:1c:8b:1d:ae:da:19:4e:
         4a:6f:7a:a9:c3:71:6e:35:e7:f5:50:f2:a3:e8:9d:31:15:6e:
         e2:8a:05:dd:fb:dd:89:f3:4c:1c:8b:db:7e:0b:c5:a8:da:a7:
         ea:47:44:b2:e2:ab:32:5d:40:07:9c:ee:a9:f9:d6:b0:33:ba:
         e7:ab:a3:65:c5:4f:c5:a1:47:b3:fa:b6:27:73:26:21:4f:3e:
         80:8b:44:d2:79:cf:b7:bf:dd:e2:4a:80:53:44:4a:43:de:eb:
         98:04:2a:aa:9b:bd:14:6d:ab:e2:50:18:d8:ed:9d:01:4b:c3:
         6e:dc:fa:a8:f5:26:fa:f2:1d:04:8a:b8:72:54:89:dd:11:92:
         0b:b0:7f:25:a1:f9:fd:cb:50:6f:91:d8:97:7a:b7:f9:36:04:
         f6:0f:5e:af:79:b2:03:a1:46:84:76:1b:7a:ce:94:46:7e:27:
         99:ea:27:e6:ac:a1:c4:76:d9:a2:08:ce:7d:d1:8e:b9:23:2e:
         1d:24:93:9f:fa:c4:05:74:60:2a:ab:2a:4e:b8:11:29:de:f2:
         7e:ed:10:e4:74:fb:0c:91:f4:4c:f0:7e:c5:20:6b:92:93:98:
         e7:46:44:2f:79:7b:f6:ae:d2:e1:8c:69:9c:e8:76:e4:df:ff:
         65:1b:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:42 2024 by rpki-client on console-fra.rpki-client.org