Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
File:                     088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (raw, json)
Hash identifier:          XdtTdGksCAhNPgydAQZdGh3m//oBXEdpwInjWFF+fkQ=
Subject key identifier:   D5:BD:48:36:C5:46:66:25:88:83:10:52:D5:9F:A6:6E:D4:05:E3:B0
Certificate issuer:       /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Certificate serial:       010D0C9F43285845E72921CA7E016EEB8ABEEBC0
Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     393249
IP address blocks:        198.162.32.0/19 maxlen: 19
                          192.5.96.0/24 maxlen: 24
                          192.73.5.0/24 maxlen: 24
                          137.82.0.0/16 maxlen: 16
                          142.103.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:21:ca:7e:01:6e:eb:8a:be:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=fc491882-b11c-430f-89bc-acbe6a434bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:01:98:ef:21:d9:24:a4:40:13:77:84:f3:
                    71:cc:6e:25:ef:a4:be:d0:29:d9:b5:65:47:ce:70:
                    aa:de:c3:ef:ba:f3:ae:d1:a2:cc:2d:3b:4c:fc:21:
                    2d:b8:ab:1a:3e:ba:2e:d0:7c:6f:2c:1e:32:2f:13:
                    5a:0e:cc:6c:34:dc:eb:e7:12:7e:ce:02:47:4e:6f:
                    67:b2:c8:ef:00:5b:85:5f:97:36:31:48:46:20:1f:
                    0c:b3:6d:1a:c2:e6:eb:dc:b7:47:12:91:d4:2a:aa:
                    2a:75:40:f4:22:c5:ba:54:cb:ff:a7:58:c3:67:ca:
                    89:1f:72:71:75:a7:9c:5b:31:8e:03:1f:62:44:cb:
                    99:40:e2:46:ce:77:f3:01:7b:49:9b:81:7b:c1:0a:
                    7a:d1:7b:d1:b9:4a:1b:ff:fb:fa:62:57:be:30:9e:
                    d7:6b:35:10:65:e1:ec:f1:72:2e:2b:e2:6f:c4:01:
                    5b:1d:6a:11:8e:ec:70:9b:82:b8:ed:35:53:18:d5:
                    50:13:d8:f7:42:bd:d7:88:dc:cb:b4:14:58:95:e2:
                    ad:41:55:e2:1e:75:5c:0c:40:28:4c:94:5d:54:bd:
                    84:0c:a6:03:7b:9c:8a:fc:e4:1a:1a:27:ad:c7:95:
                    49:78:a2:fb:18:50:86:ab:11:c4:64:3a:86:28:1b:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:48:36:C5:46:66:25:88:83:10:52:D5:9F:A6:6E:D4:05:E3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl

            X509v3 Authority Key Identifier:
                keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.82.0.0/16
                  142.103.0.0/16
                  192.5.96.0/24
                  192.73.5.0/24
                  198.162.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ad:49:33:e0:88:19:b5:d2:9e:43:f4:10:a4:29:ab:01:fa:
         39:f0:73:9d:e5:94:20:de:cf:b8:e7:1c:30:72:c4:40:95:21:
         69:58:42:e3:db:a2:97:56:bf:16:ea:35:b5:05:d0:38:3c:8a:
         68:db:f1:ba:4e:ac:da:98:94:78:9b:e7:c9:53:a2:2f:4c:41:
         2d:00:f7:a0:8e:f2:1b:95:8f:dd:e5:bc:d2:96:e7:df:ef:84:
         84:c3:c0:57:ab:83:e0:a2:2a:44:e3:02:e5:8b:18:13:21:c4:
         89:e4:12:c0:72:8d:6e:2d:dd:a5:c9:f1:4c:62:3d:7d:8e:95:
         e9:c2:f8:51:11:aa:a0:ef:16:3c:ba:c9:ac:1c:cc:79:e1:13:
         fb:dd:da:8e:a8:63:46:68:50:82:c9:bc:ac:0d:b1:92:f6:67:
         8e:e0:28:24:83:87:ac:9c:56:09:83:76:c4:2d:aa:e4:20:72:
         86:c6:7d:7f:e9:b6:d7:95:8a:cc:86:44:c5:85:85:9c:ac:37:
         58:2c:36:fd:81:8c:a4:2c:24:f2:f6:cd:a9:b9:52:22:81:91:
         bf:96:88:27:53:a9:e7:80:2e:c3:32:dc:91:62:77:2f:33:08:
         9f:5f:b9:11:02:48:da:04:73:ec:e0:a3:87:49:66:ad:d1:fb:
         96:ee:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:41:05 2024 by rpki-client on console-fra.rpki-client.org