Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
File:                     2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa (raw, json)
Hash identifier:          WjokpDjVpc88g1ZNitUhjtpDKxFQEvl5a3oCq/mso2I=
Subject key identifier:   F7:85:70:FB:9B:3B:88:46:30:31:9D:2B:CF:DA:43:85:BA:9C:B7:0A
Certificate issuer:       /CN=16bc29f5-43ef-48ab-b3df-a2828f565715
Certificate serial:       010D0C9F43285845280AF3B5DA4457529DFF8C40
Authority key identifier: 8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     16942
IP address blocks:        66.37.64.0/19 maxlen: 19
                          216.222.128.0/20 maxlen: 20
                          208.85.172.0/22 maxlen: 22
                          204.15.44.0/23 maxlen: 23
                          172.93.60.0/22 maxlen: 22
                          172.83.128.0/21 maxlen: 21
                          2001:4828::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f3:b5:da:44:57:52:9d:ff:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bc29f5-43ef-48ab-b3df-a2828f565715
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=80429a8c-d78a-437d-92c7-c7ba1e4ea894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:5d:f0:83:57:39:da:4a:9a:be:c2:d0:b9:
                    af:84:05:0c:d2:b4:f2:50:bc:4f:69:f1:36:dd:2c:
                    5c:7f:f6:74:e3:17:f1:80:98:1c:f1:6b:82:8d:c7:
                    e4:10:37:79:07:f2:93:17:da:b2:53:4a:a3:b4:bc:
                    ab:a1:d2:87:fb:51:ad:63:7e:45:77:c8:95:ee:45:
                    21:54:af:34:a0:69:d6:b4:cf:90:f0:5d:49:fc:41:
                    a0:4b:56:f8:62:d3:9b:1c:28:56:d3:31:42:07:93:
                    3e:29:97:47:a3:a9:a7:30:31:b2:6b:41:b2:9e:d5:
                    c9:b0:af:fa:4e:3e:4e:2f:b7:38:01:66:37:eb:e4:
                    65:e2:aa:37:1e:7e:b5:da:10:f0:d2:87:7c:9c:c6:
                    81:9e:5c:19:21:a6:4b:40:43:fc:a7:24:ea:cd:69:
                    81:fc:b4:db:76:74:b2:07:b8:a3:1d:0b:da:d7:af:
                    76:3f:3b:87:62:3a:1e:a3:c2:12:b4:fe:9d:60:e1:
                    0e:6e:b5:12:1c:d5:1b:b9:f3:2c:ba:c4:3e:2d:4f:
                    b8:be:a1:ac:23:47:55:98:41:d0:c0:ed:f5:2b:4d:
                    44:a7:f0:31:05:8b:9a:06:56:5a:23:f1:82:c5:55:
                    1a:63:99:a1:70:f4:04:22:fe:0b:86:0c:19:cf:94:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:85:70:FB:9B:3B:88:46:30:31:9D:2B:CF:DA:43:85:BA:9C:B7:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.64.0/19
                  172.83.128.0/21
                  172.93.60.0/22
                  204.15.44.0/23
                  208.85.172.0/22
                  216.222.128.0/20
                IPv6:
                  2001:4828::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:6a:94:36:26:00:8b:f8:c4:ca:fb:86:19:96:e3:64:90:
         89:34:df:a8:f7:05:79:4a:54:a7:90:e3:9f:4f:42:7d:72:5d:
         32:34:6a:d1:21:70:c4:4d:71:56:6f:3a:b6:12:b3:af:e7:cc:
         bc:61:30:01:7c:a9:c2:74:2f:2d:b9:b3:82:13:76:24:81:36:
         f0:99:1e:07:d0:15:46:3a:45:98:f1:ce:bb:3a:d1:cd:3f:be:
         1f:fa:9a:2e:cb:d8:69:f9:a0:71:bf:d6:4c:d6:f3:26:76:c5:
         27:85:43:f9:dd:f2:3b:5e:14:60:4c:13:74:5d:dc:2a:7c:69:
         89:e2:47:c7:bc:bf:e9:7f:d4:be:c4:ca:04:92:16:69:07:a8:
         ce:fb:a0:9c:56:dd:5d:e7:8e:26:23:be:b2:fd:2f:5c:d8:96:
         32:33:16:5f:29:cf:3e:51:c3:4b:77:b4:35:56:d9:7f:f4:6f:
         1c:c8:0d:a5:6c:34:15:0a:99:d1:22:7f:39:1b:27:f4:6e:23:
         24:2d:2b:26:ea:fb:f1:da:e8:38:03:4e:b5:45:f5:ab:40:62:
         bd:79:00:01:7d:08:67:e6:1c:49:d9:39:45:21:3d:3c:5e:56:
         83:a9:50:96:02:73:a3:0e:2d:8b:f4:d8:b2:44:ea:f0:b3:33:
         ce:fd:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org