Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa
File:                     1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa (raw, json)
Hash identifier:          +xVq0HXMphAd8b+qb2Tqv8kRl1O7g92mQrGI6lYH6+E=
Subject key identifier:   FA:CE:9F:71:B7:60:BB:5E:17:1A:B9:A5:5A:E9:5E:1F:20:74:7F:97
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584548081AFA341C9B5423A6D980
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     16433
IP address blocks:        208.76.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1a:fa:34:1c:9b:54:23:a6:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=0bc4fb6c-c679-4d3b-b280-522a8b24f3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:e8:34:4b:48:89:6a:b3:5b:d6:e2:f0:96:
                    19:24:42:f3:5a:f7:cb:25:5b:44:c0:f1:8b:20:43:
                    fe:74:c3:08:b6:48:26:14:36:a3:05:8d:31:f7:33:
                    a5:8e:81:db:ce:bc:c8:ff:27:38:99:32:be:0d:3b:
                    8f:8b:4a:0b:00:c9:2b:5c:92:16:c9:3b:31:23:06:
                    22:1d:cf:46:c9:1b:2d:56:f3:77:e0:7c:10:ac:76:
                    dd:da:dc:2a:e3:f6:30:81:9a:58:65:f5:7f:e1:3b:
                    62:79:e0:b8:0d:6c:97:06:21:04:95:cf:d3:83:c6:
                    59:e2:eb:48:ae:06:20:18:35:e1:1d:ff:33:f7:80:
                    ba:03:81:4c:54:99:d7:e9:42:ca:c1:8f:61:f8:8a:
                    03:ff:78:18:e1:5b:b9:79:34:21:d2:96:cf:51:54:
                    af:4e:d8:dd:75:63:f2:d5:0d:b7:07:34:8b:4e:b7:
                    ea:4e:17:e6:cd:81:94:f9:30:d4:74:c2:ad:cc:d4:
                    50:25:d2:35:f8:9c:e7:81:1f:4f:a9:97:f1:0d:5b:
                    74:97:a4:ae:5a:9a:cb:a2:1a:6f:ec:3a:63:80:b1:
                    d9:c0:78:0a:95:db:47:c1:1e:5e:9c:d1:4a:7e:c6:
                    30:ca:45:16:4c:7e:94:05:9b:76:bf:2b:51:11:f3:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:9F:71:B7:60:BB:5E:17:1A:B9:A5:5A:E9:5E:1F:20:74:7F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:5c:48:fe:b7:70:cc:e3:53:48:f5:76:19:ec:94:16:cc:
         ca:15:2a:4a:9d:79:b4:b0:66:5b:4c:f2:7a:6f:9d:7f:c1:b9:
         1c:74:8b:55:4e:29:c7:d0:05:7d:57:23:80:f3:99:63:90:06:
         5e:03:fe:49:83:ae:d7:90:60:ba:94:71:be:4c:45:55:07:b6:
         f7:78:f9:00:8a:c6:ae:95:fc:8c:31:87:da:13:b1:51:07:4e:
         c4:0a:60:01:52:dd:85:a0:bf:52:0f:ef:cf:dd:eb:b8:7a:96:
         02:6c:52:b0:b4:07:c4:fe:13:1a:07:6b:2f:ee:59:e8:d9:95:
         8b:60:39:fa:1b:ff:42:47:e9:f1:f4:5e:a7:e5:76:c1:34:40:
         5d:81:29:77:d4:f7:bc:a8:d0:bc:08:6b:22:ca:a9:1c:31:3d:
         df:7a:e0:66:9a:1c:a1:25:33:fc:5f:19:23:77:94:a6:9a:03:
         22:b8:09:8b:9e:2d:cf:4d:1b:c6:85:3e:87:56:ef:87:9a:93:
         7a:a9:f7:ce:65:17:b3:1f:2e:e3:a0:dd:7a:a4:af:80:9b:2b:
         65:a8:3e:9d:fb:5d:18:c5:44:0b:79:48:d4:5a:34:e5:59:6c:
         65:dc:76:42:3b:4d:74:fc:36:96:9f:70:2e:97:85:3d:54:c6:
         b6:b2:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org