Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa
File:                     409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa (raw, json)
Hash identifier:          WfdlaCzLRnhQUK29D9mkEU2PAL5l4FsnH4CqBaUAjgo=
Subject key identifier:   05:99:81:07:7B:FF:4D:A1:06:15:8D:8E:D2:FA:BA:4F:C0:44:A7:76
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F432858456988607CB64B474FEC199310
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     2906
IP address blocks:        198.45.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:60:7c:b6:4b:47:4f:ec:19:93:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=9c371781-dfe3-4dab-85b8-39f725db9178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:55:55:16:f3:64:f8:2d:92:9b:7c:b9:75:
                    cc:a0:a1:cd:e0:93:cd:cd:43:35:33:41:24:a3:68:
                    73:42:24:b7:51:15:9e:37:f9:d7:5b:0a:fe:15:d1:
                    d6:d5:b5:95:90:84:51:2e:76:9b:0a:29:93:8e:28:
                    97:1a:61:2f:02:d6:29:b7:cf:73:12:da:19:8a:d0:
                    8b:93:7d:cc:0e:82:df:c2:61:c5:7b:8f:64:80:42:
                    1e:f6:6d:36:49:3b:0e:c1:db:7e:48:0a:2c:47:91:
                    6a:3f:5e:9a:cd:67:cc:b1:4d:f0:64:a0:30:f3:6a:
                    8a:7a:fc:3a:e4:6f:fd:b7:51:ed:54:eb:94:12:07:
                    d0:e4:21:00:49:94:5a:41:1f:62:2d:dd:6d:a8:c6:
                    b5:bf:ea:49:74:c3:22:6f:f6:ee:3c:9f:96:4e:dc:
                    69:78:11:f8:8b:c2:89:95:ab:22:0e:69:8e:12:32:
                    1e:a4:a9:ce:60:e2:51:ce:4b:45:3a:45:b8:8d:17:
                    dc:47:cf:e4:4d:80:7d:13:23:b3:4d:43:7b:98:97:
                    3b:7c:9e:8a:8f:1c:ac:f9:d1:7f:21:ac:c3:de:83:
                    dd:4f:9f:cf:a0:b0:f3:3f:ac:45:72:4d:98:89:09:
                    be:1a:e0:7e:a3:20:9e:6a:90:26:94:3f:fb:e8:fc:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:81:07:7B:FF:4D:A1:06:15:8D:8E:D2:FA:BA:4F:C0:44:A7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:68:1d:63:72:e3:6c:29:47:82:b1:2a:7f:48:ef:9e:3a:4d:
         92:f7:b9:c6:fe:29:aa:cb:d5:96:99:83:82:92:b1:a2:fe:c8:
         17:ce:47:78:6c:57:2a:21:29:ab:eb:46:8d:7c:5f:a2:b2:6d:
         35:f7:34:55:e0:4e:84:f7:81:5e:2d:bc:c8:47:b6:a9:f2:fb:
         22:00:b7:96:5d:11:95:35:bb:71:4a:ca:0c:21:e1:52:df:94:
         11:a0:50:d0:2f:27:8d:de:97:74:ba:67:5b:59:38:65:df:eb:
         07:06:aa:e1:3f:ae:32:21:6f:4f:e5:07:00:23:3d:63:2c:d6:
         0c:f4:52:05:73:74:6c:ca:4b:f1:7e:74:7c:4c:e9:48:2f:99:
         c5:ff:63:02:82:ac:ed:35:33:cd:33:84:b4:93:fd:13:20:54:
         19:bb:47:e6:84:02:89:0f:d2:89:94:4e:48:fc:aa:dd:81:4f:
         dd:d9:60:01:01:fd:49:b6:e2:50:5a:d5:5e:bf:f4:88:68:1b:
         7f:7f:c4:06:c6:ce:19:24:c6:c5:b2:01:e5:e8:02:78:b7:cd:
         7f:55:d8:1e:05:b5:7c:cb:04:ca:a7:10:aa:dd:4e:77:9f:ee:
         a7:7b:05:5f:60:34:ae:d6:74:61:ff:08:df:cf:26:df:fe:a4:
         2f:79:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:27:48 2024 by rpki-client on console-ams.rpki-client.org