Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
File:                     9bf1544b-0e9d-317d-9cc7-e389479204f4.roa (raw, json)
Hash identifier:          fb3w6JT9ArMPeB3OzDJkZ8+gSSFEDd9/GdVMPbl169g=
Subject key identifier:   F9:33:E6:BE:87:2F:71:8F:B6:3D:53:1D:CD:C4:0D:FE:2C:32:11:B4
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584566BDADEE7F9538C573F8ACE0
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     36321
IP address blocks:        199.83.232.0/26 maxlen: 26
                          199.83.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:ad:ee:7f:95:38:c5:73:f8:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=5b43f31c-7da1-43ef-a721-e9e53eb37cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2d:f3:95:b2:75:94:c0:d3:f6:ea:4b:fc:3f:
                    a2:1c:42:8e:01:6c:4b:c8:e7:5c:db:72:cc:7c:b9:
                    80:72:fe:98:c5:96:96:47:ae:30:62:85:34:9a:7a:
                    6c:c2:d3:f3:12:5b:22:3f:46:f6:bc:3f:08:e3:1f:
                    ed:df:5e:f5:f1:49:9e:b1:f3:ab:fe:4b:0b:47:64:
                    34:e5:48:d8:aa:57:2c:17:8d:ea:82:ec:ee:42:9e:
                    20:00:a0:eb:8e:c6:7a:e5:52:c9:57:82:2d:e5:2e:
                    2c:fc:45:c9:53:e6:39:4b:b7:8e:b9:d9:7a:67:6b:
                    88:87:4d:d6:61:6b:73:45:8a:78:29:79:cb:fd:7a:
                    3b:da:a0:b3:d1:54:5b:67:54:48:1c:88:aa:31:2a:
                    b6:9b:b9:02:a5:7f:66:25:84:3e:16:77:22:7a:ae:
                    6c:1e:29:07:46:aa:71:51:f6:e1:97:0b:ed:70:33:
                    18:25:63:87:b7:99:f0:48:77:c7:e2:d9:d0:8d:46:
                    e8:41:14:08:56:fb:58:82:fa:8b:db:d4:03:83:9c:
                    7c:aa:34:1b:e4:f1:02:51:50:b7:05:c4:06:a1:4d:
                    90:b5:4f:c1:87:dd:5c:46:99:11:eb:02:4f:80:59:
                    c2:0d:32:05:72:1e:f0:41:8d:8b:d8:49:36:ca:b3:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:33:E6:BE:87:2F:71:8F:B6:3D:53:1D:CD:C4:0D:FE:2C:32:11:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:20:58:c4:4e:1b:dc:2c:62:f3:eb:a3:d1:c1:34:d2:f3:86:
         e0:8b:c6:70:ca:30:bf:5f:e6:46:17:b6:fa:68:eb:d2:47:e5:
         5e:7f:60:96:66:c1:7f:14:9d:87:8b:0c:04:a0:58:b1:09:9a:
         9e:5b:e4:a4:37:3b:e5:06:28:12:0b:fe:71:01:c4:f1:33:64:
         11:45:16:43:7a:0b:47:35:af:e6:bc:b6:06:17:57:d2:4c:7a:
         d0:eb:9d:7a:b6:f0:23:c5:25:af:e9:cc:33:2e:92:b6:ca:63:
         f5:d8:7e:2b:de:66:ac:ca:00:98:4d:bf:34:f8:55:30:df:d9:
         f0:a1:ad:0e:f2:5a:02:92:c3:99:cb:0d:cb:66:42:04:2c:7d:
         fa:5c:3f:7b:cd:2b:45:f5:08:23:50:0f:2d:22:2a:07:f7:9b:
         2c:e5:21:fa:99:08:a1:97:15:c8:8c:fa:97:fb:17:33:a5:8c:
         23:8f:ab:de:40:99:67:df:0b:97:cd:a9:68:55:63:a0:4e:5c:
         fc:2f:cb:85:ad:9b:5c:63:00:0d:06:11:e4:81:d3:d3:d7:8f:
         9b:11:75:98:2c:06:fe:9a:7e:ec:fc:44:fa:37:16:06:7e:8e:
         53:5f:f2:36:1d:8f:d7:b0:d8:e4:cb:bc:57:cb:6d:a9:59:df:
         d1:fc:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:15:31 2024 by rpki-client on console-ams.rpki-client.org