Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e30b1aa-c041-3db6-b78d-d1d18befb77a.roa
File:                     7e30b1aa-c041-3db6-b78d-d1d18befb77a.roa (raw, json)
Hash identifier:          laWr1/HzSKrwxa8tfH+vcwBbAE5CMICPHkCl0RD508Q=
Subject key identifier:   C0:79:3A:45:1C:FF:B9:FF:10:0B:06:90:8E:D8:AF:D4:3B:39:61:9E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858458531D94C361710C0EC2B5840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e30b1aa-c041-3db6-b78d-d1d18befb77a.roa
Signing time:             Fri 12 Apr 2024 10:49:01 +0000
ROA not before:           Fri 12 Apr 2024 10:49:01 +0000
ROA not after:            Thu 11 Jul 2024 10:49:01 +0000
asID:                     20940
IP address blocks:        96.17.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:31:d9:4c:36:17:10:c0:ec:2b:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 10:49:01 2024 GMT
            Not After : Jul 11 10:49:01 2024 GMT
        Subject: CN=a2f6c10e-6d3e-42ed-939c-bec6effbc429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:38:1a:7a:e7:c0:b2:8e:f1:0b:ef:2f:f4:
                    79:c1:a6:d3:f0:1e:52:4b:d1:60:93:5a:24:56:24:
                    69:d5:48:96:8c:84:b2:f8:a9:6e:89:49:e9:f6:eb:
                    e7:17:ec:19:fd:bc:52:16:dd:d6:54:91:c7:62:44:
                    1b:26:58:bb:c2:d1:61:73:41:d0:4f:f6:58:0e:e0:
                    eb:8b:b6:31:24:f2:50:b2:bf:de:9d:a1:1b:39:1e:
                    55:b8:ee:b4:a6:59:09:fb:cb:ae:dd:5c:11:46:49:
                    7b:d1:ff:98:39:dd:f9:0b:5c:f0:3c:dd:94:d0:0d:
                    0a:3b:f2:7e:b1:ce:0c:78:81:57:20:52:89:55:56:
                    53:89:75:cd:02:19:0c:1c:cb:37:3f:00:39:fc:1b:
                    74:c2:b0:a3:60:20:8c:dc:0a:d0:25:33:8d:76:83:
                    2b:4b:e7:62:38:26:41:55:eb:d3:c2:89:50:f6:3e:
                    dd:2c:fd:4e:88:c2:21:2b:a6:0d:9c:74:af:29:e7:
                    bf:16:e7:3a:e8:79:dd:b8:f1:00:dc:aa:0e:62:0f:
                    55:c6:07:3b:d0:81:2c:28:6d:fd:f7:f4:23:4d:52:
                    a5:e7:16:4c:31:15:68:44:24:3f:fd:61:2c:07:0e:
                    4a:c7:87:53:fc:34:10:2a:7c:17:f6:42:ca:73:91:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:3A:45:1C:FF:B9:FF:10:0B:06:90:8E:D8:AF:D4:3B:39:61:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e30b1aa-c041-3db6-b78d-d1d18befb77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:dc:8c:a7:d7:3b:dd:1b:36:0b:96:f9:02:28:af:8d:9d:
         66:b0:5c:88:69:39:dd:8e:18:b9:43:0e:89:2f:89:f9:2f:d2:
         b6:70:26:3a:f5:17:b9:78:1b:c3:3b:78:3a:0c:ae:06:26:22:
         3c:73:06:9d:2a:7f:03:1d:cd:43:1e:a6:f2:89:be:37:08:f5:
         8e:f4:67:ca:e0:63:71:e2:9a:c5:4a:78:c4:e5:23:60:be:fe:
         b5:98:b7:1b:c0:42:d5:9d:60:13:45:94:09:c6:85:14:0b:62:
         6e:ad:fe:3e:35:5e:ab:a1:62:25:57:66:08:65:8d:22:c3:cd:
         86:ed:d7:32:fa:11:b2:78:4c:23:71:1d:1e:7b:7a:e6:4d:8b:
         10:4c:43:be:54:47:32:5c:50:f9:80:3d:6e:ea:59:5e:e4:57:
         87:5a:8c:96:48:0f:d6:f0:be:e1:4e:d8:b5:9e:5a:35:6e:09:
         a0:e9:29:47:49:34:cc:b6:b0:cc:b3:55:9b:de:26:35:34:2f:
         15:27:4c:61:77:48:71:9c:cb:47:81:b7:7b:b3:e7:ae:e6:ac:
         56:1e:13:a0:ee:36:cb:de:ab:59:9c:87:e9:3b:d6:f9:67:48:
         0a:f0:fe:83:a2:2f:25:fb:f3:80:03:a8:ea:00:70:a2:bf:12:
         e9:d4:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:10 2024 by rpki-client on console-ams.rpki-client.org