Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa
File:                     8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa (raw, json)
Hash identifier:          DLEww8rZ2pTQPNEVfJZJzRl+ZpzUWxuGc8gIbMtugg0=
Subject key identifier:   33:63:86:FB:6A:35:EB:74:56:1C:84:7C:87:06:0B:53:FF:26:C7:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452952955ECA0882260584DA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     9299
IP address blocks:        184.87.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:95:5e:ca:08:82:26:05:84:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=60c5d3cc-1171-42a9-9881-1f06d073db89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:00:59:19:04:40:f3:e4:0c:ef:2c:b8:14:
                    d5:ed:f0:4a:1f:07:a9:13:b8:26:af:58:a8:53:60:
                    19:50:30:1e:74:0e:cc:90:bb:45:37:ff:e6:12:a3:
                    56:f7:10:8b:f4:41:75:44:77:da:fe:b3:5e:b6:84:
                    40:24:c2:34:41:8f:d1:7e:a7:d8:81:13:be:30:b5:
                    c6:ce:15:54:dd:d2:97:c5:76:61:93:c1:e0:cc:a1:
                    eb:b1:1f:af:16:d7:ae:ee:08:fb:b0:87:19:5c:2c:
                    8b:37:ad:36:92:65:f5:43:40:c2:d5:d1:02:0c:89:
                    c2:b2:a8:36:34:60:93:cb:67:e7:13:21:3e:64:6a:
                    35:c8:28:bd:42:40:b2:1c:e2:ea:34:07:96:af:bd:
                    11:46:f2:a1:7c:eb:8d:3c:00:04:ba:a8:ed:b6:34:
                    c2:92:7f:30:51:10:ab:5d:a4:63:a2:b8:43:a0:54:
                    e9:86:e9:29:f8:7b:f8:cb:ae:31:2e:a7:85:f0:db:
                    3e:79:48:62:ed:a7:8e:ed:17:4d:fb:92:8d:41:f3:
                    be:72:2d:e1:ad:9c:52:67:be:e6:bd:9e:80:41:d6:
                    a5:ef:69:54:04:f8:db:d8:5e:5c:a6:35:81:63:95:
                    44:92:d6:62:67:c5:cc:70:49:ca:45:db:37:cc:d1:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:63:86:FB:6A:35:EB:74:56:1C:84:7C:87:06:0B:53:FF:26:C7:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:74:a7:44:b7:01:8b:68:4b:cd:5e:1d:c7:8b:d0:b3:2d:
         d3:a2:87:6a:30:b0:7d:64:94:d9:33:9f:16:0c:ee:31:eb:02:
         7c:11:0d:c9:fe:dc:a3:d3:df:b2:82:ce:d6:27:0e:78:0d:c4:
         68:53:f6:46:c4:e4:b0:03:c3:7d:52:21:af:98:d3:d4:9e:53:
         8d:0b:db:45:cd:6c:3b:dd:91:8e:95:f7:26:a2:bd:f3:da:fc:
         7e:0c:a7:85:e7:54:60:fd:2d:b7:69:be:f3:2c:8b:07:8f:cc:
         55:9d:11:85:92:21:a9:20:41:90:76:e4:5d:07:aa:17:42:6d:
         2f:2e:79:38:c2:a7:70:12:0b:aa:ae:3c:e3:dc:19:0b:e1:73:
         b6:a9:a8:02:66:66:f0:5f:09:31:01:4b:ea:51:c0:cc:25:4f:
         5c:4a:ef:ab:bb:18:f8:f3:b7:63:c3:dd:8f:8e:b3:4e:d5:51:
         c5:eb:8c:e4:d8:6a:64:92:10:36:6d:d2:0a:32:76:fe:8d:f8:
         61:82:9d:a1:06:a7:ee:65:b5:3d:b9:9b:a2:16:39:a8:bf:ae:
         3f:16:a3:1f:1c:07:b6:4e:36:50:41:67:b6:c9:c8:7a:cf:b0:
         c5:ea:cb:cd:9a:e0:c9:e3:61:6f:ea:54:58:11:b2:8b:56:4a:
         d0:bc:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:12 2024 by rpki-client on console-ams.rpki-client.org