Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91bbc855-c2a1-3ccd-b702-318cab8aa565.roa
File:                     91bbc855-c2a1-3ccd-b702-318cab8aa565.roa (raw, json)
Hash identifier:          wcswshPxos06A0tVdZ53To17R1M4farNIGIGG18X4qU=
Subject key identifier:   B6:22:99:40:A2:87:44:E7:14:A5:3B:FE:07:AE:37:3A:94:23:F4:66
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F0138BB01E4B3CBE77E6B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91bbc855-c2a1-3ccd-b702-318cab8aa565.roa
Signing time:             Fri 29 Mar 2024 18:30:20 +0000
ROA not before:           Fri 29 Mar 2024 18:30:20 +0000
ROA not after:            Thu 27 Jun 2024 18:30:20 +0000
asID:                     15169
IP address blocks:        172.217.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:01:38:bb:01:e4:b3:cb:e7:7e:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:30:20 2024 GMT
            Not After : Jun 27 18:30:20 2024 GMT
        Subject: CN=0f28a326-f555-4de7-8886-315fc5433345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:ff:61:ba:0e:a4:c9:9b:80:a6:e3:4a:a4:
                    dd:b4:9b:c8:d7:90:97:52:78:2d:2a:6f:06:95:c4:
                    14:b6:aa:dc:2e:4c:ed:2f:88:b2:57:20:d2:a1:22:
                    83:26:26:9c:4c:e0:84:63:2f:01:e1:a6:b6:25:39:
                    98:ab:b6:9d:7f:aa:a4:ac:8d:05:1b:2a:e4:66:ce:
                    3d:e6:38:9b:75:85:de:2f:43:0b:d7:bc:7f:a0:31:
                    3b:94:03:c2:a3:2d:e9:26:47:dc:f0:3c:77:27:b1:
                    8c:64:ce:ed:af:cf:46:16:2f:66:94:9d:5a:3e:6c:
                    d7:b7:bd:33:b8:3e:ef:d3:56:57:27:d7:6e:c5:58:
                    c7:b5:bf:85:a4:25:38:92:1b:58:9b:6e:03:25:d7:
                    ae:91:21:1c:cb:a8:e5:f1:43:a2:be:b3:95:ce:26:
                    35:e8:bf:6a:b6:bb:09:ee:04:c0:12:ea:48:46:b8:
                    9e:8b:79:7b:ad:72:0c:8f:8f:bf:12:25:96:e6:40:
                    66:44:6e:bb:50:cf:ff:bb:97:1b:2c:14:ca:44:d4:
                    c0:58:8d:6a:a9:07:4c:c2:64:94:6c:dc:54:c5:f5:
                    ab:00:b3:fb:bc:65:ca:9f:79:17:4a:9d:c8:b1:9a:
                    95:1c:e9:f1:83:2e:cd:a8:9b:cd:da:8a:c0:0c:a7:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:22:99:40:A2:87:44:E7:14:A5:3B:FE:07:AE:37:3A:94:23:F4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/91bbc855-c2a1-3ccd-b702-318cab8aa565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:bb:40:7d:06:33:72:99:07:fe:dd:bd:7f:57:e9:5a:74:
         47:5e:90:e4:ab:fe:6c:3c:9c:4b:4e:d9:42:a8:37:5d:f6:0e:
         52:f7:1f:e4:e8:2e:45:71:c4:6b:67:56:c0:ad:08:ef:2a:cf:
         29:92:04:71:13:e8:c0:6c:66:80:1e:5f:ad:cf:95:17:c5:68:
         e4:1c:94:87:e1:0a:87:b2:4d:b9:51:84:44:e5:67:b2:ed:a1:
         8d:1b:6c:b2:ef:dc:aa:22:a1:bd:33:e2:c3:5c:df:18:87:9d:
         ed:39:c9:eb:cf:b8:7e:c0:ed:8f:9b:79:b1:f6:00:7b:b1:55:
         b7:95:ca:80:1b:f4:e3:d2:90:dc:f5:e4:98:4c:ca:5a:9f:99:
         cb:f9:d7:34:cc:2a:80:a2:02:6f:0c:76:25:e3:b3:56:c5:f5:
         e3:79:eb:00:45:87:d4:42:3c:f5:4d:15:48:1c:15:8f:ac:ec:
         12:22:42:db:09:65:2f:bb:ba:bb:c9:65:03:76:19:d8:a8:e7:
         b1:f9:f8:95:4f:30:23:11:6c:69:96:c4:4d:0f:b0:89:6b:ec:
         45:e6:ce:06:61:41:92:14:56:9c:d0:f0:44:9f:eb:02:c6:65:
         b9:5d:80:66:8a:39:bd:a3:fe:74:3a:33:9d:94:dd:b9:d4:3a:
         31:3d:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:51:23 2024 by rpki-client on console-ams.rpki-client.org