Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa
File:                     412dc3c0-2791-366f-afa1-291c038135b9.roa (raw, json)
Hash identifier:          zy8qHGcPLouF6r5jcVBCZaI/clSX3sgBRA7gUUj5B48=
Subject key identifier:   62:F8:99:0A:F9:4A:C5:E5:A8:9C:8E:0C:99:C2:19:0E:F0:F4:6E:E6
Certificate issuer:       /CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde
Certificate serial:       010D0C9F4328584507F0222CB3C3BC98B3C93140
Authority key identifier: 81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     396982
IP address blocks:        156.77.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:22:2c:b3:c3:bc:98:b3:c9:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=66af9523-5564-4894-9ddb-a23935d14c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:c8:ea:31:d4:0b:ba:e2:51:bd:e3:b8:2f:
                    0a:4c:ca:bc:10:6a:20:f3:33:ba:91:5d:dc:60:76:
                    fc:d9:d4:bd:4f:7b:a2:e3:ff:ba:71:83:90:9c:90:
                    81:4f:3c:3b:b4:bc:4c:2c:55:e0:09:07:3a:d7:7c:
                    4b:86:1f:44:78:ad:07:57:21:27:46:fe:93:ed:d9:
                    4c:6e:2f:2c:9a:ff:b8:75:a1:55:c6:ce:2e:ef:fb:
                    f9:49:3d:b3:ef:91:d1:a3:7f:66:9a:3a:9a:f6:ff:
                    ed:82:e9:33:22:54:37:5d:a2:a5:12:b0:98:bd:b0:
                    fa:8c:af:3f:35:91:6a:7e:c3:21:31:7a:47:7f:fd:
                    50:83:39:48:b2:8c:68:4e:18:b7:df:21:75:95:27:
                    8f:4e:35:d4:66:d9:57:d1:a9:2c:fb:19:c9:10:4a:
                    18:a6:61:3e:75:93:87:8e:56:24:31:4c:85:28:21:
                    6b:94:80:5d:e1:ac:d5:75:54:a9:67:c5:b9:ff:67:
                    84:6a:ac:6b:65:11:5a:f0:a1:9e:e3:d9:db:61:56:
                    83:31:05:6a:52:c9:a2:06:1c:b8:b9:cd:b8:ac:e4:
                    46:aa:85:30:73:d5:7b:f7:ea:2a:37:6d:1c:48:0f:
                    7f:7d:da:2c:dc:c5:4c:bd:23:67:9d:fd:0b:90:35:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F8:99:0A:F9:4A:C5:E5:A8:9C:8E:0C:99:C2:19:0E:F0:F4:6E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl

            X509v3 Authority Key Identifier:
                keyid:81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.77.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:17:c3:82:4c:b5:1d:c0:37:ff:05:3a:58:f1:77:ed:f0:
         1e:0d:90:0c:dd:9c:bb:17:9c:bb:b4:03:06:cb:81:60:82:11:
         48:7f:07:35:0a:39:00:5e:d5:2f:9a:e1:d9:10:d0:7b:05:8f:
         57:ac:7b:fd:04:b1:69:38:f5:e9:9e:ee:3c:87:6e:98:cd:57:
         d8:22:84:18:58:ad:8c:7b:39:f3:ae:16:20:15:74:79:68:eb:
         55:7b:f3:3c:3b:c8:e1:ad:3f:7d:14:b4:be:90:cc:94:21:43:
         42:2b:cd:ff:ba:bd:e6:21:c7:a6:6a:0f:14:86:db:9e:fb:ce:
         f9:0f:df:6c:40:01:92:a3:d2:6d:77:67:50:d8:1d:83:d7:2a:
         d8:6e:21:b3:7a:d0:5b:53:b9:fd:6b:70:a5:bb:67:ab:09:63:
         1e:cd:23:69:3d:7a:45:79:34:a1:fb:d5:15:d4:7c:f2:cc:7b:
         1c:95:d4:07:7f:41:b1:a4:d1:cd:7d:7c:34:3f:64:50:79:86:
         9b:39:7f:39:59:d3:dc:ad:aa:fa:41:27:d8:fe:ff:6b:6f:ed:
         4e:81:13:0f:1d:7a:e2:d5:0b:09:89:96:ef:44:5d:c2:c6:d3:
         76:c9:0b:43:72:a1:2a:34:ba:38:97:cb:32:52:9e:00:d0:33:
         16:9e:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:03:01 2024 by rpki-client on console-fra.rpki-client.org