Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cac64395-b566-3b4e-8710-3754557d83fc.roa
File:                     cac64395-b566-3b4e-8710-3754557d83fc.roa (raw, json)
Hash identifier:          P9eIBfhLizKihXQGOnX+FTT8uoqShE1JYLclcEAjRFc=
Subject key identifier:   10:2F:11:32:85:7A:5E:3E:6E:47:1C:D9:E1:20:CC:51:7C:2A:AD:9D
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584511B590EB48FD75CE976C7E80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cac64395-b566-3b4e-8710-3754557d83fc.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     29156
IP address blocks:        20.155.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:90:eb:48:fd:75:ce:97:6c:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=c94dcd42-328b-44e0-ba97-03e3ef68b06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:f0:fc:32:0c:21:9b:d2:0e:70:f1:62:da:
                    9c:0b:88:d9:46:ba:e8:39:64:dc:c9:b8:c9:f7:a4:
                    e1:87:e0:51:c9:c3:f2:ca:aa:40:c5:57:42:a2:e0:
                    f8:e8:8f:9b:09:93:b1:80:9a:cd:70:9a:60:14:a2:
                    54:e4:90:71:18:af:b5:fd:9f:89:c9:0a:bb:5a:04:
                    a2:11:c7:2a:f8:a2:07:23:23:23:d7:64:9b:6b:e6:
                    00:21:88:5c:ab:73:50:85:4c:38:bd:22:29:2b:b8:
                    5f:c6:5a:7a:2a:51:5a:df:87:39:6d:3e:46:8c:02:
                    bd:12:92:d9:e0:c4:e9:50:1d:9d:0a:e4:c5:ca:0d:
                    fd:96:dd:9e:ed:ec:0a:cd:c9:32:f9:96:54:6b:89:
                    d2:36:43:e3:74:d6:60:b2:9b:77:93:79:5c:b2:7c:
                    bb:2d:0b:e6:c5:69:6b:04:43:33:c8:f9:5f:a6:b1:
                    c2:71:41:a4:a5:4e:34:0f:7b:0f:cf:c1:1d:18:52:
                    ac:14:46:46:92:bd:af:f9:6c:53:bb:9c:f1:7a:ed:
                    fe:07:52:d7:a2:9a:95:15:b4:59:bd:8d:67:82:4f:
                    f8:1c:b8:15:ef:f7:5e:d0:ca:84:0c:d2:20:c8:35:
                    db:ff:4b:a4:4d:bf:2a:47:30:fa:13:b0:87:aa:26:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2F:11:32:85:7A:5E:3E:6E:47:1C:D9:E1:20:CC:51:7C:2A:AD:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cac64395-b566-3b4e-8710-3754557d83fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.155.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:51:8f:33:c0:ea:bd:89:6f:49:e5:44:da:6f:1f:93:31:
         e1:df:23:a5:20:98:a1:94:95:93:f9:7e:ad:e5:fe:ab:48:f3:
         ed:c5:a8:1b:91:2b:97:21:e1:77:6d:20:76:a1:5e:d5:bb:cb:
         c1:28:2c:93:52:57:b3:4c:7e:d9:0b:17:af:e9:83:50:71:42:
         c8:88:4e:98:2f:08:9c:60:21:a0:bf:7d:f1:a5:5f:8c:21:ed:
         a5:8d:ae:0c:c4:69:8b:7d:82:04:d4:a5:f9:1d:8f:fe:fc:61:
         86:4a:5c:8c:71:43:24:06:45:cf:0a:80:24:6c:0b:c7:53:b8:
         f3:39:39:e5:00:5a:eb:20:8f:29:17:c6:ca:84:df:4d:84:40:
         c6:64:2c:92:f1:07:00:3d:2b:c8:5f:f9:09:87:a5:0e:f9:f0:
         f2:18:b2:53:4d:23:0c:26:94:8e:cf:98:1d:40:5f:19:87:80:
         c7:ce:e0:ff:fc:4a:13:03:74:4d:23:ab:57:d5:b0:bf:0d:de:
         37:49:7f:1d:78:44:b8:42:61:91:ab:4c:cf:bb:00:56:1e:14:
         e5:75:28:1f:2f:d7:22:37:94:36:fa:8d:ef:e9:e6:70:e8:4a:
         fb:dd:a3:a8:af:58:16:21:18:97:a2:3b:c5:60:39:5e:37:01:
         7d:c9:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:40:40 2024 by rpki-client on console-ams.rpki-client.org