Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa
File:                     2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa (raw, json)
Hash identifier:          dyE/OeIFvmXIF2PLhXI/8dWF3LXcbpUVEM5eC9ReNWo=
Subject key identifier:   97:12:B8:5C:78:08:A4:38:7A:1F:AE:E7:2F:96:56:86:6F:97:C9:E9
Certificate issuer:       /CN=19d9b9bc-a20d-4235-acc5-045fb91a3837
Certificate serial:       010D0C9F432858455E5DABFF6F5007746FCD9800
Authority key identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     32354
IP address blocks:        208.80.116.0/22 maxlen: 24
                          208.71.156.0/22 maxlen: 24
                          208.76.28.0/22 maxlen: 24
                          208.87.216.0/21 maxlen: 24
                          173.239.64.0/20 maxlen: 24
                          162.244.56.0/21 maxlen: 24
                          204.11.104.0/22 maxlen: 24
                          208.64.184.0/22 maxlen: 24
                          2607:f640::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:ab:ff:6f:50:07:74:6f:cd:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d9b9bc-a20d-4235-acc5-045fb91a3837
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=951950d6-d3ec-4d03-b0ad-a9d639a7ee43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:2c:48:51:6b:bd:6c:3f:03:47:83:d5:1a:
                    7f:7d:83:1b:3a:5b:b4:a7:67:53:12:bf:d3:3f:a3:
                    fa:c6:1a:e1:f7:84:f6:43:61:5d:0a:33:d4:60:58:
                    42:d4:bd:f6:35:05:85:53:73:70:ae:a1:b0:7c:ca:
                    22:2e:de:ca:63:ed:e9:27:3b:04:c4:8f:a3:7a:05:
                    63:47:62:7f:c3:62:ca:4a:08:44:94:3e:5b:eb:f6:
                    63:77:82:d6:75:46:41:96:c2:2d:69:f9:77:d3:d0:
                    77:66:21:90:8d:bc:ce:bf:f3:30:3c:95:3f:9a:b3:
                    74:09:70:84:89:37:5e:c7:54:a8:ab:64:24:a2:68:
                    df:ce:86:76:96:56:8f:88:d4:bb:ee:21:7b:e9:2f:
                    22:00:5e:a5:1e:30:59:b6:16:97:22:f4:76:2a:71:
                    50:cb:ad:9c:0b:7c:f0:2f:76:06:88:7d:22:ae:c6:
                    37:90:74:31:e4:3c:16:fa:fc:b5:0c:29:93:8d:01:
                    1a:da:ac:c2:7b:d8:80:a4:5c:48:73:96:c1:60:35:
                    77:c4:a1:70:18:8e:75:79:04:23:49:72:83:4c:ee:
                    7e:66:04:c6:28:d7:ec:58:17:97:b5:22:c0:8b:32:
                    37:f7:a5:e3:7d:37:c1:a3:07:49:3b:b1:c8:38:19:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:12:B8:5C:78:08:A4:38:7A:1F:AE:E7:2F:96:56:86:6F:97:C9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl

            X509v3 Authority Key Identifier:
                keyid:DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.56.0/21
                  173.239.64.0/20
                  204.11.104.0/22
                  208.64.184.0/22
                  208.71.156.0/22
                  208.76.28.0/22
                  208.80.116.0/22
                  208.87.216.0/21
                IPv6:
                  2607:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f6:ff:5a:35:4a:68:e4:50:73:be:df:ff:b1:47:c3:f5:82:
         87:a2:d9:8d:1d:5f:50:11:75:fe:83:9f:07:9e:50:54:03:0f:
         e4:43:0f:7f:fd:65:69:f5:10:a8:1b:61:14:a5:cb:3b:41:74:
         1e:eb:16:e7:75:3d:e9:8c:3e:3c:8c:09:ab:5c:1e:bb:1c:61:
         0f:f1:41:c4:fa:43:61:47:18:76:72:23:09:ff:5a:84:46:c3:
         74:8b:b9:b7:0e:db:0d:75:00:bd:80:98:9e:5f:42:81:2b:31:
         c3:66:ff:fe:82:1d:7a:e5:25:ca:89:f9:0b:bd:7a:8f:69:67:
         1f:59:05:e8:9a:af:c7:40:47:78:04:2f:0c:08:cc:2c:31:c5:
         95:7c:00:88:03:f1:df:10:0f:bc:f3:55:59:c9:9d:ab:b1:c0:
         53:e9:92:7e:47:6e:ad:d0:de:a3:8e:8f:59:20:20:a3:6f:e6:
         cc:24:fb:64:73:de:f8:2f:5f:7d:3c:fe:c4:09:78:48:17:2c:
         69:56:ad:35:6a:d8:88:78:a8:7f:c0:39:39:d5:00:a9:ef:bf:
         8a:eb:8e:26:15:65:b6:ca:05:36:ff:28:f3:9a:58:ed:27:e3:
         7c:13:ac:19:9e:83:dc:15:74:e1:a5:50:65:0a:7e:6c:31:18:
         53:83:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:23:25 2024 by rpki-client on console-fra.rpki-client.org