Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa
File:                     12c8b264-052f-356f-a94d-718e65321e32.roa (raw, json)
Hash identifier:          OsMDaa0tRo7q+yxXGSLM+KKAXP9Oe0qGgBG7sCzDK68=
Subject key identifier:   74:CF:54:B1:23:29:E0:39:D3:56:26:0B:1D:4A:F2:4D:2D:01:31:2D
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F4328584563F2FF34EF0079E391D16F80
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     14007
IP address blocks:        199.101.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f2:ff:34:ef:00:79:e3:91:d1:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=65c67008-eb65-481b-b254-9034c977e088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:c9:bb:d6:80:00:60:cc:6e:18:26:62:27:
                    40:8c:41:6c:6b:7b:ad:6e:06:34:1c:8b:3f:c3:61:
                    e0:ba:3c:18:8a:5e:2d:05:62:f2:72:94:24:5e:a8:
                    79:0d:f7:4d:e4:b9:ad:78:28:1d:8b:00:81:c5:b2:
                    4a:bb:aa:9c:1b:e4:1f:c2:e7:00:4d:82:20:1a:48:
                    66:04:a6:5d:e8:c1:97:ca:c7:a1:ec:13:80:d4:65:
                    34:dd:dc:05:48:04:96:72:9d:2c:81:23:0c:15:f3:
                    b5:e4:c5:a8:eb:80:b1:5e:aa:31:4b:8b:35:9f:02:
                    67:51:fc:53:98:0c:c4:c4:21:68:ff:a9:67:6f:59:
                    b5:0a:8f:74:81:09:42:ce:4c:d8:dc:9e:9e:ff:c1:
                    e7:2a:ef:ee:6d:b4:94:fd:76:96:25:21:b6:f0:aa:
                    f9:34:ba:c7:11:fd:86:ce:dc:f0:fd:96:a2:9d:6b:
                    4f:9f:47:29:29:3c:8a:70:f8:a2:2f:07:a3:1b:3a:
                    5b:33:46:92:e0:48:bf:75:e2:60:c9:14:5d:f9:62:
                    a9:51:79:f3:1d:46:53:ba:9d:fb:de:a0:ed:3e:aa:
                    8b:60:0c:a0:67:ac:67:2c:59:f7:12:ee:17:70:bd:
                    44:84:4a:5e:1a:71:01:6c:83:fe:89:98:06:86:02:
                    d2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:54:B1:23:29:E0:39:D3:56:26:0B:1D:4A:F2:4D:2D:01:31:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/12c8b264-052f-356f-a94d-718e65321e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:77:95:dc:14:65:80:0a:a4:37:62:2e:2e:1e:b5:1d:ba:dc:
         3f:9a:90:c8:4d:e3:1d:c4:a1:53:b8:88:ef:93:0c:17:21:89:
         6f:68:60:36:33:ba:bc:81:73:89:43:c0:62:1a:f0:35:e7:db:
         43:6c:6d:16:30:11:96:71:d6:a0:4a:82:2f:f7:12:0d:b8:b9:
         20:11:4d:20:bd:41:de:3e:c2:16:ba:8e:07:ce:b3:86:2b:ac:
         b1:e1:68:e4:03:f3:d3:a0:ad:1e:1c:83:68:68:91:a1:c3:25:
         2a:12:f1:a8:cb:a0:3b:e0:ca:e3:73:a8:f4:b4:70:69:af:d3:
         0e:34:3f:df:83:a8:6f:25:9b:1a:ed:80:c5:a9:97:eb:f9:6f:
         b4:c3:02:7a:ad:78:3a:e1:dd:70:49:92:fd:2d:0f:f2:3f:0b:
         87:db:ac:1b:7c:18:ec:fc:25:54:82:80:79:49:0e:1d:1c:37:
         76:2a:0e:5c:87:b7:a6:55:89:77:c9:26:05:f2:51:9a:23:2f:
         e6:0c:34:b5:26:ac:77:f6:3f:ad:43:ac:e2:80:04:01:d9:26:
         af:4d:4a:97:1d:30:19:37:de:ad:d7:72:07:6a:18:0c:4a:0e:
         0e:61:fe:db:b1:0d:d9:c6:97:dd:64:25:ff:f1:b5:2b:ef:3d:
         01:02:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:23:26 2024 by rpki-client on console-ams.rpki-client.org