Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa
File:                     1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa (raw, json)
Hash identifier:          etFcrVak2OQ5a1YBj+c+WDX75P5RLzbxZ+ssX/fQVIQ=
Subject key identifier:   2C:C6:B1:78:7C:BC:B7:85:DD:B8:D6:06:79:5E:39:23:82:81:7B:55
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F35CED5D9A664DD8C4A9C0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        67.205.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:5c:ed:5d:9a:66:4d:d8:c4:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=1aacacd9-4a95-4864-8f60-70bd815ae712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:70:59:f9:2e:e0:38:6e:fe:bd:21:03:99:ef:
                    c2:7f:97:90:60:6d:ab:a0:e8:e5:52:cb:5a:d0:8a:
                    14:2f:25:8f:9c:1d:6f:26:cd:bf:5b:55:d0:17:e2:
                    4a:15:22:e8:99:c0:39:97:e2:a1:09:05:f2:f2:62:
                    96:ec:4b:2c:2b:d2:ad:bf:a8:d9:90:4e:60:e4:a4:
                    4e:7c:7d:55:ed:62:27:11:af:ea:23:92:5b:07:1b:
                    4e:d0:ff:f0:76:0d:44:1a:45:a8:f7:06:f9:ad:4f:
                    1b:51:16:2b:f5:0a:59:d8:17:59:4f:ed:06:47:63:
                    c5:5f:8f:dc:f8:a9:cb:d0:fa:75:6f:0f:c1:5f:91:
                    e2:1b:05:91:03:dd:63:ec:e9:16:db:41:54:9d:e6:
                    c4:22:27:68:f6:da:40:43:e9:65:95:ba:9b:16:47:
                    21:43:a6:7c:03:aa:c0:c4:1e:c5:29:13:20:02:d7:
                    09:c6:4f:55:27:dd:78:f1:0b:71:ac:02:7d:76:23:
                    55:c3:d2:ab:fe:26:97:01:2f:e0:dc:43:bc:35:29:
                    4b:a1:e8:33:75:44:f1:4d:86:50:b8:22:33:80:6d:
                    f2:ee:80:ff:a9:89:69:2c:c3:1a:2f:77:53:ea:51:
                    f7:cf:e8:b5:c6:aa:76:d6:ea:b3:dc:41:17:5f:98:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C6:B1:78:7C:BC:B7:85:DD:B8:D6:06:79:5E:39:23:82:81:7B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.205.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:09:26:c0:9d:be:15:d0:18:c8:c9:46:8d:c5:44:8c:3d:
         1e:49:a5:9a:07:a1:9a:e4:1f:82:0a:6b:83:d0:5d:fc:7a:bd:
         42:8c:59:a5:71:5a:be:df:01:7c:03:66:bf:c6:4b:59:84:b6:
         a1:7a:44:aa:cc:05:04:28:ee:0e:61:4d:5f:ef:39:27:8e:86:
         8c:df:30:b6:a9:5b:89:9a:6b:1e:0f:0b:d8:38:31:18:7d:b0:
         6d:c7:be:c1:00:70:92:f5:48:78:a5:ef:c7:6c:6e:48:07:0b:
         74:68:62:8a:54:11:33:d8:b7:91:06:34:15:71:d9:4d:5c:d2:
         c3:41:64:bd:40:12:c9:75:83:46:53:29:15:37:68:b0:be:65:
         bc:6d:03:5b:1f:5e:2c:28:ac:2d:41:05:dd:19:b8:e8:48:c6:
         a3:53:aa:06:f9:ec:84:12:b8:ef:8c:24:8f:e8:69:fc:a8:b4:
         aa:b6:a1:08:7d:e5:e3:58:82:d8:e4:1a:d1:b2:6a:93:82:6d:
         12:58:8b:9a:d9:da:ee:10:9b:03:60:a3:7f:f4:d8:bb:e6:88:
         4a:34:80:f6:bb:fa:e1:67:66:5c:66:b2:c1:55:be:1f:31:72:
         ee:06:79:1b:f0:f3:cb:e8:0a:a9:1a:15:95:f0:76:46:c2:98:
         cc:0a:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:31:24 2024 by rpki-client on console-ams.rpki-client.org