Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
File:                     3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa (raw, json)
Hash identifier:          KUaqlUH7sviTd1VhxX9xD5IXgUNIshrjvVDNfD8rnTw=
Subject key identifier:   FD:13:29:D0:27:D1:04:46:F9:A1:4B:1A:2D:4D:D6:35:B9:F9:84:23
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F3580665EC0348DE19FC00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        192.81.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:58:06:65:ec:03:48:de:19:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=55eeb686-64c6-48eb-bac6-3600c647e6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:aa:fb:1f:f4:e5:24:9c:85:03:d4:f6:ab:
                    89:3b:92:c4:fc:42:74:a8:85:98:e8:63:ba:3b:76:
                    b6:8c:70:7f:fc:55:53:5d:35:72:bc:63:e6:7c:00:
                    5e:ed:0f:c1:4c:ec:21:ba:1f:d4:26:a1:cf:2e:d8:
                    f2:1d:2b:bb:9b:fe:12:fc:5d:a8:ac:29:9a:b6:0f:
                    a1:a2:81:61:10:5c:6e:b3:ae:31:79:e8:e4:cc:6c:
                    96:f0:a4:f9:39:d5:84:7b:6c:4b:a0:a5:6e:bf:27:
                    83:0a:cc:31:d7:84:55:30:df:a2:dd:b4:3c:9a:93:
                    0d:df:7c:1d:31:31:7c:d8:e2:c0:4d:25:31:2e:4a:
                    35:33:9e:41:f6:8b:88:09:94:c5:f1:7d:26:b8:34:
                    2c:bb:75:bb:39:af:3a:6c:76:2f:10:fc:49:d2:9e:
                    39:64:4d:ec:6e:32:27:f6:a5:74:c1:ca:dc:3b:eb:
                    71:ce:0f:83:37:1d:c7:33:bf:6a:56:2e:b8:29:47:
                    17:d7:bb:d8:b4:94:8f:91:18:98:54:df:f1:6c:20:
                    68:b6:70:4c:34:00:a5:af:23:fd:d2:08:02:b8:b4:
                    cc:e5:51:b1:7c:d6:91:46:98:a0:d1:20:ce:a3:ce:
                    15:db:52:74:9d:1f:11:c1:1b:44:9d:c6:4a:92:d9:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:13:29:D0:27:D1:04:46:F9:A1:4B:1A:2D:4D:D6:35:B9:F9:84:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:29:47:6a:79:9e:3e:8d:d6:41:d3:0c:89:46:3e:35:38:3c:
         af:6d:67:bf:b3:c6:c4:ce:f1:0e:61:25:43:9a:06:fa:dd:b2:
         07:f5:1a:02:a9:7b:0e:3a:3c:ae:65:1c:c9:95:fd:c6:ea:1a:
         31:a1:5b:99:46:fd:79:87:17:09:6e:cd:69:72:eb:75:36:f9:
         19:f3:f3:e2:59:87:96:0e:8e:47:d0:a2:ee:c9:3b:71:58:0c:
         07:11:22:f0:16:33:9b:9c:ba:51:a4:46:d6:c8:64:da:80:70:
         8f:3c:10:39:5d:91:19:5e:7c:3f:cc:d5:e1:c7:41:20:1b:cb:
         d1:79:1b:80:ed:34:19:c6:ce:1c:5e:f6:02:87:ad:30:01:fb:
         0f:b3:c4:35:13:66:6d:ae:44:1f:e5:e4:d5:34:a0:d7:4e:a3:
         69:0e:c8:13:76:76:d9:59:f2:cf:0d:05:c4:6b:e1:c3:79:2c:
         ca:89:a7:af:6e:01:db:ff:73:04:a4:74:9c:68:e8:55:de:11:
         62:96:dd:99:2c:c3:7f:40:84:7b:0e:1a:7f:4c:6f:81:df:8b:
         7f:d6:70:1a:d0:a0:5f:74:0b:d3:4b:ce:bf:d8:b4:c5:92:f1:
         52:09:ec:2d:99:cb:a8:f8:d4:34:f6:9f:dc:6f:d0:41:5a:65:
         01:7e:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:31:24 2024 by rpki-client on console-ams.rpki-client.org