Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
File:                     e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa (raw, json)
Hash identifier:          FSqBgO7CBf/IeXqVWvCUgJ0pwMehiEEdBrqnkbFiFgk=
Subject key identifier:   A0:4D:75:36:AF:3F:F8:E0:A7:2C:74:02:FB:51:CF:23:BD:31:E1:CC
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F3587D259B7644E4615200
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        164.90.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:58:7d:25:9b:76:44:e4:61:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=ea9483c4-4f67-46c5-a6ed-620dcc9c9703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:75:f9:c9:85:4e:2a:87:84:0e:3f:7a:ef:
                    7e:7f:b9:ef:4a:f3:f7:0b:a6:9e:cf:72:8e:1c:f9:
                    50:81:f3:a1:bf:c6:6d:8f:ca:21:47:4d:20:e5:e8:
                    e9:71:45:c9:1b:bc:eb:a5:84:0a:cc:9b:06:5f:a8:
                    7c:0c:d3:4b:90:1e:ce:4f:fe:31:3b:57:a3:fc:e9:
                    07:a4:aa:d8:ee:bd:ea:3d:01:d3:6c:46:aa:59:c4:
                    c9:7d:83:ff:76:f3:4e:d7:87:8a:f4:06:4b:f7:5c:
                    f1:ac:e0:4f:6b:d3:bd:83:38:19:86:bd:54:3c:f3:
                    bd:54:ad:69:53:65:a5:a0:dc:db:77:e0:2e:a1:fb:
                    fb:c4:ee:be:ad:a5:40:1d:f1:68:bf:26:b6:b8:df:
                    11:d1:c0:b9:65:fb:29:0c:11:7b:0f:34:06:b1:71:
                    59:f0:24:df:5c:87:37:70:fa:94:de:6a:f5:d1:7a:
                    af:da:72:b5:90:2a:55:28:89:8c:ef:68:ff:8b:78:
                    5f:9b:c3:76:c4:48:8e:1d:16:58:6e:34:ba:8d:06:
                    9e:07:a4:a5:72:d0:ee:85:a1:06:f0:8e:cc:5a:40:
                    6b:c1:38:e5:82:81:5c:16:9a:33:43:c6:5f:4b:30:
                    38:d9:76:b7:62:c0:89:ff:05:01:73:00:97:d1:38:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:75:36:AF:3F:F8:E0:A7:2C:74:02:FB:51:CF:23:BD:31:E1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e3c8e784-b19a-3fd3-b62c-ceef204b011e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.90.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:06:06:cc:1f:56:36:0f:c4:c4:cf:d5:dc:79:57:da:3b:b8:
         50:ed:2b:96:c3:d3:41:73:25:73:86:8f:5f:64:72:d1:d6:53:
         25:b6:b0:69:60:8c:af:b8:e0:e9:b4:d8:71:dd:88:16:bf:74:
         4b:f4:fe:c2:cc:4f:7d:be:7b:0f:ee:0a:9c:26:19:d4:03:0e:
         76:21:2f:7c:f0:37:95:95:c6:c4:c9:e5:7b:10:44:d3:6f:25:
         2a:07:17:89:f8:02:5c:f4:62:39:31:6b:05:3e:cc:fb:b9:84:
         60:d5:0a:3e:6b:04:23:af:50:6e:66:92:d3:12:ae:7a:e2:f9:
         f2:86:ff:63:51:30:6b:65:68:62:bd:85:1f:9b:67:7d:55:18:
         1e:8a:4c:a2:0b:58:79:4b:f3:70:74:b2:1e:e1:8a:70:0b:ad:
         8d:7c:a6:63:fb:56:ea:5a:65:62:8c:3c:a8:50:ad:e9:a5:9b:
         96:63:30:57:e8:3f:b7:b3:d2:2a:4c:1e:5f:01:1f:dc:82:47:
         6a:a1:c6:7f:c1:d1:df:2c:0b:c2:69:54:ba:53:d8:2d:e0:4f:
         af:c6:41:bf:70:cb:a2:5f:20:cc:df:bc:d7:d9:f0:75:cb:90:
         df:66:fb:52:6e:da:70:a9:c5:8b:07:17:d0:91:7e:c7:88:87:
         b5:66:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:03:52 2024 by rpki-client on console-ams.rpki-client.org