Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa
File:                     1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa (raw, json)
Hash identifier:          zZhd4i+8OcAQMf9OV5nsSrQh91myjqbrYKTVdl9qDAg=
Subject key identifier:   DC:C5:4B:55:86:38:DD:80:E8:81:CE:F6:73:13:6E:C4:FD:7A:AC:FD
Certificate issuer:       /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
Certificate serial:       010D0C9F43285845025AD2CA34C2595048D0B520
Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     16715
IP address blocks:        67.220.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:d2:ca:34:c2:59:50:48:d0:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=dcdb166c-2610-46c5-9f39-0ce7f3b3b0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7d:83:db:40:50:1a:63:5a:f1:0e:86:43:45:
                    cf:bc:19:6c:47:46:71:26:ed:8f:31:98:2f:38:47:
                    5e:ac:71:52:ec:ee:10:af:b1:9d:3e:23:a9:4f:9b:
                    58:9d:ec:96:aa:d5:50:5e:0c:3e:20:39:4d:87:35:
                    02:71:f3:79:89:f6:68:c6:ed:35:c9:9e:8a:22:62:
                    82:32:f8:cd:a1:62:ae:74:ec:2d:6e:78:6b:ae:8d:
                    1c:87:03:e0:f1:35:22:43:68:1e:9f:b0:43:4a:d1:
                    68:42:b5:f0:82:94:3d:f4:6e:ee:11:c7:cd:31:5b:
                    8f:fd:70:90:ee:d9:9a:0e:5c:97:c1:fb:50:b2:c7:
                    ef:13:f2:68:8a:38:01:9a:82:9f:50:fb:48:62:03:
                    27:85:e5:65:ee:4e:f3:73:d7:37:28:11:08:7f:d2:
                    b0:06:db:7b:85:9a:5b:8a:e2:ed:a3:56:d3:51:f5:
                    9d:65:3f:24:cd:bb:7c:48:1f:6e:5a:b9:61:6f:d4:
                    42:90:69:80:0a:01:26:0b:c0:aa:e7:78:5a:3a:33:
                    82:0f:75:93:95:68:2b:68:83:06:67:0c:4d:ed:e8:
                    f4:9b:a1:d5:9f:27:f4:3b:a3:70:13:a9:fa:28:be:
                    70:f2:af:b2:07:cf:fa:c7:c6:0f:dc:68:a3:af:53:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C5:4B:55:86:38:DD:80:E8:81:CE:F6:73:13:6E:C4:FD:7A:AC:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl

            X509v3 Authority Key Identifier:
                keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:58:ae:e9:ac:b4:07:04:5c:d0:30:b0:08:72:d9:59:d5:6a:
         05:04:9e:ac:63:e0:f8:1f:c5:cb:19:48:1d:6a:73:41:f4:ea:
         ab:44:45:ef:ac:80:0e:98:93:e9:69:33:67:0c:81:66:fc:7f:
         94:9b:d3:4f:f9:da:d0:5b:af:b6:14:68:11:ab:9f:fb:73:96:
         6d:59:b1:35:a0:b3:de:d4:59:da:ac:5b:69:07:ea:89:ec:bb:
         a0:85:bc:23:f2:44:56:cc:b4:38:8c:b1:29:5f:f4:10:01:8b:
         f8:b6:75:92:b5:37:b9:4c:cd:c6:aa:99:c7:53:c1:56:aa:b4:
         c8:9b:0b:4b:8f:25:70:86:fa:01:7a:39:59:fa:c4:85:3c:95:
         da:29:6a:84:42:67:42:67:eb:e3:56:4b:6b:4f:99:cd:28:e2:
         ca:1b:ed:41:60:f6:6b:2a:98:c8:8b:fd:bc:77:21:b3:8f:64:
         12:a0:c3:05:82:0d:b9:33:c3:45:6f:64:da:bf:5e:24:f1:0c:
         72:d7:1f:69:d0:2b:a2:e6:cc:aa:fc:dd:1a:51:bb:7e:3a:c4:
         57:28:1a:8e:88:2b:2b:7d:6e:11:89:61:81:0f:96:0a:41:97:
         10:60:9d:e8:ee:16:8e:82:c7:c1:61:57:2f:79:9c:b0:34:a5:
         79:b3:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 16:55:29 2024 by rpki-client on console-ams.rpki-client.org