Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa
File:                     0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa (raw, json)
Hash identifier:          ce8ZAqM7bejOSK1iLZboBvObtQicKJzRKHN4HGhj+p4=
Subject key identifier:   69:A8:E3:09:C4:33:AC:64:47:5A:24:BD:7E:B6:85:E2:BA:BA:E6:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC4117F24CF62B167C0180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        71.200.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:41:17:f2:4c:f6:2b:16:7c:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=7de1a676-3a2b-4574-916d-5498b1d941ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:91:1e:8b:d0:57:82:fc:a6:ff:f0:9b:aa:
                    c7:d0:34:0a:2b:5b:d3:bb:a9:5b:78:eb:23:52:1b:
                    4e:1e:7a:ac:b8:71:55:34:e6:a5:0f:df:9c:c0:1d:
                    5d:05:70:52:b6:4d:dd:5c:41:eb:44:41:fe:6c:f9:
                    ea:4f:0e:79:45:df:cd:7e:26:4e:ae:41:1a:52:27:
                    32:3f:c3:35:8f:bf:c3:a6:3a:14:26:a3:b6:05:2f:
                    1b:6b:12:5b:f2:b9:9d:8a:e9:73:07:1f:21:ee:8d:
                    de:49:55:69:8b:7e:68:1e:dc:2f:8b:50:12:db:78:
                    69:b9:89:bb:ca:37:58:9d:b8:07:ac:cb:73:87:e3:
                    c1:06:b5:1c:18:b9:4c:5f:95:11:67:57:8c:ae:24:
                    77:30:a0:bf:dd:1f:f2:d6:2d:ff:f1:23:7b:0c:cd:
                    ac:4b:e5:95:27:33:a0:98:4d:47:6d:c9:61:0d:ce:
                    64:9f:f3:c2:2a:4f:9d:98:4a:97:0d:90:b4:ef:bb:
                    29:ab:41:a5:64:90:e7:a4:2c:30:69:34:cf:08:69:
                    e4:5a:79:81:bc:c1:be:44:fc:69:99:5c:01:cd:9e:
                    bc:53:90:77:a1:24:7b:e7:a4:8b:f4:fe:c2:df:eb:
                    fd:e1:4a:96:61:cb:e0:17:4a:26:b4:2e:fb:2b:fd:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:E3:09:C4:33:AC:64:47:5A:24:BD:7E:B6:85:E2:BA:BA:E6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a123185-9cfd-3ef5-b1ed-d9d8d4cb715e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.200.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8e:05:44:1e:bf:a1:12:88:c3:bf:de:18:1d:e7:47:dd:bd:
         de:87:63:17:44:f2:3a:12:96:eb:89:28:98:f4:78:a2:28:39:
         8d:64:db:0c:c9:ff:5b:7e:0d:7c:fd:fb:7e:fa:33:ef:31:35:
         a3:90:39:b1:60:50:1e:07:1c:aa:5a:3a:7b:5b:b1:75:2d:9a:
         21:76:a8:12:70:4f:c8:1b:94:07:de:79:ed:4d:13:f9:e5:af:
         08:6e:45:be:5f:3e:4c:ba:0d:34:6f:ac:df:ca:be:24:3e:f8:
         bb:fe:62:c4:2f:4f:28:24:2a:16:a3:84:70:f2:b4:d9:26:63:
         2a:f9:52:e8:54:f4:ff:cc:c3:64:7f:5b:51:4e:b2:da:36:65:
         52:6e:75:91:6a:42:45:f5:b4:6c:3a:cb:0c:3c:b2:97:8f:15:
         ad:fd:c0:d5:25:3c:f2:98:6b:c4:31:df:51:79:47:94:62:53:
         ab:00:1f:43:43:c6:16:5e:c4:e3:ad:f6:d7:ce:a6:0f:96:1f:
         2d:52:fb:66:8f:6d:13:d4:35:35:31:72:05:89:61:68:f1:3e:
         de:21:08:3b:e0:42:c0:3b:2c:0a:7f:54:46:ef:1c:dd:d5:ac:
         39:02:30:81:52:15:31:16:75:32:ab:08:c8:fe:10:41:8c:44:
         fc:09:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:41 2024 by rpki-client on console-ams.rpki-client.org