Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa
File:                     3ced9ba4-003d-3df0-b21f-32f119f8becd.roa (raw, json)
Hash identifier:          05V4Q7ki6ej1WW/4QRqhZ6DQerRzI5866et5/hfqbao=
Subject key identifier:   6F:52:1B:98:D3:9A:78:EC:3B:7D:89:1B:3A:6B:89:93:64:C7:34:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABEDCABDF81ECBF9C75400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        71.195.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ed:ca:bd:f8:1e:cb:f9:c7:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=69228b0f-0605-45b4-a6ff-c1d05a3e75c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:3a:3d:dc:63:ab:d6:26:da:27:a4:79:db:
                    8c:15:48:66:e5:db:bf:2e:31:ec:07:f6:a8:76:2d:
                    36:cf:80:0e:36:38:19:06:bb:c9:ea:01:10:ef:8a:
                    ca:d2:9a:9d:90:64:a5:ff:fe:81:b8:58:43:c7:9c:
                    68:a6:a7:f7:b2:18:0c:6e:8d:0f:56:45:62:70:32:
                    c2:26:02:74:b6:0b:ab:86:62:2b:93:77:6f:3b:6b:
                    a0:ca:f5:f9:d8:38:17:67:72:e6:a4:e6:c9:10:3d:
                    ea:d5:3e:01:c7:cb:7c:f1:19:f2:f8:bc:8e:48:86:
                    bd:61:12:87:21:14:57:c2:da:71:42:09:d1:12:4c:
                    d2:bf:23:ae:3b:81:c0:c6:13:a5:5c:6c:00:de:5c:
                    1c:a3:fb:da:00:f0:74:dd:ef:76:1e:a8:ad:d2:9c:
                    d3:2f:71:5e:d2:d5:fd:ce:0c:56:bd:54:1a:c4:26:
                    6c:35:39:a0:28:6b:59:e6:7f:0e:e5:6f:dc:26:0a:
                    ea:37:ad:ff:63:96:40:c9:64:52:a4:5d:8f:fe:6b:
                    22:22:c2:dd:0d:03:c9:b0:35:a2:5f:32:41:2b:ab:
                    d5:61:33:96:cb:d1:9e:44:6a:48:79:af:62:79:96:
                    94:0d:13:d2:76:31:98:4b:55:f7:97:0a:8d:97:e2:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:52:1B:98:D3:9A:78:EC:3B:7D:89:1B:3A:6B:89:93:64:C7:34:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ced9ba4-003d-3df0-b21f-32f119f8becd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:6c:aa:40:96:e4:7b:b5:e1:41:e3:26:ef:22:e3:65:d1:
         f4:f6:2e:7d:6b:45:1d:67:2c:94:5d:66:c5:14:ba:84:70:6e:
         25:23:6c:d4:a8:f8:7a:af:08:03:01:00:21:19:66:a4:5c:34:
         ff:29:6e:a5:c6:4b:9c:dd:ed:61:00:21:7f:04:0a:d7:03:70:
         1b:d1:17:ca:a2:46:ad:c5:b0:e5:0d:60:0a:03:60:a7:9c:28:
         ee:c6:33:70:05:ee:1f:ba:36:de:00:64:c6:d9:5f:90:48:f9:
         d0:7b:36:c9:77:cc:9f:e7:c2:6a:5a:db:ce:cf:4a:aa:f0:51:
         eb:eb:e0:bf:80:37:73:b4:bd:dc:6c:b0:ce:43:4c:43:86:ef:
         cc:09:a2:9e:ff:f6:34:c0:a5:f6:38:77:ad:28:1f:9e:03:b7:
         83:3d:c0:aa:c2:40:30:7c:e4:2b:4e:82:36:7f:9c:80:5e:61:
         c9:aa:f0:89:db:a4:9b:c0:df:64:37:15:fb:40:f5:16:ae:24:
         01:b8:be:df:75:14:5b:ba:ed:0d:cb:6d:45:17:79:04:d4:88:
         4e:fe:b7:8a:9e:ca:7c:78:1d:c9:ee:a9:78:17:f4:d7:d9:12:
         6b:d3:d7:7e:17:ea:36:fd:45:bf:ba:5f:cb:01:6f:6a:bf:a7:
         6c:55:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:49 2024 by rpki-client on console-ams.rpki-client.org