Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa
File:                     a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa (raw, json)
Hash identifier:          8h0vjpNzOyVdc38Km5yryr10zGOZ4thdIu3RcZbdkBQ=
Subject key identifier:   0E:41:93:46:FE:00:90:4D:98:87:99:37:B9:57:C7:34:47:91:A7:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABC785E9CEC3FD01D24700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        70.88.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:c7:85:e9:ce:c3:fd:01:d2:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1e16d999-721e-49ac-88dd-dd9ac646a943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:70:0a:16:4f:25:58:4e:ab:84:94:08:da:b6:
                    78:ba:8d:13:97:22:95:08:b8:c3:d8:c4:6a:58:cc:
                    81:ee:f8:ce:36:45:92:a2:60:a5:98:59:b1:da:e6:
                    bf:d9:fa:1a:c4:87:67:c5:56:88:ee:7c:b5:3c:ea:
                    8d:2c:03:3c:35:ab:3d:21:53:7e:4c:ef:43:5d:ca:
                    18:b0:ef:03:52:25:4e:3c:ad:a3:04:22:35:b2:bf:
                    ec:b5:56:e0:54:74:f3:e7:9f:2f:3b:3c:f4:fa:6a:
                    87:0b:86:57:56:cf:d8:b9:04:8a:99:5a:02:5d:56:
                    72:28:78:f7:3a:1e:60:3a:12:ef:81:b5:0f:7b:c3:
                    f1:9e:2f:ed:76:91:6f:ac:cb:66:fb:fd:98:dc:d6:
                    b5:cb:46:92:6e:34:a6:bb:76:ad:5e:aa:6b:13:78:
                    98:eb:7a:8c:d5:58:7f:01:74:6a:14:9a:5c:98:6f:
                    10:f6:cf:ba:21:f3:91:e5:16:1d:e7:2d:14:26:29:
                    4b:7f:ad:bc:17:70:e6:c1:7e:33:cd:b4:5b:28:36:
                    e2:9f:69:b6:ab:1c:91:92:b7:9b:60:af:da:53:1d:
                    c7:7f:2a:7e:18:3a:1b:44:30:c9:5d:cf:1c:6c:c4:
                    6e:d6:1a:41:60:2f:8b:c3:8d:c3:e6:6e:9e:ca:d3:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:41:93:46:FE:00:90:4D:98:87:99:37:B9:57:C7:34:47:91:A7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a61b2d4f-65d4-3f50-b3fe-1cb28cb47670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.88.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:14:b6:4f:ac:63:4b:08:a7:2f:44:57:34:a4:de:8f:ea:
         f1:3a:ab:26:90:ca:1e:8d:d2:06:35:8f:1c:f1:59:b5:69:aa:
         c8:06:78:7b:9b:56:5f:44:13:50:42:15:23:3b:c7:cd:58:90:
         e3:16:c2:6b:cf:81:6a:f1:43:a7:46:a6:c9:aa:10:84:18:c0:
         ba:04:82:2d:a6:cf:5c:fc:55:c4:31:07:f6:dc:4e:52:c6:0c:
         98:55:09:ca:9e:e4:d7:bd:db:f6:d9:ff:ef:35:13:54:07:96:
         eb:2d:4f:c1:f5:fa:15:5c:40:d5:31:eb:dd:dc:ef:58:fe:33:
         1f:73:16:d7:40:6a:88:f4:d6:a6:48:1a:a1:1d:49:a5:07:09:
         41:2e:c2:ea:59:8c:39:9b:5c:d3:ff:a9:d6:ec:1d:87:23:55:
         b3:5f:08:ef:f3:14:82:a7:3a:12:c1:56:14:27:f6:3b:da:26:
         7a:f9:53:6b:f6:c8:d6:a4:aa:6a:87:b9:80:93:24:1d:55:65:
         c5:54:c9:f2:30:ac:2f:90:bc:1b:94:9b:5e:9d:be:c2:60:c3:
         27:4e:87:b6:70:5b:74:41:e8:c4:a9:27:ff:04:b5:81:a9:5b:
         a5:b2:65:a4:da:ac:c1:8f:c6:cf:1b:fc:78:25:bb:5d:6d:2a:
         81:67:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:20:25 2024 by rpki-client on console-ams.rpki-client.org