Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed1155d3-18c1-3aa3-87d6-cedaaf84a6d0.roa
File:                     ed1155d3-18c1-3aa3-87d6-cedaaf84a6d0.roa (raw, json)
Hash identifier:          XjuNRJ1j6lmAany7PUfm/ACFjCCYLf3zOFPnfkbN5l4=
Subject key identifier:   B6:F0:36:78:7D:FF:98:78:0C:AB:9D:9E:5E:86:82:8D:AF:66:5C:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB2159A3DE1C4EECA25D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed1155d3-18c1-3aa3-87d6-cedaaf84a6d0.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        96.85.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:21:59:a3:de:1c:4e:ec:a2:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=5e72548b-2d3d-4595-95b7-a3ab24c806a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:9f:c2:6b:1f:47:84:a6:32:1f:3a:c6:38:
                    0c:91:eb:94:93:12:82:e0:23:0a:2c:e4:05:6c:8a:
                    d9:67:88:a6:a5:db:d0:f2:e0:56:82:42:1c:15:94:
                    48:95:99:85:6f:bd:bc:7e:2c:a9:c2:18:33:d2:7a:
                    98:0f:d8:e0:9c:09:d4:00:bd:65:6e:11:00:40:f1:
                    54:0e:96:a8:9e:f9:d0:a7:a8:29:f8:8c:ff:b3:2d:
                    d5:d3:d5:e8:2e:3a:cf:f8:51:8c:d6:b2:f2:bd:9d:
                    45:85:ae:81:aa:1d:97:c8:a3:12:bb:5e:ad:1b:86:
                    91:4b:49:62:ca:2f:e0:61:4f:6d:88:5a:a9:0f:ea:
                    ee:82:98:c4:d8:59:9e:d6:e4:69:31:89:76:62:8f:
                    51:11:94:1c:79:34:4e:34:db:67:cd:c6:8c:15:57:
                    2a:59:46:50:4d:16:ac:3e:0f:6c:4f:43:2a:97:9e:
                    a4:67:ba:d0:8b:3b:58:08:2e:e5:ea:72:d8:53:97:
                    97:ca:53:2d:bf:ea:11:de:28:ff:04:77:39:ca:59:
                    27:f1:8d:10:56:e4:c6:e3:4e:28:bb:d6:03:d0:e4:
                    b0:25:a4:d8:56:40:e3:38:18:25:7e:4c:9a:cc:be:
                    10:22:f2:3d:2a:32:35:c4:8a:83:4d:15:a8:43:da:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:36:78:7D:FF:98:78:0C:AB:9D:9E:5E:86:82:8D:AF:66:5C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed1155d3-18c1-3aa3-87d6-cedaaf84a6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.85.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:e1:02:d6:3a:2e:15:73:31:9b:3c:97:19:c2:11:ab:93:
         bc:86:d6:28:f5:1b:c9:23:0f:bc:33:a3:02:d1:69:30:a4:7d:
         85:ea:6c:2c:7f:67:d7:6f:82:b5:d0:c6:59:84:fe:2d:16:47:
         f5:72:c2:76:f7:cb:9d:5a:6e:e8:70:42:36:bc:6d:52:89:ab:
         bd:b5:ce:99:37:54:86:50:c8:04:1b:9f:8e:22:20:b2:a7:51:
         d6:29:d8:d9:4f:7b:c9:63:6a:a4:c5:87:04:c4:5e:36:a7:ae:
         eb:ca:70:ca:25:07:d5:a3:84:c8:ac:ca:6b:63:36:69:1c:2d:
         50:e3:01:b0:a6:02:e2:0e:1b:14:84:0f:e6:60:17:11:6e:ba:
         32:3e:97:b4:d2:35:4e:0e:b4:f1:2a:33:15:76:69:f3:6e:aa:
         49:bd:31:c6:df:ac:97:36:4e:33:2f:23:13:81:1a:fe:25:ce:
         0e:e1:1a:2a:ef:99:57:b1:62:6f:01:5e:77:3f:a3:8e:8f:fd:
         bd:1f:04:56:fa:6e:f0:b2:0e:23:d9:5e:3c:28:dd:b8:01:74:
         ec:b5:03:4c:2a:02:59:84:35:2c:28:01:7e:1c:83:db:05:29:
         2d:b8:ba:bb:81:69:c4:d5:1d:0f:55:84:70:98:53:d4:90:4c:
         1f:62:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:23:40 2024 by rpki-client on console-ams.rpki-client.org