Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa
File:                     8996dad6-7ce1-3a35-8d75-51a7259238b7.roa (raw, json)
Hash identifier:          yfqyiLig/CHHiGDhActSbsltik1B9N32CJ5//R/vFbc=
Subject key identifier:   92:4B:F0:44:D2:65:FC:B6:F2:4E:4E:B4:A1:DD:F9:B8:96:24:FF:55
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285845CF6E456B0792372C238F0B80
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     48842
IP address blocks:        173.199.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:45:6b:07:92:37:2c:23:8f:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=188b936a-88bb-4280-95d8-cecd1bef586d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:f3:60:0a:af:61:94:65:3b:30:57:96:1c:
                    41:c1:1a:a5:30:1a:73:48:a4:75:f6:b0:0e:17:e0:
                    c3:f7:72:2f:08:c8:14:e1:88:ce:f0:10:6b:33:5f:
                    0f:38:44:b7:21:d7:15:dc:b7:4f:19:b8:34:68:9a:
                    be:1c:1b:2d:c2:4f:b3:46:0f:c6:e5:b2:e7:f1:aa:
                    35:49:a0:ce:82:90:e0:99:17:2e:94:bc:e6:b2:38:
                    4d:90:d0:5e:0e:c4:2c:2c:de:01:dd:8f:fe:1e:e5:
                    71:4e:fc:af:2a:3a:34:87:4f:a4:6b:c4:ba:8c:41:
                    fd:2d:cb:9d:7d:d5:c0:a8:0c:d6:3b:c7:c6:05:3f:
                    90:e8:57:58:0b:34:cd:dd:55:82:f7:d7:24:08:06:
                    3b:65:a0:7e:14:6a:b4:fb:29:30:e4:52:52:01:0a:
                    f7:af:fb:20:d6:c0:fb:99:2c:bc:ff:5c:c2:4f:8a:
                    df:ad:2d:35:f8:84:b6:45:d1:eb:c2:84:58:c7:54:
                    9e:ff:2c:12:e2:df:a1:01:ae:3b:48:c3:9f:37:3d:
                    19:74:31:50:1b:4f:b7:20:df:18:7f:0d:97:23:6b:
                    f4:84:35:b7:76:91:5b:33:a1:84:f1:34:b9:a1:b5:
                    68:c6:4d:b7:fb:53:9a:2b:af:7b:cb:b9:66:d3:3d:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:F0:44:D2:65:FC:B6:F2:4E:4E:B4:A1:DD:F9:B8:96:24:FF:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:60:e4:7a:03:ef:02:04:12:05:56:cb:ed:b1:28:90:4c:1f:
         df:6e:f5:82:7f:00:bb:29:0d:fe:32:55:ae:e9:76:bf:26:12:
         a0:ff:53:cd:8b:29:db:36:da:75:32:ab:11:53:18:70:37:47:
         c7:64:bc:aa:f3:b1:bc:e3:01:1b:ea:53:41:51:f1:3f:d3:71:
         cc:6d:c8:2a:60:8e:1d:68:11:e0:a9:6f:ee:27:66:f0:6c:03:
         a6:73:2f:3f:24:f8:b3:f1:95:9b:8c:2f:c9:ef:a6:aa:4f:0d:
         71:2b:07:85:e1:be:8c:e4:ed:d1:46:ae:9c:b1:7e:48:08:3b:
         72:01:8e:1b:28:09:5c:ec:39:cc:96:98:d0:a0:15:1e:5a:70:
         fd:e8:4f:02:29:ad:bb:9a:bc:cb:8a:fe:ce:d1:86:ff:58:2a:
         eb:fa:08:d6:98:ad:18:f4:9b:1b:84:2d:1b:4a:17:fe:f3:a1:
         a9:48:6a:e2:16:9e:ac:33:e0:f7:d0:9f:88:04:d6:16:ca:db:
         5d:d0:bb:ed:4c:95:40:ec:ba:f1:b1:e0:a6:a0:f8:ed:f9:cd:
         5c:35:8b:ba:78:10:3a:02:ca:b7:92:5e:1b:8c:c9:b9:2f:d9:
         3a:b3:4d:89:f1:03:ef:09:a6:cf:96:f0:6c:a7:fd:93:38:1f:
         d8:f6:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:32:23 2024 by rpki-client on console-fra.rpki-client.org