Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/fb1a2259-d816-32d0-b921-3beeee321663.roa
File:                     fb1a2259-d816-32d0-b921-3beeee321663.roa (raw, json)
Hash identifier:          cvzS3yW8+x6OJCJjHH6obD2+3SfVRe2ehUNYUZUzjOw=
Subject key identifier:   0F:F1:60:AB:E1:4A:C6:75:22:75:C9:2A:A6:98:3C:F4:72:AB:9C:37
Certificate issuer:       /CN=69fd5aaa-164e-43f9-a8ca-302782d25019
Certificate serial:       010D0C9F4328584561285B045C26DDF9D797E900
Authority key identifier: B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/fb1a2259-d816-32d0-b921-3beeee321663.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     21837
IP address blocks:        107.167.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5b:04:5c:26:dd:f9:d7:97:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd5aaa-164e-43f9-a8ca-302782d25019
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=afd06664-2c3e-48bc-8e9e-f74a59c832ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:4a:88:22:59:75:47:80:56:a8:3e:3e:d5:
                    cf:fb:fa:e3:fa:b2:f2:52:05:2d:14:8e:6d:36:e3:
                    a9:a5:bc:0e:b8:69:6f:4a:35:7c:80:b8:1e:f6:64:
                    db:83:d2:98:27:27:46:c1:e6:21:f1:cd:23:70:70:
                    98:9a:83:7b:81:0b:d9:01:2f:8e:30:6f:f3:c9:6d:
                    0a:fc:31:21:95:a2:8a:ea:68:03:06:e3:1f:84:32:
                    81:cf:95:7b:ab:5f:50:0f:e5:b4:7e:90:db:44:6e:
                    27:21:f5:92:cc:62:7e:4a:aa:ce:10:31:31:b3:10:
                    b5:90:de:ee:9b:6e:ce:24:1f:2d:12:84:d5:c7:54:
                    18:0b:6b:b5:bb:a7:c7:c1:7e:ca:db:42:dc:50:64:
                    1a:f8:04:bb:72:1b:76:bf:77:61:62:be:0a:57:f7:
                    c7:26:ba:0a:72:75:2d:60:0b:d1:b5:b3:82:de:cc:
                    18:e1:75:6c:f8:a5:2a:dd:ae:87:d4:9f:15:05:d2:
                    d2:d4:2b:c0:2f:05:c1:b5:e2:4c:ec:0e:e7:f1:14:
                    33:e4:e0:e0:3f:dd:48:d9:13:df:ca:5a:af:9c:cc:
                    2b:e4:15:63:3f:e6:a2:f4:ed:ca:82:de:98:c6:d8:
                    2d:97:ec:d7:0b:8c:28:58:5f:dd:89:a3:cb:7c:f8:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F1:60:AB:E1:4A:C6:75:22:75:C9:2A:A6:98:3C:F4:72:AB:9C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/fb1a2259-d816-32d0-b921-3beeee321663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.crl

            X509v3 Authority Key Identifier:
                keyid:B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:81:0c:8f:4d:ca:cd:2e:20:7a:13:82:17:59:14:0d:8c:
         45:eb:82:13:e9:af:d8:f5:c9:ab:cd:58:cf:e7:14:0b:24:fb:
         7b:f8:65:05:6e:88:a0:34:ae:34:b7:56:17:23:7c:cf:df:f3:
         b5:54:06:83:2d:65:25:b0:db:8a:c8:8c:0f:dc:be:e5:78:e3:
         fd:56:05:6a:bc:06:e1:a1:3a:7e:0c:92:36:6e:33:13:93:b3:
         35:95:94:30:d7:c7:52:4c:4c:e3:f5:1a:9c:fc:b9:67:30:cf:
         23:83:89:25:87:0e:59:27:69:de:ac:b4:d1:d6:3e:9e:03:48:
         e8:4f:d3:47:6a:c2:60:4a:84:62:64:46:14:0e:ff:95:28:f4:
         cd:76:36:dd:54:17:35:57:e4:d6:d9:08:ba:4f:26:20:59:66:
         87:1c:80:6e:47:e6:60:f6:ee:e7:7c:a4:80:19:76:43:7a:96:
         4e:87:41:3b:aa:e4:21:2f:af:03:0d:ac:88:d8:50:11:50:ed:
         1e:b4:1a:87:7b:6a:d4:94:62:4a:ed:6f:45:00:40:16:a0:45:
         cb:77:a2:d1:d0:94:4e:78:22:39:83:d2:8f:80:bd:45:d9:dd:
         05:43:a3:18:7d:2a:dd:17:04:94:bf:d3:ea:11:49:f7:7a:39:
         1e:9b:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 19:16:34 2024 by rpki-client on console-ams.rpki-client.org