Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa
File:                     84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa (raw, json)
Hash identifier:          fnaIwxBM2WoZl0YuVZrjmbeVCTT97NKg1fneQYKKetk=
Subject key identifier:   BF:DE:12:AC:89:CA:5D:26:C2:D3:87:55:21:73:E3:C2:20:68:D6:DC
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285845612868E3A473BA25408FF1C0
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     22843
IP address blocks:        208.84.64.0/22 maxlen: 24
                          148.163.128.0/19 maxlen: 24
                          67.231.144.0/20 maxlen: 24
                          208.86.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:68:e3:a4:73:ba:25:40:8f:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=ef83450f-f553-4777-9037-dde4782460a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:cc:8b:8b:99:1d:d9:83:3c:24:13:e2:74:
                    1c:84:70:5e:5d:97:e5:11:74:8e:04:2d:32:ff:93:
                    6b:f9:4c:5e:e6:c4:3f:5f:a8:e1:81:11:38:05:23:
                    89:2a:de:b5:45:07:5e:67:f8:59:93:ce:9a:4c:e1:
                    31:1a:dc:41:db:0e:51:1d:02:9f:13:da:87:f0:51:
                    56:ce:f5:e3:3a:68:48:b7:2b:aa:9c:75:2f:0f:24:
                    43:34:50:3d:a1:5d:6a:01:6a:2d:59:fe:13:c3:d0:
                    0b:f3:2c:7d:8b:e1:0c:ae:08:c7:05:39:e8:5a:70:
                    de:ec:17:7c:67:99:70:43:98:96:07:3a:bf:64:89:
                    32:16:79:10:f6:1d:97:2f:3b:09:26:8e:72:3a:1e:
                    8a:e2:8b:ea:92:21:33:b3:00:a5:77:92:75:22:0e:
                    3d:10:77:e5:6c:f6:ec:ca:d3:26:f8:ba:65:47:9b:
                    bc:24:9a:33:05:06:b6:32:36:35:e4:6c:02:e5:a5:
                    11:cc:3e:c4:56:0e:68:3e:c6:41:65:72:d2:f9:d5:
                    b0:74:4f:40:d0:1c:d7:05:8d:46:ad:d1:2d:98:70:
                    12:e9:ab:34:3b:ff:63:c7:c1:df:b1:1d:11:53:b4:
                    c1:4c:01:17:ac:9a:ac:3a:f6:b4:a8:20:ce:b7:4f:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DE:12:AC:89:CA:5D:26:C2:D3:87:55:21:73:E3:C2:20:68:D6:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.144.0/20
                  148.163.128.0/19
                  208.84.64.0/22
                  208.86.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:8a:ea:51:ab:68:82:40:af:40:67:de:b1:06:82:e3:98:
         d6:20:72:b0:8d:6a:e5:f9:8c:3c:64:62:40:41:df:88:ee:48:
         d5:46:7a:62:74:3f:2e:11:ca:14:e4:67:bd:81:19:22:ef:4c:
         5a:15:af:b6:84:a6:4c:d8:08:26:94:a3:a9:1a:4e:d1:9e:87:
         50:e1:0f:44:82:f1:31:ef:e9:40:10:ef:1d:0b:fd:60:34:25:
         a5:5e:d2:78:6b:b0:a9:63:4e:09:81:dd:a8:40:c0:d4:7a:3c:
         a2:7f:0a:7a:d4:21:29:80:9d:9d:8a:db:c5:7d:f0:7a:ed:6f:
         20:f2:a0:d0:e1:cc:cc:b6:14:f8:1a:74:b3:f8:29:07:74:1a:
         57:95:67:c9:9a:96:49:11:9e:6d:57:a6:ca:5a:69:1e:bf:2a:
         e4:df:ea:9c:59:ce:bf:0c:51:d1:1c:b5:68:83:7f:4d:56:3a:
         f8:7d:00:ec:78:f9:b2:0b:12:dc:7d:18:a6:26:8b:c2:8a:54:
         86:a7:d7:95:88:97:ef:c0:8a:5f:6c:c0:6f:9e:7a:b3:03:f7:
         7e:d3:25:9c:09:53:d9:51:92:39:03:9b:25:d2:96:ca:1f:57:
         ec:4e:69:e0:c6:e2:2b:cd:aa:78:d1:96:7d:88:46:5b:4e:e0:
         d2:96:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:31:30 2024 by rpki-client on console-fra.rpki-client.org