Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa
File:                     911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa (raw, json)
Hash identifier:          zDDdwcPMjqHtI1lUEZbS0+gLF7kKR+t0P1mq84Im4AI=
Subject key identifier:   FC:46:9E:EE:50:7A:F6:23:95:80:77:EF:ED:52:D0:1B:EB:F7:3B:94
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584563F3024B5A41F37C5DA3AA00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     11537
IP address blocks:        162.252.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:02:4b:5a:41:f3:7c:5d:a3:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=02b2c708-7c9a-4e97-81cd-46dd070a424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:85:32:b4:86:ab:bc:25:f3:ff:a3:64:29:
                    41:01:3a:b1:9f:d2:d1:63:65:3e:b7:d2:72:da:53:
                    93:d1:2d:22:91:4a:e8:96:bc:30:13:17:2b:5f:b7:
                    9f:ed:a7:45:1c:e3:0a:b9:c4:f3:77:fa:9f:82:ae:
                    02:33:2d:ed:ef:e9:eb:48:d9:c5:38:36:31:b6:31:
                    92:a8:b1:f1:c4:f7:99:10:50:66:b1:63:be:3c:7c:
                    fd:1f:2d:ea:d2:33:fe:f5:5c:0f:7b:f4:3b:a1:65:
                    18:f9:8a:11:4d:ca:93:18:e2:f4:de:3a:4f:50:4e:
                    f3:a0:8b:3d:68:25:f5:2a:26:dd:6c:3e:95:57:18:
                    c1:e1:0a:63:69:b1:3b:49:07:fe:18:7b:d4:23:26:
                    70:d8:f6:2d:16:d7:f7:f5:45:c8:13:2f:a8:20:04:
                    35:a7:2b:b7:d5:2b:4e:0a:cd:91:e6:5e:76:13:46:
                    b5:98:f4:14:eb:5c:f4:ba:08:73:e3:65:7a:00:c5:
                    d8:93:a1:62:5e:3a:4f:e9:e6:6a:72:54:b5:c2:5d:
                    13:e5:74:ac:cd:7e:86:3d:92:fd:b4:6d:13:e3:50:
                    70:13:39:b5:0c:cf:6f:b3:fb:24:f7:16:25:85:b0:
                    73:06:86:43:06:e1:35:03:20:28:55:af:95:33:6d:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:46:9E:EE:50:7A:F6:23:95:80:77:EF:ED:52:D0:1B:EB:F7:3B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/911543c8-b7cc-3b28-acff-bb2ef1cdf6c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:6f:a0:71:3f:b5:7d:09:63:d0:dc:53:f8:6b:c1:30:08:32:
         97:cb:36:fd:3b:1d:dc:3c:e7:9f:ac:86:33:35:e0:ee:59:0c:
         13:83:8f:7f:49:34:27:cc:5b:bc:48:d4:44:45:3f:01:6a:03:
         f5:00:75:be:99:99:bb:d6:0e:7e:1c:59:c1:b8:b9:c1:81:5b:
         d2:7a:c5:7a:a3:36:e4:22:06:dc:12:00:07:40:4b:3a:d1:d9:
         ce:b5:a3:41:a8:c6:ba:db:43:dc:84:66:c6:9e:d0:44:d5:e9:
         34:c8:15:2b:c2:9d:17:d7:63:86:ff:cf:22:5b:5c:d5:ef:32:
         70:4e:96:c9:5f:f9:c4:df:74:1d:32:1e:bf:b4:67:07:93:f8:
         36:58:c5:f6:27:2f:64:cf:09:69:f4:42:86:7f:01:c8:4f:b2:
         41:6a:41:bd:0f:e2:89:35:03:c8:38:f6:b1:f3:b2:17:9e:91:
         39:4c:3c:ff:20:dd:6e:09:e6:7f:e4:e9:39:05:4e:49:12:69:
         9e:32:85:b7:12:d9:aa:46:8b:e2:ca:89:15:9d:1f:ad:51:2f:
         cc:6c:36:91:f5:c9:8d:c9:57:ff:32:3e:c7:97:a1:fe:2b:23:
         25:eb:f7:73:ee:8c:bb:39:4b:25:8e:52:22:14:fd:af:05:60:
         60:b3:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org