Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa
File:                     38210fb7-c765-3c3e-9391-b97eeeb28281.roa (raw, json)
Hash identifier:          A0j9bMWyfV64fTnSdAfNHZ+TeGcLcmjRx4dXS2jJmDM=
Subject key identifier:   7D:A6:A3:E0:1B:E3:C8:BB:4B:AB:60:26:F1:D5:4A:09:96:DB:D2:A4
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285845A6F36A52AF465C53C764B2E0
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     399139
IP address blocks:        63.161.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6a:52:af:46:5c:53:c7:64:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=a87b1411-8c90-4004-9d9e-9e2cf16f5122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:95:5d:b3:82:b5:cb:77:74:58:36:92:a0:
                    ae:44:5a:88:93:35:bd:77:71:70:81:ee:be:4f:ce:
                    ee:ee:79:02:68:2a:e4:f5:9d:d5:66:9b:05:d6:ce:
                    0b:5a:28:c5:2c:1c:8c:f4:ca:65:4b:ce:f8:8f:48:
                    0d:99:3d:09:af:84:57:7b:ea:10:97:c0:e7:3a:13:
                    29:ff:df:c8:bb:41:5d:63:2c:a2:58:ac:32:3c:81:
                    e4:1d:6b:33:6a:0e:40:10:5f:d2:ae:ae:a9:18:15:
                    b1:a2:57:af:61:55:84:98:3c:b2:32:58:9a:29:bd:
                    ec:03:b8:91:34:c8:63:b3:68:05:a5:46:b0:7f:e0:
                    0b:fb:40:50:5d:ce:5e:ef:a9:74:7d:19:d0:ee:96:
                    42:ae:ba:e4:79:e2:a1:b4:12:74:44:99:9e:df:b9:
                    d0:a1:54:fa:0d:80:e2:3b:0b:41:36:48:f7:dc:4b:
                    95:2c:97:cb:4e:20:1c:19:34:32:46:82:8d:2b:50:
                    35:74:1f:c9:ff:9e:f5:ec:cc:71:38:bb:84:99:d6:
                    b9:2a:d3:25:f4:c1:d8:bd:61:7e:f0:99:f0:9d:5d:
                    b0:6a:1b:6f:cb:a4:ad:24:82:9d:d4:d7:60:b7:0f:
                    5a:05:ce:c9:ef:c9:23:20:e9:ff:bf:50:fa:d0:4d:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A6:A3:E0:1B:E3:C8:BB:4B:AB:60:26:F1:D5:4A:09:96:DB:D2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fa:04:d5:d1:a5:cf:e4:47:86:c7:05:15:70:e5:39:a9:16:
         b3:b8:d9:7e:77:cf:59:00:b7:1b:a3:ea:4a:f0:ea:34:07:b5:
         17:dd:08:13:35:3a:84:90:1f:be:37:e8:23:c6:92:3b:68:21:
         f3:fc:eb:de:cf:66:32:36:99:08:c5:32:34:39:15:15:f2:d1:
         b2:ff:cf:4d:9b:15:b3:12:ec:93:af:83:e5:27:12:3f:de:45:
         23:34:a8:f2:5e:30:0f:bb:a1:66:36:3c:e2:e4:d3:90:39:15:
         ff:aa:b6:7f:92:68:8d:d8:96:89:49:6a:9c:1f:d9:e9:ab:08:
         23:2f:04:11:08:03:3d:77:9e:0a:3a:04:35:fc:96:2b:02:f8:
         aa:f1:ca:2b:a3:51:d2:de:e2:c4:58:52:d2:6e:bf:5c:ec:2d:
         41:c1:97:0b:f9:4b:fc:6b:04:3a:12:2c:3a:a4:d0:0c:15:b1:
         51:2e:ca:27:0f:ef:bd:67:18:ae:7b:79:20:0f:6c:c0:2a:95:
         60:2d:7e:40:8e:37:71:eb:bb:df:67:f5:50:27:63:64:73:68:
         f6:1d:8c:9a:e8:f0:f9:bd:86:71:92:7a:77:8c:8e:19:33:95:
         19:f5:9d:03:fc:3a:22:47:67:a9:88:35:49:78:58:fb:95:ce:
         bd:94:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:56:35 2024 by rpki-client on console-fra.rpki-client.org