Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
File:                     80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa (raw, json)
Hash identifier:          5xGDQj6P4r+fiXzH0kmBiMz5lDrgJy5IkoMCPn9ztNo=
Subject key identifier:   CE:5C:05:1B:66:A7:28:18:19:48:A2:93:CD:D5:B8:E8:A3:9E:4C:4B
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F43285845777DE35C0A107F8F861BF080
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     87
IP address blocks:        134.68.0.0/16 maxlen: 16
                          149.166.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e3:5c:0a:10:7f:8f:86:1b:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=f78ccbb7-629b-42ce-bf96-008425345f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:35:0b:b9:cf:34:c3:9d:54:48:0b:e0:0e:41:
                    cd:3b:e2:03:9e:7b:a4:f0:0d:df:03:54:d6:71:4f:
                    e1:54:9e:eb:14:10:8b:80:f3:21:2f:3b:fd:d1:5e:
                    56:62:63:91:15:e1:df:9e:4a:fc:b8:26:bf:86:46:
                    51:63:4c:ea:dd:5b:8d:74:f5:4b:4d:42:cb:24:c1:
                    a8:44:34:3f:ca:21:6a:fa:1a:4c:89:91:0e:52:b4:
                    34:4e:13:73:33:64:92:df:56:fb:d6:8c:4a:76:f7:
                    bb:37:fb:d6:25:07:e0:f6:f1:3b:97:34:8e:02:85:
                    aa:c8:72:e0:b7:da:08:56:53:09:e9:a2:99:5a:d2:
                    d0:09:e4:41:00:3e:b2:1b:ce:93:b7:27:e9:24:ea:
                    2f:bd:8a:56:31:5a:d7:78:9e:01:6c:c2:5c:53:88:
                    cf:13:6c:9f:28:1f:b6:66:ec:fb:0f:27:f6:78:f7:
                    91:3e:af:31:c6:34:3d:5c:ea:33:51:18:6f:cf:40:
                    0a:f3:75:a6:9c:ed:bd:9b:d1:71:0b:b8:2d:e4:d4:
                    8e:22:70:6d:ee:c8:f7:67:90:bf:40:31:e5:d6:3b:
                    0c:00:e1:66:2f:86:27:57:f6:06:dd:a2:6d:fc:b5:
                    a7:42:a7:0a:f2:39:1b:e6:21:0a:5c:7f:e1:98:ec:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:05:1B:66:A7:28:18:19:48:A2:93:CD:D5:B8:E8:A3:9E:4C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.68.0.0/16
                  149.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:1f:0b:f0:5c:86:2a:99:48:b7:13:e2:8a:8a:8a:3e:60:
         af:0d:15:65:f8:55:76:53:74:36:1f:c1:94:1a:83:ee:e0:c6:
         cd:df:bd:af:1f:75:ec:41:34:d3:77:0c:2d:64:7d:9c:50:85:
         94:3a:32:2f:cd:54:93:78:9c:02:25:bd:0d:53:54:65:55:ec:
         6d:73:db:14:81:0b:f3:cc:8d:20:2a:75:ec:3f:f2:82:5a:fd:
         ee:e5:c3:82:8d:bf:53:52:f4:64:a5:5d:9e:c0:fd:f3:42:da:
         b0:8c:1d:56:3b:0f:6d:d0:b9:49:06:67:54:b3:ff:59:96:cc:
         01:de:91:3b:cb:8c:9b:e8:4c:3e:ff:26:fb:f8:09:1b:dc:ba:
         4f:78:52:93:0e:c2:af:fb:3b:49:99:0a:f8:32:be:86:2e:90:
         e5:00:2e:e8:c9:13:3a:01:21:1b:99:4f:71:32:92:da:58:1d:
         11:3b:b2:5f:87:26:8c:2e:8e:05:4c:38:e4:cb:2a:07:d4:ff:
         be:e6:f1:e4:0d:9f:1a:8c:31:7c:e9:f5:89:83:d3:dd:de:74:
         72:80:34:2d:0c:cd:d7:6c:ea:d2:47:95:13:15:9b:3a:94:59:
         3c:57:db:93:e3:13:bf:88:79:0e:84:0c:8b:41:50:c8:89:4e:
         58:64:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:38:39 2024 by rpki-client on console-ams.rpki-client.org