Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/c25f1929-747c-3492-a9a5-26748fc5258f.roa
File:                     c25f1929-747c-3492-a9a5-26748fc5258f.roa (raw, json)
Hash identifier:          gcqIGCCJWc8SI66AeAhyaXXpWVadn6P6a59jZATNhfM=
Subject key identifier:   87:9E:F0:9C:E4:2B:53:8E:DA:9C:1A:0A:90:5F:5F:73:8F:AC:B3:1D
Certificate issuer:       /CN=adbe894e-fc78-4889-85f3-6253e78715e5
Certificate serial:       010D0C9F432858454AD2CE119772CC74D0C8B240
Authority key identifier: B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/c25f1929-747c-3492-a9a5-26748fc5258f.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     62744
IP address blocks:        204.8.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:ce:11:97:72:cc:74:d0:c8:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe894e-fc78-4889-85f3-6253e78715e5
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=668df360-11db-4706-81e4-1a801902f11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:89:d9:dd:d7:f4:f2:32:80:e9:ba:e3:a8:
                    01:1b:ca:db:4c:30:a9:0c:e4:b3:0e:a0:38:34:b5:
                    92:1b:7a:2f:0b:35:af:29:e8:9e:2f:ec:0e:4e:e9:
                    fc:99:54:0f:89:4f:82:25:44:b0:d0:68:17:39:50:
                    a6:5a:8c:6b:62:a9:79:58:d4:c4:30:38:e0:e6:6b:
                    07:bc:02:31:d6:76:0b:4f:12:c4:6d:ab:a1:07:e3:
                    10:2c:56:d0:b7:4b:01:6c:ee:36:22:de:e5:39:4f:
                    f2:f9:6e:46:68:35:ab:83:f7:41:8a:fc:62:25:e8:
                    a6:0f:24:47:57:58:3d:f5:65:42:c5:bd:8c:46:f2:
                    71:33:41:11:cf:98:3b:78:bb:1d:0e:dd:61:ab:2b:
                    46:8a:96:fb:33:a5:00:3a:b2:7b:a8:25:55:c5:c0:
                    5d:eb:87:8e:5c:0a:43:e8:83:1e:74:e7:b2:68:42:
                    55:41:78:f5:e0:a0:f6:45:da:3c:67:49:7d:42:12:
                    82:89:e1:d1:94:9d:9b:52:c6:cb:26:6a:f7:bb:0e:
                    9c:cf:eb:06:72:b3:0b:de:f8:59:3c:75:4d:c7:ce:
                    b2:7b:00:a8:02:2f:8c:2c:62:67:6b:ab:76:ad:37:
                    6d:19:b6:56:41:0b:ff:1c:ce:88:81:51:ba:57:00:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9E:F0:9C:E4:2B:53:8E:DA:9C:1A:0A:90:5F:5F:73:8F:AC:B3:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/c25f1929-747c-3492-a9a5-26748fc5258f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:17:15:67:e0:92:06:bc:2a:5c:7c:13:7e:dc:f2:ee:b6:dd:
         7d:04:cc:dc:50:36:b2:d7:b1:a3:fd:5f:2a:57:fa:e3:be:97:
         53:b7:ef:6b:02:4f:9b:ae:82:a6:77:02:d4:09:58:be:88:06:
         61:d2:35:99:4a:6b:25:03:79:9f:60:60:6a:37:d6:85:a0:11:
         ba:22:ce:bb:95:86:61:ff:10:5e:b8:99:90:78:52:6b:a1:61:
         2e:31:d9:c1:62:f1:dc:fb:e9:ef:67:d3:e6:48:71:9a:af:8e:
         53:f8:f5:a2:c3:eb:85:11:ca:28:0f:40:25:e9:bf:2d:77:41:
         f3:43:84:eb:5c:f7:57:60:a5:05:1d:85:df:08:d0:ac:57:79:
         b9:41:51:2e:7e:71:77:5b:29:1f:19:c1:af:33:88:f6:04:cf:
         08:9a:99:85:e0:38:96:77:86:b3:db:23:94:dc:0b:be:a9:34:
         02:b1:05:76:fd:1e:c5:59:6d:66:ac:42:d3:30:4d:01:d7:32:
         f0:1e:8a:a6:0e:cd:01:0f:5a:32:1a:b4:3f:e6:93:f0:31:77:
         85:d1:4d:dd:4d:53:38:0c:f1:7b:f7:36:a5:c5:69:e6:80:35:
         b1:b0:91:fa:28:aa:32:a4:2a:9a:f6:59:a3:4b:3c:ba:c8:d1:
         9f:9f:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:57:37 2024 by rpki-client on console-fra.rpki-client.org