Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/486e9aba-896f-383b-a362-fd17e5f95a1b.roa
File:                     486e9aba-896f-383b-a362-fd17e5f95a1b.roa (raw, json)
Hash identifier:          JxSCuWMZK6AQOCaGPo3tAw4MCRM8mEW2q+is/3ACwwQ=
Subject key identifier:   EC:14:ED:0A:FE:90:D4:4B:E8:9B:20:56:23:69:9F:2F:CB:16:3E:A4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1717D8226DF
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/486e9aba-896f-383b-a362-fd17e5f95a1b.roa
Signing time:             Wed 15 Apr 2020 11:03:33 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        207.22.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:7d:82:26:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ae664980-4221-4f76-86ad-d03bb0788319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:01:50:06:55:97:a4:c1:6b:10:a4:aa:7f:
                    ff:23:91:69:49:d3:03:83:ce:78:20:b8:4d:aa:42:
                    a4:17:3e:f3:b2:74:b7:74:5d:05:06:c1:b9:92:49:
                    06:7d:88:d5:aa:7a:27:c8:7f:88:e9:f8:30:41:dc:
                    83:b5:af:1f:f5:63:0b:80:b3:4b:b9:7a:94:cc:49:
                    a0:2e:a8:c6:18:4c:92:80:e7:f7:fc:d1:fc:3b:a8:
                    18:6b:d3:8a:16:b4:40:6f:08:a9:f1:a9:75:bb:0d:
                    01:fe:37:c2:8c:c6:b2:8d:31:e6:f9:1c:2e:1c:e6:
                    ea:15:ae:20:a6:d4:2c:7e:5e:7b:b7:24:df:b2:2f:
                    fd:1d:5e:a0:9d:de:bd:1f:25:a8:5d:d0:d8:9e:50:
                    49:c5:87:79:9d:f7:37:2b:b0:0f:88:59:c7:5a:67:
                    b3:90:7e:85:ef:8d:44:b5:82:e1:c0:bb:22:f2:0f:
                    83:7b:8a:ce:87:ac:53:0c:63:de:2b:b1:14:4d:86:
                    df:72:3e:82:80:f1:31:d1:ac:e7:4b:4c:32:ae:fb:
                    78:3d:84:73:19:97:a9:73:25:9a:ff:68:83:ec:b7:
                    c6:6f:30:d9:a6:e3:cf:14:4f:10:3f:19:0b:a5:31:
                    4d:2b:f2:c1:d1:ab:4d:a0:8b:7b:1a:ff:c0:f7:78:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:ED:0A:FE:90:D4:4B:E8:9B:20:56:23:69:9F:2F:CB:16:3E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/486e9aba-896f-383b-a362-fd17e5f95a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a9:d8:0d:d7:e3:0e:aa:7a:1b:bb:01:fe:5c:1b:49:48:db:
         fb:fd:67:c1:88:65:c9:fb:26:c2:38:9d:3f:a2:16:a1:85:28:
         1e:d4:c1:22:9c:88:57:5d:83:a3:3b:88:e5:31:83:83:a6:54:
         68:d0:2d:f0:9a:72:09:64:b7:1d:bf:a9:4c:38:1f:ee:47:d2:
         db:9e:27:e7:1f:41:a1:e5:f3:7f:42:34:da:0b:3b:33:a3:d3:
         30:73:22:ee:cd:14:64:2d:3c:a4:40:fa:db:74:1b:33:cd:4e:
         fa:0b:76:e1:27:38:14:fa:72:ac:c9:11:c9:52:95:1d:fb:4e:
         1a:c2:2f:f6:e5:69:3a:3d:8a:6c:fd:4d:0e:2a:00:0f:2d:82:
         5c:83:c2:6b:17:3c:bf:3e:e1:d0:f3:db:28:bd:9d:78:85:04:
         22:0e:b4:85:43:5b:85:00:4a:f4:6d:d0:1f:e0:cc:cd:4e:f8:
         15:21:5b:0d:5e:9b:a0:3b:51:47:69:59:28:96:c6:9c:33:99:
         c6:a5:87:f6:a4:ef:c7:77:9f:c8:f8:53:9e:f1:1f:bf:a2:b4:
         5c:98:a5:66:e1:00:bd:7f:fb:f2:21:69:ad:ac:3d:53:2a:32:
         1c:7a:36:6a:c5:a9:0e:f7:e5:c2:7f:27:23:f3:4b:44:bf:2c:
         e4:85:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:01 2024 by rpki-client on console-fra.rpki-client.org