Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa
File:                     ca41f978-1d3e-3538-b87d-f15e2497272c.roa (raw, json)
Hash identifier:          /bi979eJtv75OlSECQ9QFuDDSIxJvz2MmWtXI/EeKfs=
Subject key identifier:   C1:FF:0B:11:E2:22:61:0C:B5:31:25:70:BF:D3:DE:E4:09:F5:56:A0
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858450ABAD48AB773C2CF121C5300
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     32133
IP address blocks:        64.99.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d4:8a:b7:73:c2:cf:12:1c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=1411dbad-d6f0-48c7-9fee-fe3c3852ff84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:96:77:7b:b8:35:05:eb:aa:9e:0a:c6:c2:
                    01:52:04:4e:f2:81:11:9e:5d:05:d6:d7:76:95:06:
                    e8:f8:18:5a:9c:7e:1b:e6:ae:90:ca:32:25:2a:15:
                    64:1b:75:4a:29:91:04:ee:e5:fe:9a:d3:0e:59:4e:
                    b3:02:2c:80:22:cf:ce:2b:bd:3a:d9:88:d4:e1:a9:
                    56:87:48:31:39:80:f5:90:87:03:ef:bb:18:94:0d:
                    a8:f7:8a:30:91:b6:34:e2:cb:15:cb:0a:e1:30:a2:
                    42:eb:a3:66:95:9b:f9:fb:a5:74:98:1d:3d:41:df:
                    a4:5c:19:85:fd:7b:55:c7:88:4b:94:21:53:e9:ba:
                    b1:71:98:2b:87:e6:4c:0d:94:38:e6:f9:2b:52:18:
                    37:81:c6:7b:f8:bc:7d:b1:41:b4:66:89:91:70:d7:
                    dd:94:ca:4f:e5:00:4e:92:8b:04:47:ae:38:56:97:
                    39:66:13:16:e3:6b:7b:da:8c:8c:7e:2c:c7:39:6f:
                    c8:58:76:ed:43:83:f5:b0:40:26:e8:b2:55:39:e6:
                    0d:28:11:5b:64:73:3b:01:fe:2f:26:0e:ea:50:f3:
                    81:b0:eb:d0:9c:27:4b:05:4d:e5:7a:c7:05:4c:71:
                    c3:d8:55:0b:6d:91:22:29:45:20:68:68:1c:20:55:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:0B:11:E2:22:61:0C:B5:31:25:70:BF:D3:DE:E4:09:F5:56:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:d4:1a:4a:05:60:1c:f4:2a:27:7e:a9:bc:76:e8:11:42:
         c0:74:50:62:e7:a5:33:5f:b3:01:b8:b0:e0:fc:93:40:13:65:
         14:1c:ef:14:7a:c1:29:61:e3:52:17:f6:33:a7:83:d7:00:bd:
         84:3b:ae:61:f3:38:06:55:10:df:b5:15:ba:4a:77:c6:33:4e:
         90:3a:a3:22:28:3d:18:43:f4:47:1b:95:e1:8b:d6:85:64:8b:
         f5:b1:fc:c0:91:6b:2d:7f:d7:84:54:7a:73:30:d7:37:b8:39:
         40:22:6a:2a:60:4c:7a:8d:48:f2:1c:e5:eb:34:56:ce:88:fd:
         4c:1d:0f:48:b6:82:92:70:23:e8:aa:ef:fc:2c:e9:4b:2a:70:
         c3:ee:a5:72:19:3a:3b:ab:3c:4a:b2:9b:9b:dd:0c:42:13:fe:
         fb:0c:3b:b3:20:99:93:4b:da:b9:34:01:a0:b7:cd:82:6e:03:
         ce:69:69:55:e8:dc:9c:ce:a2:9c:9b:12:8c:19:e6:35:89:7c:
         7b:98:d5:fd:40:6e:57:15:9f:2c:f4:97:e3:05:09:8c:aa:95:
         eb:79:f3:3d:b1:a2:73:5a:e4:be:a5:87:1e:f5:be:83:ed:bb:
         ec:94:d1:fd:65:81:bb:b2:7a:54:ff:08:e7:0e:5b:07:7f:e8:
         09:57:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:25:18 2024 by rpki-client on console-ams.rpki-client.org