Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
File:                     cd011bcd-5b47-3a26-a048-12e973e67b5f.roa (raw, json)
Hash identifier:          1AuJEetegyfa5EhENvYk7BU2VsZaVYn2kvMZPZMkBSw=
Subject key identifier:   EE:F4:23:F4:5F:0C:06:40:88:C5:B7:AE:A6:4B:FB:29:1C:B4:7B:AF
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584531B296513A223920EA5D33E0
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     53334
IP address blocks:        216.59.58.128/27 maxlen: 27
                          216.59.58.160/27 maxlen: 27
                          216.59.58.224/27 maxlen: 27
                          216.59.58.208/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:96:51:3a:22:39:20:ea:5d:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=73b15d7e-5d76-4133-b5b1-8dd2c7592b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:fe:ba:90:e5:1b:8a:68:00:69:41:44:ce:
                    4e:6e:7a:25:12:55:37:77:10:eb:c9:82:28:14:4f:
                    84:66:fc:bd:88:1d:e8:cd:f3:fa:a1:13:a5:f3:ab:
                    96:5f:3b:fd:34:ef:a1:61:74:1f:ce:03:e2:03:e8:
                    55:b2:94:21:84:34:c9:b4:9e:d7:ad:81:22:10:0f:
                    03:48:71:18:a6:22:34:97:d5:25:54:9d:22:34:3f:
                    69:dd:06:78:0b:a2:b9:90:8a:c9:66:18:e8:95:a5:
                    e6:1c:88:29:08:88:7e:e1:49:45:58:e5:2d:60:4a:
                    73:ea:3d:89:a8:da:ed:98:4d:f6:30:15:9a:48:73:
                    05:a3:7a:12:e2:5b:92:5b:dc:ca:41:5f:ba:c0:c4:
                    10:be:0e:0b:89:a3:66:18:8d:f0:a3:72:f6:98:a7:
                    b9:98:0b:3e:8f:0d:22:e0:16:9f:8b:bf:ed:2d:75:
                    c1:23:34:c4:ff:76:d8:de:87:41:88:64:c8:c2:6e:
                    99:d0:20:4b:4f:19:1b:60:11:e8:32:c8:26:6e:43:
                    c0:7f:8d:42:06:93:a5:ae:0f:63:1f:34:65:19:ab:
                    87:3a:dc:11:c8:f2:02:45:7d:a4:1b:a1:c7:0c:25:
                    d2:5c:bb:6b:84:cc:2b:1f:e3:59:2e:d6:db:59:fd:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:23:F4:5F:0C:06:40:88:C5:B7:AE:A6:4B:FB:29:1C:B4:7B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.128/26
                  216.59.58.208-216.59.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:38:d2:9a:e9:f1:9b:01:59:db:27:ad:ca:71:1a:dd:96:f0:
         7e:d2:86:67:6e:71:aa:a1:6b:42:a7:b0:60:d0:e4:31:23:77:
         7f:50:5a:fe:ed:4f:34:21:63:f7:05:3b:ff:0b:1c:bd:60:e8:
         60:dd:fb:dd:32:21:4e:18:5c:14:6c:41:f7:95:ea:80:11:20:
         53:38:fe:8c:43:e2:80:a0:54:27:8d:80:e4:0f:80:df:a6:7d:
         f1:f0:c8:91:36:99:6f:3b:9f:5c:89:c5:78:90:2d:af:5f:76:
         01:d0:0c:a9:4a:f1:60:e7:06:2d:f3:9f:bd:00:1f:90:34:71:
         fe:4a:7e:bc:38:de:02:a5:c8:3d:3c:3a:cf:84:9e:59:30:cd:
         4d:dc:40:6f:f7:83:47:57:96:f0:67:65:09:8c:62:75:ec:be:
         bd:61:ad:6b:4b:9f:4e:1e:6a:14:c0:19:cb:1e:e2:c4:8e:43:
         e2:4d:77:a9:37:24:db:cb:8c:67:d6:25:23:c8:9f:22:e2:d9:
         24:b7:1e:90:e4:56:a3:5b:8b:9f:10:9b:7f:e9:f9:41:e5:52:
         00:3b:93:b8:ca:28:62:bb:1a:e1:9d:58:26:f7:3d:e7:25:56:
         fd:67:bc:19:65:3d:e9:83:3c:e7:fc:bf:5a:cd:70:25:58:1a:
         37:8d:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:03:04 2024 by rpki-client on console-ams.rpki-client.org