Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/1f0461d5-87cb-3746-98f7-761a4f7c79d5.roa
File:                     1f0461d5-87cb-3746-98f7-761a4f7c79d5.roa (raw, json)
Hash identifier:          ymcBwHILRek095TZx/jKp09IYmUtvtbwOLYM4tlR8LE=
Subject key identifier:   C1:AA:0F:0F:D5:78:9A:03:CD:92:0B:BF:7C:63:CA:58:0A:72:5D:AB
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584561285F85608D65654A90ACA0
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/1f0461d5-87cb-3746-98f7-761a4f7c79d5.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     36734
IP address blocks:        173.241.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:5f:85:60:8d:65:65:4a:90:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=711b1343-a087-4174-b8a4-847fe935869b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:5f:f2:91:d9:16:d2:ba:66:b3:3e:98:a1:
                    73:57:77:c9:3b:36:e5:65:83:74:e2:1e:c2:f6:6a:
                    5a:d2:a2:55:92:f6:eb:aa:f5:81:6d:9a:9a:c1:37:
                    b3:e1:b1:ae:45:ae:ac:20:81:02:d6:b1:61:11:a2:
                    46:ee:06:fa:b6:d7:0c:48:0b:be:be:25:0a:98:d0:
                    62:19:5f:09:c1:98:e0:a4:1e:14:42:28:4c:d9:ad:
                    f3:8d:af:72:fb:3e:3e:e1:cc:e7:9b:b6:b2:e1:03:
                    7c:8c:64:15:5e:ec:73:20:3f:68:bf:6d:3b:4e:a9:
                    2f:21:bb:ec:0c:b0:0e:1c:e7:6b:63:b3:ca:ef:c8:
                    f7:ed:3c:48:5d:8d:4d:2d:46:f3:f7:9b:5d:d8:57:
                    75:50:05:99:2c:32:0f:0e:f0:12:6b:3c:cc:01:5f:
                    bc:36:4e:73:a8:08:55:c9:77:3c:bc:6a:40:eb:69:
                    cd:c4:58:6a:ee:4b:0f:08:37:53:a4:1e:15:95:7b:
                    04:d0:a7:1b:e2:37:4d:74:64:f2:67:62:96:66:28:
                    8d:da:13:2a:fa:fb:e3:c5:a2:06:15:38:63:3d:a3:
                    6a:fb:1a:d9:0f:08:38:67:1e:60:fd:17:d9:07:a9:
                    a5:49:64:e4:61:d6:ea:ae:44:b6:07:7d:a5:43:40:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AA:0F:0F:D5:78:9A:03:CD:92:0B:BF:7C:63:CA:58:0A:72:5D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/1f0461d5-87cb-3746-98f7-761a4f7c79d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:59:9b:fa:5a:d6:b3:b1:ac:53:38:de:16:ba:0d:62:4c:aa:
         3d:d9:10:76:cd:be:4e:7b:a0:89:ee:aa:97:2c:56:4e:10:8d:
         1f:b1:c9:95:7c:e9:dd:aa:f2:53:4a:c4:f2:17:2c:1f:19:e1:
         cb:d7:34:c7:f8:fa:b2:f1:2e:23:65:6e:62:93:a5:64:b5:5a:
         e0:be:ea:e7:90:30:42:bd:f0:91:18:f9:89:fd:b1:9a:14:99:
         a5:5b:0d:f9:4f:fe:e6:1d:3c:51:39:00:54:f5:ca:28:6c:02:
         db:9f:be:18:3b:e7:5c:73:34:88:15:d4:c7:5b:66:ef:5f:cf:
         2a:1a:0c:a7:28:99:8f:dc:18:41:a1:83:56:77:34:93:4d:bc:
         02:d1:15:0a:83:9b:db:30:b5:2a:d0:1f:7c:6f:24:e1:e1:40:
         f6:eb:76:7c:60:ef:aa:3c:ed:be:70:b2:a9:1e:8c:05:b1:9d:
         da:ef:ea:86:c8:60:8f:d3:67:e7:c8:8a:4e:64:4b:a1:62:e0:
         ad:12:0c:97:01:01:47:3a:58:43:11:52:33:83:66:b7:9e:f4:
         1d:84:04:bc:06:71:3d:63:fc:58:78:6b:ed:06:0d:09:58:06:
         ab:bd:b4:09:d5:b3:0e:60:e6:d1:10:52:9c:97:11:34:8d:f2:
         45:b2:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 17:10:07 2024 by rpki-client on console-fra.rpki-client.org