Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/313ace30-76eb-348d-809c-f65da87a908c.roa
File:                     313ace30-76eb-348d-809c-f65da87a908c.roa (raw, json)
Hash identifier:          5Gysekz361qS77AHAts2uwl8J/cJASHPxPr03rWSnbg=
Subject key identifier:   D9:D1:BD:20:67:AD:5E:EA:09:F7:CA:32:89:06:49:6D:B4:77:71:38
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F43285845612869557666D3F5017EA960
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/313ace30-76eb-348d-809c-f65da87a908c.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     36734
IP address blocks:        64.201.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:69:55:76:66:d3:f5:01:7e:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=28b49884-f410-4fbb-9333-dd6f59a6cf1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:77:5a:56:5c:7d:f2:eb:70:e9:73:8d:ae:
                    b7:13:c4:6e:dd:33:87:20:2c:64:2b:47:8a:ce:30:
                    f5:66:5a:18:a0:87:1d:6b:d3:d2:f0:54:87:04:57:
                    3d:b3:e3:95:5c:8a:cd:50:81:4d:c8:eb:0c:02:38:
                    32:e3:ef:4f:43:0f:73:43:b5:32:0f:f3:c1:fb:b6:
                    96:25:3c:06:49:d1:04:73:f7:50:49:65:e6:8c:66:
                    b2:ee:6c:10:6b:0f:14:ce:8b:c1:3d:4d:12:c5:37:
                    a2:1a:cb:47:61:ad:3b:6b:df:9e:62:fb:19:05:c7:
                    b9:7b:b4:ca:a1:f2:40:e5:c2:91:c5:b0:71:6e:a9:
                    89:8b:b4:33:ac:a2:0d:e7:1b:ce:68:ff:f6:5b:5e:
                    38:6a:b1:58:67:12:91:9d:da:87:0c:b1:20:ec:3c:
                    da:9f:7b:44:47:31:18:47:68:3c:a8:9d:e0:f1:52:
                    c7:d3:4b:0e:5e:a2:ce:6e:db:90:8e:73:c1:9c:b2:
                    5a:d3:42:bd:51:9c:67:21:e0:a3:f8:4e:b7:a9:9d:
                    61:a9:d5:63:fb:66:44:84:06:1f:d6:1a:15:32:47:
                    54:61:d8:d9:98:e4:20:da:38:7f:a9:0f:00:eb:be:
                    74:1e:54:29:78:6b:bc:9e:b8:85:dd:c5:5f:ff:0a:
                    eb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:BD:20:67:AD:5E:EA:09:F7:CA:32:89:06:49:6D:B4:77:71:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/313ace30-76eb-348d-809c-f65da87a908c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:b4:70:e7:36:c9:6d:46:9a:e7:5a:fa:4e:f4:84:8b:80:
         23:b1:9a:4b:ea:cc:17:8d:1e:ac:6b:d5:bd:6e:a2:5d:45:54:
         1d:8c:20:e3:a6:c9:b0:b4:a1:f7:cb:48:61:38:13:d8:21:88:
         7c:7d:b6:2a:5b:9f:f8:42:91:ee:de:18:bd:75:86:29:86:62:
         4b:26:c0:b5:c8:a2:cd:2b:eb:ee:cf:fe:00:61:19:67:0d:eb:
         72:d4:8c:78:33:df:7b:41:84:0f:78:68:5a:32:0e:91:95:ef:
         8e:b4:5f:4b:25:80:07:62:1a:15:50:6a:8c:b3:78:51:5a:3b:
         42:2b:a4:83:d3:55:82:82:52:46:ed:a8:13:de:79:d8:f9:b5:
         c0:3b:f0:78:ba:5b:2f:58:be:2c:e5:31:ff:ec:f8:27:70:a4:
         4d:5b:a2:13:fd:96:71:d4:01:fb:4d:cc:91:7d:fc:48:8b:5c:
         f0:a6:e6:9f:de:49:2c:86:af:eb:2c:fa:f2:b0:87:32:df:94:
         66:9c:22:9c:d3:50:4c:8d:55:fd:70:cf:6c:fe:65:af:33:c5:
         7e:fc:63:1a:77:44:ac:53:42:62:24:0d:be:95:d4:38:df:76:
         ba:5e:3f:6e:a8:cd:86:52:78:42:97:b2:f2:85:18:38:29:db:
         5b:ab:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 02:07:39 2024 by rpki-client on console-fra.rpki-client.org