Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa
File:                     2427250f-9572-3c12-a905-8148cbe1c196.roa (raw, json)
Hash identifier:          eSWZxvk8lDAhCnlR7wKxwsOa/bnc5v9iq+QK1afsxVw=
Subject key identifier:   F5:34:E0:AD:A8:9D:6F:8E:C2:08:40:B0:A8:4B:32:C4:9A:4B:57:E5
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F432858455E5DAA53313E3E0BBEFC0580
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     32590
IP address blocks:        208.64.200.0/22 maxlen: 24
                          205.196.6.0/24 maxlen: 24
                          208.78.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:aa:53:31:3e:3e:0b:be:fc:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=304c76d3-27ee-4aed-ad87-333503c2c259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:a3:37:f7:2d:31:25:bc:b8:b1:bd:86:70:
                    07:be:73:2b:db:45:5a:59:95:c0:51:cf:4c:72:35:
                    c6:6f:ab:57:c4:ff:e8:19:70:9e:62:a0:0a:d9:40:
                    ee:d3:d7:53:99:71:1b:a7:01:b3:7b:b1:58:d6:4b:
                    eb:38:cd:08:dd:c7:2f:6b:89:74:69:c2:28:5e:47:
                    eb:5e:5d:02:95:02:07:6a:8a:8a:50:9e:b1:1d:a8:
                    32:67:9c:5b:61:a5:a1:aa:67:ab:5e:f5:75:35:22:
                    f8:2d:23:71:ee:86:a9:27:c9:88:18:7a:1e:3e:5a:
                    74:b6:9f:6a:2f:3e:7f:5e:7a:97:61:fc:90:39:c6:
                    f9:e4:97:21:a2:0d:84:73:fa:12:47:b4:3e:22:c6:
                    77:06:2b:4b:19:db:27:ef:2a:cf:89:18:31:47:14:
                    45:c7:52:96:bc:71:27:f3:bf:10:d4:4b:86:77:c6:
                    f0:a3:a1:e3:0c:05:d6:e5:27:58:bd:68:0d:8e:91:
                    5f:8d:96:e1:ee:96:75:65:55:8f:f5:78:cd:24:d9:
                    e6:1b:aa:8b:79:fe:20:c4:32:fe:0e:6a:ed:88:bf:
                    5b:35:43:4e:26:c3:2b:d7:2c:67:b1:90:34:aa:be:
                    81:da:90:47:43:b6:4a:22:0f:7d:17:e5:31:8b:ae:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:34:E0:AD:A8:9D:6F:8E:C2:08:40:B0:A8:4B:32:C4:9A:4B:57:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.6.0/24
                  208.64.200.0/22
                  208.78.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:e1:df:4a:73:39:8e:2a:c6:3d:c3:76:ee:01:09:34:06:40:
         73:bb:5a:3e:05:6c:d7:0c:07:c4:a3:ae:8f:41:ff:55:6c:3a:
         1d:58:35:92:b1:ee:d7:7a:ba:d1:7d:df:d7:17:5e:82:7f:e8:
         a8:c6:43:13:7e:9c:c5:ae:a0:c6:ef:e5:2b:44:14:13:1c:c4:
         ee:37:21:6f:3c:8e:bd:6d:00:43:1c:ab:e2:3f:d5:78:74:24:
         74:c6:89:c8:2b:d6:82:c8:01:2b:33:72:fd:d0:c5:fd:a3:fe:
         1f:7a:d9:9e:03:a1:14:19:86:4f:f2:68:a5:56:ba:14:54:3a:
         5a:af:64:ae:dd:ec:45:52:e2:fe:3e:89:a7:3e:00:ae:5c:bf:
         2e:73:b9:eb:73:2c:b7:b6:ea:c2:52:ab:3b:69:59:81:13:4e:
         91:13:59:41:15:4b:95:b1:64:0f:79:12:34:eb:88:b1:e9:dc:
         67:3d:9f:bf:67:34:ba:78:f8:58:f5:8c:aa:d9:ed:9c:25:c9:
         28:e3:45:74:5a:11:21:47:a1:2c:ee:eb:ea:43:e2:a3:ab:4c:
         56:35:f7:53:8e:c9:2d:9f:50:c2:10:f9:6b:6d:26:1e:94:43:
         59:bc:e0:c6:07:42:4b:13:26:f0:1e:46:3f:26:58:f5:5a:4a:
         c8:ae:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 00:36:38 2024 by rpki-client on console-ams.rpki-client.org