Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
File:                     ab0417bd-e109-3009-93c0-f235c176e944.roa (raw, json)
Hash identifier:          V2cjaqB5NtQeF0/uT+bakynx7F2bheOrGjmZ/9Ofc+M=
Subject key identifier:   5B:68:E3:DB:DF:58:0B:C5:30:EB:2E:13:E8:74:FC:84:F3:0F:99:91
Certificate issuer:       /CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
Certificate serial:       010D0C9F432858455E5DAAC1BA696DB3B5507B18
Authority key identifier: E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     62830
IP address blocks:        198.62.201.0/24 maxlen: 24
                          2620:52:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:aa:c1:ba:69:6d:b3:b5:50:7b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=42a112bb-9b1f-4d35-9755-87645528fb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:14:8e:14:ee:1c:fc:73:15:46:24:21:60:
                    a5:ff:7e:29:86:4b:3b:da:29:a9:c6:69:7d:82:7a:
                    2e:72:ee:ac:d0:b1:71:79:43:ef:50:3b:e3:92:a4:
                    8e:cc:3f:5a:9a:33:0e:9a:a4:18:7f:7d:24:7d:55:
                    b1:19:17:53:08:ef:c7:c3:6c:d4:71:85:50:23:9f:
                    03:f1:8d:8a:cc:e6:28:c6:a0:93:be:66:3b:fb:95:
                    23:18:a1:d2:30:ab:ca:2d:19:26:83:10:7b:44:05:
                    a4:11:eb:2b:29:5b:b1:5a:62:b3:8c:54:6d:76:50:
                    af:a7:bf:f3:38:99:17:f1:85:f7:3a:75:45:de:78:
                    27:63:5b:7e:42:25:0c:40:1d:bb:73:65:6c:c2:39:
                    c4:ea:9d:64:cc:79:76:2a:cc:bd:7a:62:3c:1a:61:
                    21:ee:56:3f:ca:41:ef:4b:cf:f9:b7:e2:6b:e5:4f:
                    3d:23:d5:f9:a9:c2:96:3e:2e:7a:f1:1e:8e:ed:9f:
                    5f:56:c1:25:bb:a3:b8:96:bd:4b:6f:19:30:dd:c7:
                    37:1a:52:de:43:52:7e:d6:b2:7e:dc:90:af:bc:a2:
                    67:ac:f9:ad:f0:4f:a1:55:df:f1:e5:21:19:b0:0c:
                    33:b0:7e:6f:ef:7f:2b:ef:67:c4:87:c0:22:f3:ac:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:68:E3:DB:DF:58:0B:C5:30:EB:2E:13:E8:74:FC:84:F3:0F:99:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.201.0/24
                IPv6:
                  2620:52:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:15:3f:a4:fe:3a:06:10:0e:98:5d:9f:5b:6a:ca:79:93:
         14:d7:2f:53:3a:cb:7f:c1:0c:75:de:89:73:11:92:41:33:b7:
         39:1d:06:3a:31:ef:3a:46:71:0d:18:2d:5f:ff:e1:fa:0e:07:
         89:78:6a:88:22:b0:01:84:d9:4a:35:04:f8:dd:dc:01:e9:8f:
         00:18:f5:66:c5:b6:8b:64:08:99:4b:30:a7:c6:51:4f:2c:20:
         af:c0:5e:6f:77:71:f3:42:be:00:9e:cc:f2:71:fa:ca:bd:96:
         c1:90:ce:15:bc:1e:a1:93:17:4c:9f:49:42:6b:51:a1:39:40:
         e6:41:72:0c:7b:bb:25:a3:3c:03:2c:74:1e:0d:58:49:08:4d:
         03:a9:50:42:e9:a3:a2:ea:38:ae:90:77:42:c0:af:ed:86:ce:
         cc:6a:6e:29:6e:c3:10:1b:75:06:c5:53:aa:fd:32:a9:9a:4d:
         fa:33:be:f0:df:bd:52:ad:ec:00:15:bd:6c:2f:d4:b3:b5:ab:
         7f:6b:48:8a:7a:b9:27:34:13:2c:f5:47:03:d4:29:b8:a6:b9:
         2d:de:0d:9b:e1:c6:5c:8d:3e:67:85:ad:7c:ce:64:bd:43:41:
         ce:63:01:22:9f:85:49:7c:d7:0f:c3:0a:b4:c2:96:a5:b6:6a:
         d3:99:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:19:31 2024 by rpki-client on console-ams.rpki-client.org