Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa
File:                     686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa (raw, json)
Hash identifier:          4SL9MLro8vYe61tipRjvkE9QvkH3by3V/KYGyPHS3Gc=
Subject key identifier:   17:EB:29:20:D7:E0:26:DE:3B:27:00:13:C0:2A:C6:85:CD:39:F8:2A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858457D3530E78D19BFA4D67CB800
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa
Signing time:             Tue 09 Apr 2024 14:09:17 +0000
ROA not before:           Tue 09 Apr 2024 14:09:17 +0000
ROA not after:            Mon 08 Jul 2024 14:09:17 +0000
asID:                     16696
IP address blocks:        147.185.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:35:30:e7:8d:19:bf:a4:d6:7c:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  9 14:09:17 2024 GMT
            Not After : Jul  8 14:09:17 2024 GMT
        Subject: CN=74970d0b-b903-4e25-9f4a-25e58b8337d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:47:e0:53:14:ba:01:e0:06:6b:d8:d9:fc:
                    c8:8d:a7:0d:22:fb:a0:cd:ee:c1:ff:4e:74:2a:f3:
                    5e:85:57:38:87:ff:85:8f:f4:bf:ca:2a:5a:a3:c5:
                    79:8b:c9:ad:49:c1:df:0f:5d:db:79:75:58:7a:0f:
                    85:e0:69:ab:5e:98:cb:be:cf:f8:a4:9a:03:a0:63:
                    92:0b:31:aa:8f:97:fc:75:d0:03:a6:04:82:bb:88:
                    bf:55:23:fd:f0:1b:e5:f9:fd:7c:36:8a:85:7d:2d:
                    e2:36:72:72:f6:5d:35:06:07:39:c4:eb:ff:d3:61:
                    62:e7:2a:a2:91:7f:77:73:88:74:f4:9c:d1:80:65:
                    3c:69:7a:e1:a1:a7:b4:74:62:4e:75:3b:27:09:45:
                    58:15:59:b3:e9:24:27:b7:c5:55:bc:fa:07:62:84:
                    b6:61:1e:73:ad:c0:84:02:3f:fa:22:ea:db:52:dd:
                    0c:a0:44:81:44:ae:ea:13:69:01:c0:7a:90:8f:7f:
                    5b:85:ce:a1:86:7c:4a:1c:9f:5b:e0:98:37:94:6a:
                    fd:1e:54:06:d6:53:65:a8:43:b7:de:f2:e1:2c:be:
                    8a:fa:b6:cd:4e:ed:86:fa:8a:17:96:28:8c:a7:0f:
                    bb:a6:3b:88:01:60:54:ac:4b:6c:11:96:06:53:f2:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EB:29:20:D7:E0:26:DE:3B:27:00:13:C0:2A:C6:85:CD:39:F8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/686dbe98-86d9-3b46-b031-74fc59bf9ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:fa:2c:13:cd:af:67:05:27:d0:0c:38:8c:fa:b5:48:14:15:
         69:38:93:f0:6f:66:c8:6a:09:ec:37:3d:ce:e4:a5:54:bf:56:
         22:ee:36:bb:71:09:35:1d:60:ba:ce:88:1d:92:14:2e:a1:4b:
         67:b9:56:fa:01:36:3a:ed:83:11:7f:bf:a7:62:7c:58:80:d1:
         a6:22:fb:98:b1:19:72:b4:fd:cf:5c:4b:a8:fe:c1:ea:75:7a:
         54:d7:47:d1:05:b9:70:9b:cd:cb:d0:fb:d3:e8:a0:f2:cd:36:
         91:9e:04:c7:b2:fc:8d:9d:78:bd:65:9b:a9:91:d6:f0:97:95:
         16:24:77:b2:91:bf:c5:a9:e6:a6:d0:f8:48:fd:ae:66:46:7c:
         0e:27:c8:a5:af:c4:2a:54:f8:55:a6:e1:a4:fa:b4:80:d8:65:
         a7:ed:db:55:a6:c6:5e:94:a0:1c:45:ec:13:8b:f7:04:aa:c6:
         ae:76:d8:71:21:ff:c3:6d:6e:4a:6d:77:3f:b6:8d:d3:56:ad:
         e8:59:04:67:b8:13:f4:4f:93:ad:10:62:f4:44:b0:9e:75:21:
         41:3a:fa:af:2d:cb:e8:2e:72:a1:fd:34:6f:95:52:50:58:1f:
         1b:39:90:8a:32:f2:58:b2:e3:f5:ae:fe:b1:c0:43:6e:b9:31:
         b7:5d:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 17:15:57 2024 by rpki-client on console-ams.rpki-client.org