Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa
File:                     4420984a-f7eb-38c1-89b7-981cd4631dc3.roa (raw, json)
Hash identifier:          X2mSqVtM9+sDtiT4uYcfkSr7ASXCFCTgscMPRFSIZNQ=
Subject key identifier:   72:5E:42:B2:1D:C9:E3:B7:8A:66:93:09:F6:CE:48:99:59:E7:05:A9
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F432858459A63468E64CB135C0090DD00
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     22135
IP address blocks:        173.242.11.0/24 maxlen: 24
                          173.242.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:46:8e:64:cb:13:5c:00:90:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=f321fc43-9156-411b-b4dc-c63d4ad0936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:99:55:b5:80:07:f9:f7:90:14:ed:74:b2:
                    79:bc:43:47:ad:bc:ba:17:04:8f:1a:34:12:18:ac:
                    0b:14:de:f2:5a:f5:27:52:2a:0d:aa:cb:4f:15:51:
                    96:09:72:c7:d8:1d:73:d2:5b:ee:db:4e:ed:8b:5a:
                    2a:2a:f4:a7:96:f6:ef:8c:0e:bd:27:17:5b:b9:98:
                    76:2c:92:fe:e2:4b:39:f1:bc:f8:0a:01:23:b0:f3:
                    f9:77:93:cf:c6:3d:12:f2:0d:dc:f0:6e:ef:97:48:
                    7b:c0:1c:0d:00:7e:d3:2d:ae:52:ff:ee:5e:7a:cd:
                    47:f1:0c:1c:ac:65:12:2b:7a:63:ab:e7:5b:38:44:
                    61:79:89:0a:67:28:a2:de:fd:5d:30:ec:0d:b8:7b:
                    fe:70:15:26:84:b3:36:ce:58:2c:42:e8:4e:14:8f:
                    40:e5:b0:dd:20:cf:de:e4:61:43:3c:cf:b0:fc:87:
                    e4:9b:b7:3f:a5:de:a1:19:59:97:87:fe:db:bb:e9:
                    18:a7:99:b9:27:d6:45:c4:b1:28:ba:77:c4:b7:18:
                    6d:23:9d:11:67:5f:09:0c:5c:ef:e2:e4:f8:82:13:
                    20:cc:18:19:0c:0b:1f:3e:20:82:f5:5b:c5:4c:9c:
                    e5:3d:96:b6:9a:0b:01:73:04:18:16:a0:76:5f:d5:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5E:42:B2:1D:C9:E3:B7:8A:66:93:09:F6:CE:48:99:59:E7:05:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:1d:02:78:4b:cd:e6:9e:4f:d3:0e:af:71:92:de:62:97:
         18:f7:e4:53:41:44:87:db:e1:b7:d9:52:d8:09:5f:17:3e:55:
         71:53:70:53:46:68:cb:c6:cb:6a:b4:10:55:d0:0c:0d:18:f6:
         ae:db:dc:b4:4c:30:2c:01:56:1e:2c:57:a5:75:1b:6d:82:ca:
         0c:47:65:9c:a6:04:66:15:b1:30:9b:12:dd:fb:97:3a:0c:d2:
         90:e6:a3:85:50:cc:52:49:e6:a0:36:d4:8b:a8:a3:6d:70:ae:
         fa:1f:ba:99:92:94:92:62:cd:af:d8:c4:d4:dc:cf:3e:ad:d8:
         e7:0d:73:a2:16:15:a7:d6:70:a6:21:fa:f7:c2:76:78:16:09:
         bd:63:96:b8:3a:b6:22:6a:44:6a:21:9e:2b:dd:4a:c0:5b:fa:
         14:b6:b0:01:71:b2:6d:ee:fa:b5:61:75:e3:96:2f:33:2e:33:
         21:5c:43:f2:68:6e:e1:c9:30:75:d2:2d:a8:40:71:69:ca:79:
         b2:23:56:7f:db:59:4d:38:4b:53:70:94:5f:7e:6b:21:53:6a:
         2b:46:34:7e:ee:39:fa:bb:3f:ba:7e:10:db:8d:6e:06:ac:d2:
         90:31:c0:84:a5:ec:0e:67:21:36:c6:6c:72:58:fb:4a:ad:a8:
         34:5b:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 01:42:49 2024 by rpki-client on console-ams.rpki-client.org