Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa
File:                     63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa (raw, json)
Hash identifier:          c3jl+IspVxiOBzjw3PgjfvxLNmNqk5e9zscy25pGfQU=
Subject key identifier:   92:EC:09:F8:C8:75:3C:18:D1:28:19:35:06:8D:6D:6E:CF:94:2C:67
Certificate issuer:       /CN=94738821-1f1e-430f-b49e-05e511cc80b4
Certificate serial:       010D0C9F43285845855D8E1D20BF65F5E8A94C40
Authority key identifier: 80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa
Signing time:             Fri 12 Apr 2024 12:17:05 +0000
ROA not before:           Fri 12 Apr 2024 12:17:05 +0000
ROA not after:            Thu 11 Jul 2024 12:17:05 +0000
asID:                     32475
IP address blocks:        209.222.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:5d:8e:1d:20:bf:65:f5:e8:a9:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94738821-1f1e-430f-b49e-05e511cc80b4
        Validity
            Not Before: Apr 12 12:17:05 2024 GMT
            Not After : Jul 11 12:17:05 2024 GMT
        Subject: CN=7560e73b-d7d7-4b86-8d68-5190b8588ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:5b:eb:55:57:6b:67:9a:ac:cb:8f:4f:c3:
                    e4:55:04:f9:f6:e2:fb:99:29:3f:b9:2b:bc:bd:64:
                    67:a3:53:01:e9:8c:a7:d3:eb:4f:7c:19:40:aa:63:
                    fe:b7:3b:64:36:51:35:4f:5a:8b:61:0e:a3:ef:3f:
                    d9:07:04:e8:dc:f6:54:f5:f2:71:24:17:f9:06:b9:
                    81:ac:fe:9b:70:22:a6:72:00:33:89:4e:a3:f4:76:
                    36:96:d1:1b:ce:4a:72:45:08:5e:b1:1d:b3:5c:32:
                    81:fb:73:7a:bf:59:65:e1:4e:ad:65:07:98:3a:95:
                    a2:f7:30:49:6f:5d:e8:1f:c3:09:9d:bc:bf:69:4a:
                    31:3b:94:70:79:74:83:0a:f7:e5:a8:24:f5:2f:3f:
                    a7:c2:5b:90:a3:af:0a:ca:93:34:63:ea:48:99:89:
                    e1:7f:b5:b3:9f:30:28:49:a6:da:20:48:dd:3f:cb:
                    ba:fe:8e:c4:59:e0:c6:84:40:77:3e:81:67:11:02:
                    60:4b:8f:6a:d5:9a:68:ee:a2:6f:9a:20:e2:61:d3:
                    42:4e:07:80:64:05:c4:87:d5:df:43:d0:3a:b4:b2:
                    b9:3e:f7:6d:e5:ff:9f:e4:7d:70:23:59:f8:46:06:
                    bf:c6:cb:66:98:cf:c7:3b:12:e0:42:8b:14:20:9c:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EC:09:F8:C8:75:3C:18:D1:28:19:35:06:8D:6D:6E:CF:94:2C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/63d8bad3-cfe9-3f62-87db-8dfba7e599fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl

            X509v3 Authority Key Identifier:
                keyid:80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c2:9f:ec:c7:f2:2e:c1:39:67:79:5e:22:a6:d7:8d:23:dc:
         67:3c:74:95:83:02:38:ae:69:91:cd:c3:af:67:7e:27:fe:86:
         00:a7:74:33:3e:10:91:d7:b8:8e:77:78:e2:a1:ee:1d:87:d2:
         4e:53:11:90:cd:cb:b0:04:34:82:fa:a7:27:5f:57:52:82:59:
         60:1c:6d:bb:5d:0b:b3:e4:cb:d8:a7:06:c6:78:12:28:16:af:
         a9:76:1c:3c:d8:be:e4:04:6c:f7:57:01:da:5d:8e:80:e4:0f:
         dc:f5:6c:82:a0:64:54:50:d6:db:a0:28:dc:d4:fd:a2:01:cd:
         73:4c:29:86:60:8a:7f:c2:d1:e2:9d:11:7e:a4:b0:5b:c1:fb:
         c6:e7:11:05:0b:5d:93:38:5b:79:62:d5:3b:fa:2b:7f:6b:00:
         77:a3:55:e3:bb:e5:86:6b:cd:3a:95:e6:cf:b1:cd:fb:97:44:
         1d:3a:80:ed:d3:57:8b:08:b6:82:6e:3f:f5:1a:50:0a:87:71:
         00:ce:48:03:99:18:89:91:4b:2b:4a:a1:ba:1f:92:d7:dd:7c:
         08:73:7f:34:b5:d3:f3:2c:02:00:56:9d:d2:68:a0:1c:b5:23:
         ef:a4:fc:2b:c4:c5:19:55:16:fa:45:1e:80:4b:f1:d1:87:a3:
         cd:2f:f6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:24:57 2024 by rpki-client on console-ams.rpki-client.org