Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
File:                     c6373672-771d-3946-baf4-d4e76c94aaf4.roa (raw, json)
Hash identifier:          OGkpKNZMy4GFWZYR0HNDjkh3O4xv/2Y4oqqghR+0sNw=
Subject key identifier:   EB:EB:56:06:C7:EA:9C:98:EC:90:67:2B:CB:54:0D:DC:36:2F:97:1F
Certificate issuer:       /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial:       010D0C9F432858459E9361D0E79FAB3B1B29E5E0
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     6939
IP address blocks:        216.21.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:61:d0:e7:9f:ab:3b:1b:29:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=7e375434-ba75-4faa-8f08-7d500b228cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:0b:33:f1:71:88:77:9f:bf:41:3a:87:9a:
                    2e:8e:44:0a:78:f9:64:57:f8:ba:0e:14:4f:4d:36:
                    69:dc:39:73:8a:02:88:cc:9c:81:92:0f:d2:34:9f:
                    a5:b7:37:45:29:ea:69:53:37:18:90:32:78:62:29:
                    d2:d6:13:9e:a3:6d:b4:47:52:99:12:ae:b6:61:ba:
                    2c:99:a4:6d:7d:c3:96:a7:4e:1c:a2:5a:00:34:97:
                    6c:44:88:53:24:98:32:35:5a:20:13:fc:6d:3b:92:
                    47:92:56:49:d1:18:fc:93:87:b3:0d:0c:86:b6:64:
                    c1:44:28:29:5d:81:c5:6a:07:d4:7c:7d:2f:50:e6:
                    06:3a:db:d7:ae:39:a4:76:26:ef:f0:6e:0d:03:09:
                    9f:8c:b9:76:45:f8:01:69:e7:6a:b5:e2:2b:8f:b4:
                    3e:87:c5:87:11:8e:6e:90:3e:5f:a8:16:b7:3f:75:
                    c6:31:6d:6e:e0:a4:9f:aa:68:bb:4d:50:3e:cc:9a:
                    4c:b2:8c:2d:35:67:85:b6:5b:2c:6d:cf:34:42:67:
                    a5:13:6e:e4:4e:52:8f:97:32:ee:59:e3:09:f9:de:
                    c1:3a:4c:8d:8c:0e:88:c9:99:8f:76:4d:35:be:0a:
                    87:4e:14:e5:55:88:ab:c6:aa:6f:0e:fe:3d:00:cf:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:56:06:C7:EA:9C:98:EC:90:67:2B:CB:54:0D:DC:36:2F:97:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl

            X509v3 Authority Key Identifier:
                keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ae:d3:b3:3c:a3:f6:d3:1f:c6:4f:a6:c6:e5:0e:f2:30:23:
         91:42:f6:5f:bf:f0:12:5b:b0:f7:07:38:b5:b2:4c:b8:de:0f:
         e7:dd:cd:3c:e1:dc:20:02:69:fb:77:ad:77:ef:16:93:06:29:
         4b:25:72:d3:1c:38:23:76:9c:4c:f2:94:69:2d:e5:16:db:ef:
         ad:4d:8f:70:ad:4a:19:60:6f:05:5f:b6:2a:3b:38:9a:07:35:
         43:2d:30:21:7e:60:42:7f:c2:80:8b:fb:f0:1c:df:35:63:79:
         88:56:ec:53:75:8d:83:37:fd:95:77:48:1c:37:f6:cc:c4:26:
         dc:3f:d2:f0:a9:59:12:11:fe:d4:2b:8c:26:0d:01:47:c0:61:
         21:9a:bf:ed:d2:62:48:85:9f:77:73:ec:77:60:ea:44:ef:8a:
         8d:f6:be:cd:cb:ae:8a:d1:71:90:69:d9:9f:4d:21:51:29:fa:
         02:f5:72:66:c8:0d:47:1d:54:72:62:23:0a:02:fb:66:b5:ee:
         a2:82:46:99:38:a5:bd:20:c1:4a:cb:64:89:15:0a:7e:b0:13:
         15:b2:70:d5:05:30:ac:ff:64:3b:96:37:08:ad:26:a9:88:19:
         a6:2b:1b:32:97:9d:39:60:de:c9:11:4e:4f:3c:bc:13:37:7f:
         4b:d5:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:38:36 2024 by rpki-client on console-ams.rpki-client.org