Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
File:                     fc8a04a9-488c-3924-8f7b-3da391e956ef.roa (raw, json)
Hash identifier:          1aMrCQ0XgZsN/prkDadSA76nRobjnEKigY355IcSOC8=
Subject key identifier:   43:CA:D6:A2:89:69:18:12:35:7B:02:B1:8F:96:C4:AD:0F:C3:A2:94
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F432858459368958B49DAB71DE62DC300
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     20454
IP address blocks:        69.160.44.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:95:8b:49:da:b7:1d:e6:2d:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=bae15e86-cb89-40d1-bc03-0b6a1a383461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:63:8a:27:1c:10:03:8f:02:97:4e:77:24:
                    6b:84:e4:88:44:bf:04:e7:c4:ae:67:87:ed:75:43:
                    bd:1c:e2:ad:54:ce:d4:a5:6d:cc:79:f1:b9:e8:0b:
                    7e:c6:87:94:bb:3d:2d:94:76:4c:6a:f6:46:19:9f:
                    b1:ab:d9:b9:b6:5c:eb:d9:d9:44:2d:85:a9:7c:b7:
                    07:89:b1:0b:3f:a1:56:6b:1d:17:6e:26:cc:16:8e:
                    d0:e2:26:f3:71:59:57:78:38:f9:e4:47:2f:ed:c0:
                    4c:c6:5e:db:58:cb:95:32:7b:71:6b:72:25:d6:a4:
                    3a:12:0e:5c:8c:95:6b:7d:5c:30:24:ea:3a:d2:80:
                    74:c0:7d:d7:63:de:34:49:48:b1:4e:19:af:df:6f:
                    14:96:15:20:cf:26:7d:ca:99:6f:c7:73:57:2b:53:
                    12:c6:8d:12:65:9b:04:3a:fd:7c:b1:09:63:31:76:
                    f3:82:59:27:71:f4:ce:7d:a7:d0:e3:1d:79:67:d8:
                    05:0c:23:cc:ba:c6:30:a6:04:f7:06:8a:a8:f6:8d:
                    0f:5c:bf:f7:7b:3d:60:a5:a3:ad:08:cf:bb:43:58:
                    96:91:46:5d:bc:5b:da:a2:d7:9a:56:98:e3:ff:17:
                    a7:37:f1:2a:7e:c8:9e:85:5f:5c:b8:71:d9:5b:a3:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CA:D6:A2:89:69:18:12:35:7B:02:B1:8F:96:C4:AD:0F:C3:A2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:28:d8:96:94:a7:71:87:c4:4e:ee:4e:eb:1e:b7:bd:70:
         3b:a5:3a:f1:cc:30:e8:2e:51:16:16:d6:23:41:38:63:30:9c:
         bc:a5:48:38:7b:c0:3b:06:67:f3:2f:77:13:ae:f7:73:84:b8:
         d9:17:2e:02:b4:5c:d2:44:30:14:da:28:06:19:a0:0b:5c:1d:
         7b:30:20:02:86:c9:f3:7e:ec:ee:27:5e:44:61:e2:70:be:85:
         7c:3f:00:77:94:c9:06:79:83:2e:80:12:17:aa:6f:f3:4c:8f:
         9c:69:23:9d:7f:bd:26:b8:d0:5a:14:65:5f:75:f7:45:0b:8a:
         2e:f2:29:81:c9:9f:66:7d:a6:5f:03:dd:37:93:fe:e7:e7:9f:
         15:82:a0:05:2a:25:f9:50:e3:dc:80:38:35:86:28:a1:c2:02:
         59:84:e1:67:b0:a9:7f:18:ee:9b:35:62:c3:ca:ef:88:fc:92:
         bd:24:00:34:49:25:02:a8:44:5e:34:a3:7a:48:da:c4:13:cb:
         18:23:bb:01:8d:7a:47:e2:07:c5:39:d1:95:be:db:4e:ea:18:
         0c:3e:90:89:2d:98:32:63:0e:fd:10:ae:12:d0:f6:cd:26:fb:
         f7:d4:eb:37:f5:62:ee:b4:12:3c:8e:62:85:11:50:4c:fa:5b:
         d8:b5:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:27:02 2024 by rpki-client on console-ams.rpki-client.org