Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa
File:                     3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa (raw, json)
Hash identifier:          ZwU2rrtdCNktwOV+1IvnWJXY2XKZAUj/k0CCTY8fQzQ=
Subject key identifier:   9D:C2:02:03:5E:E2:08:01:FB:73:6F:37:E1:4A:45:D0:BC:66:7C:7F
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285845068AC6FF55BACBAC1CDAD4C0
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     3630
IP address blocks:        199.109.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c6:ff:55:ba:cb:ac:1c:da:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=4f78ceb8-bb74-4c3e-8c0a-9f37817bbbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:79:19:22:5f:00:ba:58:69:e2:6b:2c:64:
                    c1:77:1e:17:ce:46:12:ab:01:bb:ff:ac:57:78:f0:
                    a7:74:29:3e:50:87:36:0e:b2:87:d5:01:2d:82:a5:
                    07:cc:1c:44:58:6c:a2:7c:5e:fb:ad:99:06:ee:73:
                    80:41:f0:0a:c8:9d:60:4e:9a:e0:fb:37:74:99:73:
                    ac:00:49:a2:ac:f3:dc:b6:39:17:d3:51:31:17:e3:
                    ed:19:c9:09:46:25:02:f5:90:c8:33:37:b9:a1:38:
                    f8:d4:86:e6:32:85:32:65:32:d7:5c:24:61:84:f6:
                    bb:be:25:14:49:64:ac:1a:dc:77:95:cc:15:6b:d9:
                    db:e4:64:d4:63:a1:e3:19:44:0b:b3:97:db:d7:97:
                    c8:08:36:99:52:d3:c3:20:21:7d:bc:c8:5a:9b:37:
                    81:2c:a3:8d:ec:8f:14:38:36:a0:b4:3f:13:25:07:
                    ff:05:56:87:91:23:36:9e:73:2c:df:8f:21:82:e5:
                    22:58:47:0a:c5:28:5e:da:13:39:a6:ef:3f:1a:85:
                    a4:c6:3d:83:97:31:fa:f2:2c:36:99:ab:66:c9:47:
                    e5:ce:f0:64:21:e2:bf:10:f3:a9:9c:04:bf:58:e4:
                    6c:79:4b:a5:dc:e2:1c:3b:59:c2:5b:51:ec:1e:6a:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C2:02:03:5E:E2:08:01:FB:73:6F:37:E1:4A:45:D0:BC:66:7C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:b1:78:21:36:ae:4b:81:05:b7:77:81:81:9a:d3:a0:08:
         c6:06:9f:5b:ad:7b:36:8b:20:c5:63:39:f6:a4:e5:87:2b:3b:
         d0:c7:82:7a:ef:43:ec:48:d8:a1:d8:e7:6f:7a:07:02:e6:3a:
         96:1f:6a:62:9e:c1:fb:55:65:4d:d3:d1:a0:4f:fd:33:f9:e8:
         82:48:38:a4:ff:7f:93:78:ca:b3:a4:8d:35:f1:27:9d:5d:ee:
         f1:90:0f:0e:7f:f4:03:9f:d2:d2:6b:d5:5c:a0:28:8f:f7:53:
         09:d7:97:e7:a7:07:eb:ab:00:60:72:ae:98:73:de:2b:93:85:
         80:62:1d:9b:6b:aa:51:17:6d:1e:52:49:e9:8a:e8:96:ff:42:
         73:e1:1d:63:92:89:e0:30:0d:25:c3:88:77:88:69:44:b3:c8:
         02:21:d8:d8:97:28:6f:e3:85:de:d4:60:6a:f8:97:52:45:78:
         c7:db:ef:62:c3:f6:e4:a8:ba:f7:f3:52:e1:e9:ec:36:e7:42:
         b5:fa:eb:af:1f:88:a0:56:ca:ff:41:2f:90:3b:be:ad:8f:1d:
         af:2a:d6:0e:3f:0a:56:95:3f:b6:46:3a:f2:1a:7d:97:a7:ab:
         0c:bc:ee:ff:57:2a:d6:cf:7b:9f:17:5f:40:08:34:eb:f8:00:
         b3:36:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:53 2024 by rpki-client on console-ams.rpki-client.org