Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa
File:                     c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa (raw, json)
Hash identifier:          ge2dtTRYF/7SOZmAn060kjxRw2G0lGOHyuMcFiSvtMY=
Subject key identifier:   65:FE:95:02:6B:A7:D2:41:5B:AB:67:FC:C7:CC:AB:A6:1B:51:C8:C0
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285845C01393779EE065D5B297B340
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     16739
IP address blocks:        67.217.4.0/22 maxlen: 22
                          208.72.144.0/21 maxlen: 21
                          192.208.29.0/24 maxlen: 24
                          162.254.156.0/22 maxlen: 22
                          162.253.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:93:77:9e:e0:65:d5:b2:97:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=acc70535-0828-42ca-89b7-7b24ec6633df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:ee:17:06:c5:f6:38:f3:0b:31:7a:d1:a7:
                    61:43:cf:35:55:16:ee:7f:86:5b:e8:9d:43:03:8c:
                    6a:75:ae:24:61:50:af:99:14:d0:6a:1c:70:a4:b0:
                    39:e1:ce:19:79:f7:f0:2c:33:d5:e2:ca:28:df:54:
                    ba:d7:29:3b:b6:28:69:08:d7:66:cd:ea:8d:72:c6:
                    38:0b:a4:b1:86:9b:b7:fa:3c:f4:9a:2d:49:c6:22:
                    b6:2c:a9:42:41:d5:cd:66:d3:cb:16:f3:67:d5:22:
                    9d:94:61:0f:6c:14:61:5b:b8:a1:b4:4a:29:5d:5b:
                    dd:f7:5a:74:39:b8:fe:91:94:d3:a7:eb:74:99:0b:
                    c2:b1:48:82:0e:7a:13:6d:18:a6:27:aa:e8:b5:cd:
                    73:e3:30:5b:b8:76:1a:f4:bc:0f:38:ea:68:53:93:
                    19:cf:33:cc:fa:44:70:dd:24:b1:9f:36:81:b7:d9:
                    80:a4:4e:af:a9:1a:59:e7:65:2d:10:38:bb:ae:77:
                    f2:79:45:1d:cf:95:fd:1d:62:cf:87:bf:f7:12:6b:
                    19:20:58:6c:59:81:fd:33:41:f2:4f:b3:fb:8e:ab:
                    9e:0e:6a:54:e6:b2:b0:1e:7c:7a:e8:34:93:af:e1:
                    35:0a:37:39:21:f2:58:92:10:ef:ec:2f:36:f8:50:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FE:95:02:6B:A7:D2:41:5B:AB:67:FC:C7:CC:AB:A6:1B:51:C8:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c461439b-63bd-3b3a-9dbd-c67a19cc4efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.4.0/22
                  162.253.108.0/22
                  162.254.156.0/22
                  192.208.29.0/24
                  208.72.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2b:5c:bc:ca:4a:7f:b9:84:dd:de:f1:20:fe:19:c3:98:33:
         51:79:b2:fc:80:5c:a3:33:c8:00:af:bc:d3:9c:fb:9c:59:57:
         7b:48:c2:db:cd:76:e5:d5:52:b0:f7:38:b1:bc:10:14:46:4c:
         0c:40:ee:a7:b1:16:ce:43:59:0d:95:27:39:57:49:5e:3a:4b:
         bd:07:95:e7:db:8f:0c:79:68:da:cd:b7:19:6c:1d:dd:e6:76:
         06:bb:1b:d7:61:7e:8e:90:a8:6f:c5:7d:84:ff:e0:5f:12:0e:
         28:c2:b9:bd:57:b7:a5:f3:19:bb:34:a7:b0:a7:d6:92:59:8b:
         75:3e:d4:09:c3:dc:c5:fb:e4:01:4a:0d:f1:18:3e:9a:b0:d9:
         4f:2e:33:51:ba:69:61:02:75:3c:f3:20:ec:71:23:75:a7:17:
         e5:d9:88:c4:05:20:bb:22:b6:71:4e:c9:e9:3a:45:fb:a0:61:
         53:97:97:e0:33:a0:73:35:97:a2:6b:dc:df:9c:95:bd:64:48:
         33:03:d4:c4:c8:cf:ba:74:10:20:f0:6e:07:86:3b:30:67:ba:
         d8:00:1c:c1:ad:74:2f:2b:7b:4f:b3:fa:1b:a5:99:20:49:7f:
         55:76:34:f6:ff:37:e6:5a:07:08:e1:cc:58:8b:18:bb:4a:c9:
         34:ae:1e:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 17 15:32:08 2024 by rpki-client on console-ams.rpki-client.org