Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa
File:                     f03a9443-1468-3e4e-9fac-80bb32418d00.roa (raw, json)
Hash identifier:          hCZ+xxK2noaCaQRHPy03FzINcS4bTOia3JT8O5SlhJ0=
Subject key identifier:   D5:69:14:18:6C:C5:31:04:71:06:67:B5:01:45:21:E2:C2:D6:9F:92
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F43285845CE08F9611D161B8363A2CF38
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     906
IP address blocks:        206.168.92.0/24 maxlen: 24
                          2602:fb82::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f9:61:1d:16:1b:83:63:a2:cf:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=1fc545b8-0bc0-438a-a507-a3d3b84b96cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:4b:88:fb:ae:62:3f:01:52:85:e5:43:4d:
                    f9:10:1e:89:55:13:f2:ed:a8:38:24:a0:4f:e5:d9:
                    7d:a9:79:29:a2:25:29:a6:21:21:7c:9e:e0:df:1e:
                    15:d7:b5:d9:b1:42:74:e8:aa:4a:9e:32:4a:6e:a4:
                    2a:59:b9:0f:a5:7e:c0:38:3e:15:47:dd:4e:a4:25:
                    78:11:78:0d:1d:af:fd:8f:d6:da:12:bb:9a:fb:c8:
                    fb:a8:0f:05:f4:7f:1f:da:64:92:36:5b:99:d7:bf:
                    5b:a0:12:95:48:56:f3:b5:2f:67:15:48:60:bf:24:
                    1c:2a:99:0f:bd:e4:a7:6e:e2:cf:16:7b:ea:cf:4d:
                    1f:93:6e:48:53:28:f4:cd:26:9b:0d:03:0f:a6:6a:
                    53:da:5b:44:05:59:1e:a8:37:c2:84:fb:4f:36:1f:
                    96:d0:2d:fd:96:c4:8f:be:59:5b:dd:fb:7a:f2:21:
                    08:53:72:5a:3a:f6:0f:41:af:9c:ed:4c:35:77:47:
                    e3:9c:7f:bd:8b:75:6a:19:16:95:43:8b:f0:70:dd:
                    8b:db:e0:b0:4e:3b:83:1a:34:bc:31:0a:5a:24:27:
                    7b:6c:77:3b:ff:6b:1d:79:e2:60:ff:be:e4:e0:2a:
                    0c:29:4f:b8:34:13:1a:80:18:3e:09:cc:5b:27:6b:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:69:14:18:6C:C5:31:04:71:06:67:B5:01:45:21:E2:C2:D6:9F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.92.0/24
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:97:72:22:0e:10:ee:a9:3c:59:8f:fd:42:40:50:df:2a:
         7e:5e:28:c3:ff:f2:00:04:58:42:6e:23:22:29:22:af:8c:e8:
         a1:51:26:09:70:5d:02:51:74:40:2d:96:6a:a1:a2:41:90:ff:
         95:1c:fa:ae:87:69:01:a1:7a:c2:f0:9f:69:1c:eb:38:89:73:
         fa:9c:82:de:c7:f3:88:d1:e5:52:02:e7:cc:ff:0c:ad:d5:46:
         55:03:e1:63:25:28:98:eb:9d:05:b4:0a:79:00:17:4e:5e:37:
         15:ab:74:b7:71:45:55:d8:3a:9b:84:0a:82:b2:be:d7:de:9f:
         d4:2c:44:61:d1:60:fb:23:fd:f8:9e:bc:e4:0f:98:93:69:45:
         d4:7b:95:e9:88:dd:ba:01:53:76:3d:cd:c4:72:ab:a4:9d:48:
         b7:2f:5c:43:c7:e8:7a:ca:1c:e4:1d:05:81:22:8d:8c:93:3c:
         37:c5:ab:75:b1:0d:0c:82:b7:89:ca:c0:cd:02:86:5d:5c:62:
         7d:5e:ec:e6:fa:e9:ab:71:20:67:ca:99:e6:55:47:be:b6:70:
         3a:07:10:ec:50:75:db:72:83:67:80:89:fd:87:37:87:b5:7c:
         12:10:83:2a:c3:2f:1f:fc:fc:b5:2e:9d:0c:08:54:8c:fa:54:
         a4:47:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:21:20 2024 by rpki-client on console-ams.rpki-client.org