Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa
File:                     bc353fe3-9c6f-392f-bf75-22c347775fd9.roa (raw, json)
Hash identifier:          /8cCg8Yhqb6w8BbDs0yZ36vVJDEGG2nzce6QGJzXGbM=
Subject key identifier:   3F:94:07:44:A1:E6:CB:B3:1C:CF:2E:A9:16:55:97:B1:B8:C2:5A:DC
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F43285845D933B520CBE30D6961DF7880
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     21713
IP address blocks:        66.172.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:b5:20:cb:e3:0d:69:61:df:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=62703f34-cd75-4d0b-8b2e-88b22cb543aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:a1:f4:b0:82:c2:7a:23:69:46:a8:fa:81:
                    72:db:fd:31:84:e1:8a:3c:ae:66:96:35:f8:04:05:
                    2d:66:3b:22:5c:e6:ef:f4:6c:96:3f:51:b4:ab:19:
                    29:4c:14:25:76:cb:fe:5b:3d:2d:d7:ee:b4:71:0c:
                    d0:02:98:2e:da:f9:87:ce:9b:e1:30:e2:14:ce:4e:
                    7c:06:dd:8e:66:ef:c3:fb:d0:90:55:f6:64:4a:de:
                    40:d6:a2:4f:97:31:75:7d:4f:12:c7:fb:54:0a:e5:
                    45:1b:b2:59:74:92:45:47:1f:75:17:30:cd:52:de:
                    b7:6c:8e:1a:0a:99:c2:f3:ed:ae:0c:61:f2:9a:75:
                    c0:c6:2e:a7:54:63:07:12:d1:c4:6f:57:15:60:2b:
                    fa:36:a2:fa:d0:d1:fc:0c:6d:46:65:85:a9:9f:23:
                    68:54:9d:ed:0e:7d:ed:b3:c3:41:c1:24:90:02:5f:
                    e7:d1:36:9a:25:a4:ae:ab:90:e1:43:fc:3f:ce:74:
                    9b:83:47:5a:d9:4b:f5:41:ae:c2:5c:75:f2:83:4b:
                    9a:a7:95:4f:59:53:96:d6:d3:1c:64:0f:37:9f:b9:
                    00:d0:b2:e4:72:bd:ab:e9:92:4c:eb:fe:b9:b7:93:
                    ca:e7:3d:5e:f4:62:44:02:e2:18:c7:af:37:a6:7f:
                    bb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:07:44:A1:E6:CB:B3:1C:CF:2E:A9:16:55:97:B1:B8:C2:5A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:bc:f6:69:30:69:69:22:2b:ea:f9:6d:61:fe:cf:f1:00:
         a5:3b:92:7b:f1:1d:79:c1:e4:97:0e:58:f0:39:ac:5d:d2:7c:
         df:15:80:67:a6:24:fd:0d:f4:02:69:47:a2:5e:5f:8b:80:3c:
         64:57:08:20:fd:60:dc:e7:08:a2:3c:0a:1c:ec:34:83:39:a5:
         70:c5:27:94:c1:79:66:90:dd:d9:e5:fc:4a:c1:37:d8:67:4c:
         23:d2:b0:9e:72:17:9e:b4:3a:e6:16:48:c6:88:02:f1:49:5c:
         c5:57:89:e9:87:d6:55:c1:3b:37:e3:6f:aa:8b:34:31:cd:27:
         3d:74:1f:77:d8:69:bc:bc:80:38:9b:4f:25:da:4a:30:bb:bd:
         eb:7e:09:fa:51:a1:c4:00:a2:f6:24:b2:75:0b:f4:f7:ae:9b:
         fd:db:e5:10:16:15:ac:67:6e:43:d3:3c:c8:48:40:90:12:e8:
         91:b4:98:0e:d8:21:81:09:d2:a7:8d:25:24:53:e4:72:52:97:
         d8:08:c2:6a:61:ab:90:e2:c1:ab:21:5b:67:c9:84:54:0e:c9:
         68:db:f6:a6:6f:3d:d0:1a:54:49:a1:75:b0:7e:73:66:c7:76:
         3c:4b:0f:22:01:57:8a:13:7a:17:56:d3:b2:3f:56:4d:c0:92:
         15:8b:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:03 2024 by rpki-client on console-ams.rpki-client.org