Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa
File:                     66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa (raw, json)
Hash identifier:          Xf2/Dmq/dYJ83AqC2jeMqnsEAGBx3hjLFC8vEvc5NHc=
Subject key identifier:   2B:E2:63:89:1F:8B:4F:73:E5:6C:20:24:3B:AA:6E:12:60:B1:06:FC
Certificate issuer:       /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial:       010D0C9F4328584534420B88A2A12C58CE2F4300
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa
Signing time:             Thu 14 Mar 2024 11:01:11 +0000
ROA not before:           Thu 14 Mar 2024 11:01:11 +0000
ROA not after:            Wed 12 Jun 2024 11:01:11 +0000
asID:                     212238
IP address blocks:        209.198.10.0/24 maxlen: 24
                          209.198.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:42:0b:88:a2:a1:2c:58:ce:2f:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
        Validity
            Not Before: Mar 14 11:01:11 2024 GMT
            Not After : Jun 12 11:01:11 2024 GMT
        Subject: CN=1e4c055d-284c-461b-becf-88cf4c3cd45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:1c:f9:8d:9f:15:f6:e7:58:40:be:1f:cf:
                    e0:6c:1d:2d:b7:c7:7a:e3:5b:63:57:69:57:d8:a7:
                    30:27:c7:f1:36:b8:d3:2e:be:fd:d3:b8:b6:6e:63:
                    16:91:f5:f2:99:3d:42:70:70:50:20:7a:41:b6:a0:
                    07:fe:17:b2:48:72:6d:13:68:4b:7f:1b:ff:cd:0c:
                    0e:57:78:86:1e:f4:21:e0:59:fb:f9:e7:01:de:27:
                    d2:c2:ad:f0:72:3d:34:88:6d:bb:62:27:b5:7c:7b:
                    8f:0f:ae:f3:46:eb:38:2e:c0:f0:7e:db:eb:d1:4c:
                    74:0d:0f:c5:55:c9:20:ed:49:63:62:9f:f0:bd:cd:
                    88:fd:83:47:61:ab:16:b3:2b:d3:6e:58:fc:10:00:
                    ff:6e:18:aa:28:d3:f1:02:73:4f:a4:14:03:ec:c4:
                    f2:04:ed:da:37:9e:1a:13:20:37:c3:6f:7b:2e:dd:
                    26:12:6b:25:3b:79:fd:b9:89:3b:7f:49:ce:90:5e:
                    6c:d6:fb:f5:fc:43:0d:53:9b:b1:6b:c0:02:f6:f0:
                    6e:7a:00:2d:48:b9:e7:af:ce:6d:5c:d0:c9:9f:fd:
                    92:9f:26:d4:cc:0f:14:c5:98:fc:1e:b0:5e:d6:94:
                    c4:0d:20:29:21:22:63:e2:98:0c:2f:9a:1b:e6:0b:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E2:63:89:1F:8B:4F:73:E5:6C:20:24:3B:AA:6E:12:60:B1:06:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/66b4a2d8-966a-3fbe-8312-e69e1b795cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl

            X509v3 Authority Key Identifier:
                keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:28:71:ee:f0:b7:5b:90:eb:c6:6a:aa:a5:db:60:4f:fa:45:
         f2:12:28:9a:14:4b:97:41:9e:30:1d:c6:62:61:7b:ca:3b:c5:
         79:01:d4:a1:d7:bd:59:b0:2b:f1:09:3e:99:06:9a:03:48:e8:
         10:41:70:34:78:a1:e7:a4:d3:76:90:9b:ef:bf:26:f1:b3:28:
         1c:4e:9d:ea:b6:5a:ad:47:e3:5e:40:3d:28:28:d9:c9:5b:70:
         8a:11:a8:79:8d:42:88:e3:10:65:60:16:a9:ab:f0:39:1b:78:
         7b:1c:d1:0b:0f:db:a2:9e:7a:25:7a:dc:78:f7:84:95:c5:b3:
         7c:5a:2a:c9:c9:e5:05:15:33:e2:7b:fb:30:b5:fb:38:9c:f7:
         f7:3e:01:26:c9:88:aa:e8:25:d3:0d:80:94:55:3d:2d:6c:16:
         de:f8:b3:65:52:45:97:aa:74:7f:74:a1:21:30:66:d4:31:53:
         69:ec:6a:b3:ce:0b:cc:75:78:1e:59:7e:73:60:94:15:b4:8e:
         53:c4:9b:68:3f:b7:85:c3:52:04:c9:2c:47:a9:3b:d6:b3:db:
         6a:2e:34:f2:0a:06:a8:2a:f6:08:2f:29:f1:e5:99:f5:da:93:
         54:b5:dd:51:a4:2c:0a:6d:45:0b:23:f7:5f:dd:fb:f7:45:89:
         31:7e:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 13:20:34 2024 by rpki-client on console-ams.rpki-client.org