Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa
File:                     acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa (raw, json)
Hash identifier:          D44qCKyXkrTkDNv6umqK0XJhnFFcF0WQ1k1CBl0rjig=
Subject key identifier:   92:0E:A0:77:33:7C:2E:D4:0C:D9:D8:DA:A6:A7:FE:95:58:FA:17:B9
Certificate issuer:       /CN=55e1a161-664b-438c-b63c-711509db185e
Certificate serial:       010D0C9F432858455CF82DAE6622A4EF7988ED58
Authority key identifier: 5B:02:1D:1E:32:BC:A0:D1:5F:30:7F:F8:24:EA:0B:43:52:E9:28:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     30072
IP address blocks:        69.55.192.0/20 maxlen: 24
                          208.84.20.0/22 maxlen: 24
                          2606:dc40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/55e1a161-664b-438c-b63c-711509db185e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/55e1a161-664b-438c-b63c-711509db185e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2d:ae:66:22:a4:ef:79:88:ed:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e1a161-664b-438c-b63c-711509db185e
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=7c42b288-f6b5-410d-bdc1-6cc5e5e2f6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:a1:c7:20:e7:97:2e:76:9c:71:24:50:3a:
                    b0:19:77:9c:5a:af:ba:71:aa:57:4b:b1:1c:80:bb:
                    21:3d:e9:92:73:08:7f:10:e2:06:55:2f:a2:b3:62:
                    46:88:5d:7f:67:a2:e8:f6:06:a0:d9:22:85:1a:63:
                    74:f0:9b:1d:ba:55:10:02:7f:0f:67:aa:fb:31:21:
                    85:6d:c2:0b:08:ac:d9:1b:bb:63:df:c2:19:cb:73:
                    8d:36:a7:78:21:88:ae:53:66:3e:db:61:a4:92:f3:
                    63:e1:8c:f7:55:ca:28:42:3e:21:c7:7c:9a:07:c1:
                    3f:7a:60:54:c2:e8:3c:de:35:9b:02:03:93:5f:e4:
                    48:6d:8c:e1:19:b9:22:7c:e6:83:e5:b9:2a:45:c2:
                    7e:91:ad:42:09:de:17:10:88:65:c7:66:eb:54:72:
                    1d:3c:e9:26:c2:48:b9:be:e2:ea:68:91:65:13:14:
                    0b:19:23:6c:3e:fe:f5:6e:3b:6a:57:6d:10:fb:4a:
                    49:8a:e7:86:ce:0b:b4:7d:06:ab:6c:08:35:23:e6:
                    a1:ec:99:ae:6d:ee:a1:73:76:dc:13:05:f0:07:0a:
                    5a:bc:ee:90:b7:14:56:45:2d:d7:00:e4:29:22:ce:
                    55:df:d1:85:22:a1:6f:6c:25:1d:7d:11:c7:36:3d:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:A0:77:33:7C:2E:D4:0C:D9:D8:DA:A6:A7:FE:95:58:FA:17:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/acf90d4d-6ef9-32b3-bc57-d5befd27f5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e/55e1a161-664b-438c-b63c-711509db185e.crl

            X509v3 Authority Key Identifier:
                keyid:5B:02:1D:1E:32:BC:A0:D1:5F:30:7F:F8:24:EA:0B:43:52:E9:28:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55e1a161-664b-438c-b63c-711509db185e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.192.0/20
                  208.84.20.0/22
                IPv6:
                  2606:dc40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c1:7c:1a:f0:93:31:ca:6c:98:e5:ea:8e:84:6d:e6:a8:75:
         08:68:e9:fb:a5:5f:df:f5:72:ba:81:a4:20:ca:14:5a:1c:d2:
         36:65:6f:3d:c9:51:4d:00:d4:73:3f:92:57:46:9f:5a:65:02:
         9a:6d:df:62:e8:4a:4e:bd:db:d8:38:c5:fb:2a:4e:28:35:3b:
         2b:c1:04:00:4c:04:7a:c7:9b:ab:c5:60:99:03:00:d4:33:8f:
         d3:d3:d9:df:24:62:55:c3:75:b2:42:56:91:c5:77:7a:ee:85:
         ab:de:bd:cd:7d:6a:fc:d5:4f:84:a2:8d:2c:14:9d:0b:95:50:
         dd:49:b4:20:76:c6:ee:83:02:12:6c:95:07:ff:2c:f7:a5:20:
         c1:21:b0:f7:7f:08:9f:3c:20:66:8a:ca:cc:6b:62:97:4b:49:
         15:47:3d:58:e6:ea:69:a7:d2:28:9b:0a:9a:13:67:c1:f5:12:
         2f:67:6d:08:4c:9c:fd:bf:3c:14:d8:66:3c:9e:e4:11:b5:74:
         7a:ad:25:70:5e:68:58:dc:d8:d9:44:c1:87:bc:01:c9:e1:f3:
         5b:49:eb:f4:66:34:dc:7e:87:00:c9:1e:1c:3a:9e:82:0e:18:
         2e:fb:f9:44:4a:ff:93:4a:59:71:ee:d1:40:37:1f:7e:9d:ba:
         0d:09:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:39 2024 by rpki-client on console-fra.rpki-client.org