Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
File:                     511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa (raw, json)
Hash identifier:          9AIECjtK+SW42ONGq09/m2OkvncFyvQZNzrPgI+TW4c=
Subject key identifier:   C3:93:C5:51:B4:E1:69:13:FF:C8:99:21:B3:FA:F9:9D:36:26:68:81
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F43285845D0D3A691B1D0F4BDAE7DC000
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     46475
IP address blocks:        192.169.80.0/20 maxlen: 24
                          208.115.192.0/18 maxlen: 24
                          69.162.64.0/18 maxlen: 24
                          216.144.240.0/20 maxlen: 24
                          74.63.192.0/18 maxlen: 24
                          216.245.192.0/19 maxlen: 24
                          63.143.32.0/19 maxlen: 24
                          64.31.0.0/18 maxlen: 24
                          162.253.40.0/22 maxlen: 24
                          2607:ff68::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a6:91:b1:d0:f4:bd:ae:7d:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=3439deed-1f9e-42f0-b153-53c225726a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:de:fa:32:8e:78:50:6c:46:3d:d1:63:e1:
                    3e:b1:72:10:45:52:f8:4a:46:cc:b7:cc:e3:be:90:
                    50:91:74:15:b4:36:26:70:c9:20:10:67:47:ca:a0:
                    ac:39:88:f3:44:9d:c8:07:37:20:94:9e:0f:de:ac:
                    f4:5c:d0:0c:98:68:b1:2f:a6:12:30:9c:8a:5a:81:
                    cf:4e:4d:4c:04:06:ae:d0:ca:86:95:56:3d:60:d7:
                    d7:5b:b1:ae:ca:d6:eb:d8:db:27:8c:12:b0:46:14:
                    46:16:79:54:b6:fd:cd:3e:f5:98:6f:2f:26:c2:a1:
                    b8:a6:7c:08:85:28:97:15:5b:2b:86:66:dc:05:3e:
                    d4:ad:68:f1:53:fd:fc:c8:5b:95:0a:d3:30:b8:d2:
                    93:e8:56:54:cb:9a:b1:6a:ef:13:1a:73:69:89:6e:
                    16:cb:51:f0:25:bc:98:0b:6b:48:15:87:bf:21:9f:
                    43:e9:2e:e3:24:3f:8e:96:e4:28:ed:96:20:b2:46:
                    99:ec:7a:b0:04:40:30:64:94:51:fe:d2:fc:52:6b:
                    b9:a9:46:ba:7d:bd:7e:3b:c7:b9:33:7a:42:77:37:
                    5a:09:fb:1b:66:c5:43:fc:1c:f8:34:16:bc:c9:86:
                    14:aa:18:1c:03:b8:15:c5:96:25:59:65:16:7b:6c:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:C5:51:B4:E1:69:13:FF:C8:99:21:B3:FA:F9:9D:36:26:68:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.32.0/19
                  64.31.0.0/18
                  69.162.64.0/18
                  74.63.192.0/18
                  162.253.40.0/22
                  192.169.80.0/20
                  208.115.192.0/18
                  216.144.240.0/20
                  216.245.192.0/19
                IPv6:
                  2607:ff68::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:3d:1d:4c:a7:44:aa:bc:bd:52:7e:23:1b:5c:b3:36:d5:
         6f:d9:91:9f:41:b9:af:46:d9:b8:cc:b2:dd:8b:ed:35:fa:33:
         be:a8:5e:1b:5e:71:31:b8:80:55:9c:98:63:66:75:c9:a0:e7:
         47:7c:e8:a8:46:17:03:5f:73:7d:cd:36:28:83:f1:6a:a1:d0:
         b2:81:2b:9f:d0:ad:0b:d5:44:e2:6e:95:d6:05:78:68:b1:2f:
         ff:75:d1:be:af:49:a2:7e:52:06:2d:7d:41:fe:9a:87:47:99:
         69:79:7e:98:fb:4a:28:bc:19:58:88:b1:a1:0f:9d:3d:4c:ca:
         49:ef:46:9d:04:b0:31:df:cc:20:72:41:81:a4:e4:73:14:4b:
         6f:01:cc:b8:84:bb:2f:83:0d:1b:09:df:8e:e8:30:36:00:ff:
         a0:ff:46:60:e2:0f:49:dc:f9:0a:c8:f5:96:58:7b:38:9a:dd:
         31:87:ce:4b:05:c2:19:52:f6:0f:3f:c1:4c:a4:83:fd:b9:80:
         8b:b3:77:18:ed:3d:7e:b8:dc:d8:16:ea:58:44:5c:89:76:5e:
         26:80:af:ce:b9:6c:6b:24:fa:3d:d0:2a:05:a6:ac:aa:c1:f0:
         73:97:9d:0f:1c:c4:4b:ad:43:54:ee:c7:44:0d:f1:e3:be:50:
         ca:f4:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:29 2024 by rpki-client on console-ams.rpki-client.org