Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
File:                     d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa (raw, json)
Hash identifier:          zZTbuvMYvmHDE/3SSO+EQFv+I9UGvSLsXL8e5baW9j0=
Subject key identifier:   62:D8:0A:7E:5D:F5:03:DD:56:48:E9:1D:E8:E2:D4:79:C3:E9:D3:A8
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F432858452D19DC0481C947759710E000
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
Signing time:             Mon 11 Mar 2024 21:29:33 +0000
ROA not before:           Mon 11 Mar 2024 21:29:33 +0000
ROA not after:            Sun 09 Jun 2024 21:29:33 +0000
asID:                     397735
IP address blocks:        198.175.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:19:dc:04:81:c9:47:75:97:10:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Mar 11 21:29:33 2024 GMT
            Not After : Jun  9 21:29:33 2024 GMT
        Subject: CN=db2a9606-5b4c-4c38-8409-84fee9736592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:ba:7a:19:66:0a:a1:63:f3:84:04:55:02:
                    d8:26:03:16:6d:de:33:ca:d3:13:74:9b:ff:5b:55:
                    f0:4c:4d:2c:ff:b2:11:d7:a7:4a:be:25:06:4d:af:
                    0a:d0:1e:62:82:9f:c4:de:89:1e:a8:8b:64:d2:7f:
                    2d:f9:d7:67:10:48:39:64:3a:c1:03:b3:45:97:e1:
                    74:fe:dd:1c:0a:4f:3d:e0:46:16:27:9f:8e:a1:53:
                    df:88:25:56:19:3b:0a:6d:e6:b9:64:62:f1:81:e0:
                    54:7a:e6:0c:a3:97:04:da:b8:bd:0d:9c:90:9a:5d:
                    4f:a0:60:9f:1b:46:7e:2d:44:18:d7:0c:21:ce:4f:
                    70:c1:ae:cc:cf:a1:23:f2:48:8b:f5:a7:99:37:1c:
                    1d:2f:56:d9:bf:25:ba:f9:83:1f:11:19:b4:ee:e1:
                    a8:56:93:09:f1:e7:34:5c:27:9d:73:09:36:68:95:
                    f5:e3:7b:00:3c:33:55:62:68:83:ee:ed:e7:b5:13:
                    fc:73:97:72:4f:07:ea:cb:60:4e:1a:df:21:82:9e:
                    25:6a:01:a1:b3:a2:84:bd:84:b9:5a:87:8b:e6:c2:
                    e8:aa:9a:3b:33:68:ca:fc:1f:42:5c:15:e3:e6:57:
                    3d:b9:04:85:e5:ba:43:ba:ba:22:ae:17:42:02:75:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:0A:7E:5D:F5:03:DD:56:48:E9:1D:E8:E2:D4:79:C3:E9:D3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:8f:98:3a:ce:91:3f:b4:87:05:2d:b5:c8:ab:67:18:a3:
         cc:3c:fb:f5:13:3e:9f:00:78:3c:66:c0:1c:3b:26:9f:e2:60:
         0b:24:78:9a:ac:91:5e:0e:a0:ef:2f:20:5c:06:d0:cb:65:3b:
         26:be:ef:f9:29:b4:1a:fc:4a:5d:71:5f:46:ac:66:2d:5b:4b:
         d0:90:2d:b8:bc:20:47:1a:16:dc:a9:aa:c3:16:1f:70:b5:8d:
         c8:78:da:b9:26:0f:ba:b2:23:0e:b6:e1:9b:34:a4:88:1f:96:
         09:c0:7e:a5:2e:4b:07:a6:72:23:44:ad:14:6d:89:5b:70:8b:
         58:70:d2:d6:0f:88:77:92:55:e4:68:43:b3:66:23:04:80:24:
         2a:04:21:c7:da:33:77:fb:96:b7:77:57:03:ed:dc:6c:9d:f8:
         e4:1d:21:7b:3b:0d:57:50:d4:12:a9:0f:70:f6:a9:f0:19:3a:
         5d:29:3c:ae:11:46:82:91:2e:c8:d4:98:41:32:98:b6:00:53:
         55:58:45:f2:03:d0:9a:04:4d:c5:76:7f:7a:3c:ae:bc:c3:93:
         1f:1d:47:e5:75:7f:db:84:f0:63:09:c0:9d:a4:35:15:25:9f:
         64:f7:a2:2d:e0:42:db:fd:4c:a4:24:35:5c:f0:10:82:96:09:
         df:da:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:20:43 2024 by rpki-client on console-ams.rpki-client.org