Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
File:                     1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa (raw, json)
Hash identifier:          eNzG3L4381UyiSHNRzro/YnkPqELkhiQN4URDT0gu0Q=
Subject key identifier:   A2:89:10:20:3D:EC:04:9A:72:46:2A:69:DD:58:D6:D4:6C:54:E8:FB
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F43285845AC88CE57F4B2BB07AA2658C0
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     174
IP address blocks:        69.54.252.0/22 maxlen: 22
                          69.54.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:ce:57:f4:b2:bb:07:aa:26:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=2851a2e3-d0e0-4be5-b317-bb2815390d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:e6:94:88:3e:bc:06:fb:0a:4a:f8:50:c9:
                    1e:27:ab:b1:bd:80:6c:f0:31:a7:22:c7:ff:26:0c:
                    a9:7f:ed:87:30:70:ac:29:f3:75:b8:30:87:d6:b8:
                    ff:8a:55:2c:b6:34:5f:49:bb:ca:3a:6b:73:51:ce:
                    cd:38:58:48:64:c4:f7:18:56:b0:22:b4:32:22:5c:
                    b2:b6:18:21:b6:9e:09:ba:ab:64:e5:c4:16:7c:04:
                    6a:9a:81:10:4d:c6:69:64:37:d9:0c:1f:23:e1:cc:
                    88:0d:b9:d4:67:6c:dd:ba:44:e8:72:1f:aa:55:06:
                    55:7f:ec:ff:5a:1b:11:11:cd:46:fe:1f:49:e6:44:
                    c8:f5:e7:26:3d:86:b5:e4:15:8b:69:be:39:50:6a:
                    d9:85:a1:a2:5c:d1:4a:2f:b8:aa:26:47:52:da:20:
                    b6:ce:1f:6f:13:c8:09:16:c9:24:62:c1:4a:4a:1e:
                    f9:08:59:ad:9e:9f:aa:80:f1:3c:a6:a4:d0:09:06:
                    40:71:7f:29:89:24:f1:1d:b2:b3:2c:a4:c4:28:04:
                    7b:8e:9a:5c:dd:f0:6f:2c:80:25:6b:53:0d:60:98:
                    ae:6e:88:14:c7:e3:40:29:32:77:6a:bc:d7:1f:e5:
                    95:39:0b:4a:05:cc:35:71:aa:d5:e4:ca:bd:bb:bc:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:10:20:3D:EC:04:9A:72:46:2A:69:DD:58:D6:D4:6C:54:E8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/1d6df0c5-6166-37d2-a59e-7e31f46ffa34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.244.0/22
                  69.54.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:fd:ed:9a:da:f7:bc:73:23:e3:4d:0b:c8:c9:82:c3:90:
         e1:5a:db:32:8f:2c:03:02:05:b5:36:7f:03:41:be:e4:fc:7e:
         59:a6:cc:11:3f:56:5e:cb:9b:94:94:22:da:4c:7e:aa:b8:6d:
         bc:20:26:49:e0:54:fe:db:14:6d:5e:cf:4b:40:fc:7e:34:eb:
         4c:fd:ae:16:11:29:7b:62:03:4e:2a:03:3d:0e:ca:96:67:f6:
         d1:b3:c5:28:8b:ba:a6:22:02:e6:23:eb:89:32:e9:83:3d:fa:
         a1:0b:1c:82:18:5d:b2:48:c3:f0:d4:77:f8:04:ae:de:e5:78:
         d7:88:05:f3:84:3d:96:78:44:bb:ad:77:1f:91:3a:29:54:c7:
         53:20:11:ca:ef:e3:1a:80:39:40:d2:e3:84:95:d0:c2:0b:00:
         e6:0c:69:e1:5f:b8:32:9d:65:eb:17:55:db:b5:7f:57:ff:aa:
         7c:3a:ed:1d:3b:e9:0a:d7:e8:36:f4:2e:26:40:73:e5:0f:3f:
         ff:0a:77:96:a5:df:bc:b4:b0:cb:28:92:ba:c2:47:dd:c3:1e:
         67:36:fb:95:0a:be:65:15:d0:c9:81:e0:79:67:d3:47:dc:49:
         2d:11:67:ce:41:b5:3e:44:d5:51:1c:55:39:6a:9d:33:33:66:
         86:7e:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:56:29 2024 by rpki-client on console-ams.rpki-client.org