Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa
File:                     ae766c58-45e2-3b4f-897c-d52aded9706a.roa (raw, json)
Hash identifier:          6MN13LxjbkmS7sAogwtUbvhTMSvmdT8c3IN6BT7Bv30=
Subject key identifier:   BB:CB:42:66:E7:1A:EF:D1:7A:66:97:B9:51:2F:1B:2B:E2:C8:99:89
Certificate issuer:       /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial:       010D0C9F432858454C38126D4B33A15281BA5C80
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     20101
IP address blocks:        216.18.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:12:6d:4b:33:a1:52:81:ba:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=7d7f4f38-622e-4809-bd7e-8ca91e64a850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:98:91:6c:9c:4d:7d:63:76:00:31:06:58:
                    65:0e:19:7f:a4:b8:55:00:ee:53:2c:33:a0:3d:f5:
                    d0:08:25:2d:04:21:e2:b5:79:bf:7e:1b:e6:97:10:
                    54:48:0e:7c:f9:5e:56:42:a8:1e:0f:2f:b4:c9:43:
                    5c:c4:f2:b7:0f:5b:bd:6b:90:0e:48:42:e5:01:91:
                    c6:45:9a:6b:b6:fb:38:6b:4a:cc:fb:9c:b2:9b:da:
                    2c:de:10:3e:e4:c4:e9:80:71:e2:57:68:98:d3:ec:
                    01:68:24:33:97:b9:81:9e:bc:0e:f0:0e:cd:10:4c:
                    ed:5a:bc:d3:8e:49:1d:77:67:4c:cd:92:f7:a2:9e:
                    ba:32:af:5c:56:31:8a:83:bc:34:a1:42:aa:4b:ae:
                    e8:20:80:ff:c3:98:a3:e9:33:89:5f:2b:bb:fd:c4:
                    ef:6a:69:74:2d:00:ab:b0:50:aa:6d:b1:10:a1:6c:
                    5a:8f:6b:cf:29:02:91:37:57:0b:45:43:52:ed:15:
                    18:92:c5:69:98:bb:cf:88:1e:b7:86:bb:52:68:69:
                    c0:06:f9:1f:90:80:7e:8b:d4:e4:49:33:dd:88:ca:
                    94:30:8b:75:30:bd:24:90:ff:b3:d7:bf:4a:8e:f9:
                    90:37:0f:e1:a9:91:38:d8:05:cd:14:51:38:f9:ac:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:42:66:E7:1A:EF:D1:7A:66:97:B9:51:2F:1B:2B:E2:C8:99:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl

            X509v3 Authority Key Identifier:
                keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:1a:48:86:96:aa:89:57:f1:3f:5f:8e:2f:20:ac:e9:82:
         90:07:1d:cf:c4:c8:e2:45:fc:8f:c7:8f:62:4b:fe:ef:43:c9:
         2e:42:90:4e:4c:b2:4b:01:3b:40:fc:0d:3a:8a:2c:67:e1:b3:
         c9:8d:a5:d0:f5:b5:dc:ae:57:91:93:fc:8a:30:02:e6:65:8b:
         07:00:ce:9a:75:2a:4d:42:f3:f0:be:2b:34:39:e2:41:a8:4b:
         b7:a1:69:a4:04:d0:b8:60:09:0b:b3:77:de:28:82:03:7d:d8:
         cd:fc:b6:2b:bd:03:db:9e:55:bd:ea:cb:6f:99:80:df:e8:bf:
         92:5e:b1:7d:76:17:74:22:44:bc:20:9a:e8:f2:f1:bb:70:9c:
         96:f6:0b:11:ae:6c:cb:2c:a3:e5:43:ee:16:2b:d9:84:8a:55:
         71:28:e8:94:b6:74:6c:87:82:d9:63:eb:20:b0:11:53:8f:1d:
         7d:b7:f2:82:a5:10:34:b4:1e:27:8c:f3:8e:df:c3:2b:1c:4a:
         e5:60:f3:89:57:cd:fb:9f:6e:e5:74:ee:ac:84:aa:27:5d:db:
         14:e6:fe:13:b3:d3:32:12:4c:7d:c8:93:6a:a5:0e:de:7c:5d:
         e0:a4:e7:8d:35:b6:1a:2f:aa:f0:4f:29:bc:88:1e:4c:44:ae:
         fe:33:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:21:12 2024 by rpki-client on console-ams.rpki-client.org