Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082/49c9223e-0bae-3bdf-9e4e-3239ab9ce59e.roa
File:                     49c9223e-0bae-3bdf-9e4e-3239ab9ce59e.roa (raw, json)
Hash identifier:          9EBp5eSo4ZsoO7OR1uWIP3Rqq/dLA1lFATxDUOeBavk=
Subject key identifier:   5C:4D:4C:44:57:70:9D:BB:0E:39:C1:7E:0E:FF:7F:14:12:B4:B3:3E
Certificate issuer:       /CN=92ebae05-697e-4297-aa07-ccacfb1ea082
Certificate serial:       010D0C9F4328584546A2B5798B168684526BFF40
Authority key identifier: 5C:BF:E7:27:4B:B5:BF:A5:6F:99:78:4C:85:3E:5A:42:00:41:C3:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082/49c9223e-0bae-3bdf-9e4e-3239ab9ce59e.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     33038
IP address blocks:        70.35.224.0/20 maxlen: 24
                          69.55.16.0/20 maxlen: 24
                          2604:1f40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082/92ebae05-697e-4297-aa07-ccacfb1ea082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082/92ebae05-697e-4297-aa07-ccacfb1ea082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b5:79:8b:16:86:84:52:6b:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ebae05-697e-4297-aa07-ccacfb1ea082
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=7a603005-626b-46ee-8a12-9b484c07b4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:08:b0:a6:a8:0e:87:44:d1:9f:03:b0:52:
                    b5:a5:30:21:d8:61:0a:07:74:b0:bf:c8:ac:64:50:
                    9c:f0:4f:8e:7c:c4:8f:0f:0d:d5:2f:92:a3:e9:6a:
                    39:ce:e9:3e:9f:ae:01:e3:88:02:25:04:b4:6a:f4:
                    cf:27:f4:1e:9b:22:62:50:4e:73:df:74:bb:7d:ae:
                    6d:3e:c1:cd:a9:b2:7e:0e:a1:9b:01:0b:b2:c5:ce:
                    8e:f7:bf:c9:7a:51:d4:42:f2:5a:7e:23:f2:5e:fc:
                    d1:07:2d:ca:b9:7d:21:c8:99:1a:c7:3a:5f:49:15:
                    02:31:a4:0f:bb:2f:12:3f:d6:2d:cb:35:1c:f6:fd:
                    9e:3a:fa:53:ea:a5:72:28:0a:6d:25:36:f3:c7:49:
                    f2:08:1d:f3:f6:20:02:23:d2:69:bc:50:af:58:31:
                    6d:e0:c7:46:6c:84:87:99:e9:db:81:84:d9:cc:bf:
                    c9:01:ac:ef:bd:fb:a3:9b:10:5b:21:58:59:f9:40:
                    27:94:5a:79:95:b2:1d:7a:b1:20:29:27:5b:df:76:
                    d3:e6:68:32:ab:19:a1:ed:2b:90:c8:4f:bb:f4:94:
                    e0:98:6e:65:c5:87:97:2a:da:a4:65:eb:52:8d:a1:
                    36:37:69:ea:ea:e5:30:69:fe:78:8e:8e:ff:4a:5d:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:4C:44:57:70:9D:BB:0E:39:C1:7E:0E:FF:7F:14:12:B4:B3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082/49c9223e-0bae-3bdf-9e4e-3239ab9ce59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082/92ebae05-697e-4297-aa07-ccacfb1ea082.crl

            X509v3 Authority Key Identifier:
                keyid:5C:BF:E7:27:4B:B5:BF:A5:6F:99:78:4C:85:3E:5A:42:00:41:C3:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/92ebae05-697e-4297-aa07-ccacfb1ea082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.16.0/20
                  70.35.224.0/20
                IPv6:
                  2604:1f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:b9:07:81:47:0d:8f:30:67:e4:8d:c8:b5:f5:dd:f2:39:
         d5:45:49:ea:ce:52:bf:45:91:0a:d8:8f:8d:fb:77:9f:6b:13:
         12:01:c8:88:d7:e0:fc:8d:2c:c9:94:cf:0b:2e:2b:a9:74:31:
         dc:ec:34:66:51:3a:00:c5:36:5f:b9:18:2b:7f:c5:77:56:05:
         b7:d9:66:20:ec:e5:a2:c4:a2:f3:01:5d:cc:f5:3d:88:99:e8:
         34:77:bc:58:8f:62:f5:32:44:0c:5a:55:23:5e:70:5a:6c:58:
         97:4a:4e:1c:cf:52:54:9d:ea:04:ff:c2:ce:de:21:40:47:24:
         ca:bb:af:62:d9:83:4c:af:18:bd:e5:ce:d9:6d:98:4b:4b:c0:
         0c:3c:04:2a:e3:7b:8c:cf:f6:c8:3d:d3:f1:97:ae:71:bc:34:
         6a:98:3a:fc:19:49:a6:7e:9f:b6:80:69:8b:cb:da:92:bd:5a:
         1e:4b:1c:2a:0f:48:83:37:7f:74:80:63:2b:7d:73:98:2e:03:
         06:af:5e:df:64:de:5b:ad:85:a6:78:40:71:15:ba:db:f6:37:
         3b:d5:ca:0f:4d:e5:58:ca:63:09:4d:8d:af:6b:39:c8:70:06:
         d4:25:52:6a:77:ad:b1:01:96:ad:93:bf:45:c9:f2:20:54:84:
         35:55:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:45:41 2024 by rpki-client on console-fra.rpki-client.org