Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c4aeec0a-b1dc-3aea-9861-1e11f93695cf.roa
File:                     c4aeec0a-b1dc-3aea-9861-1e11f93695cf.roa (raw, json)
Hash identifier:          RLWQ61XfWVpDbhMmu+DNU8gv7oT0nQkp49N8iv/ulWw=
Subject key identifier:   72:70:32:A4:9F:11:3C:EC:BC:26:4B:50:72:EC:E4:95:02:0C:40:71
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D86C342EE943628925E400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c4aeec0a-b1dc-3aea-9861-1e11f93695cf.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     47074
IP address blocks:        209.66.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6c:34:2e:e9:43:62:89:25:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=736aeadc-fcde-4ec6-b681-5970c72b03db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:9e:5a:0f:01:f3:52:c1:28:38:4b:90:fe:
                    5f:53:4f:97:b7:95:b9:8b:60:97:1b:26:48:8e:45:
                    b8:ee:0a:73:11:11:85:ea:44:4c:c4:90:49:32:a1:
                    41:b1:33:ff:0c:d2:b6:db:b3:ea:55:86:1a:71:dc:
                    80:cb:69:c3:3f:f9:8e:46:75:aa:6d:b1:84:f8:24:
                    d1:45:92:49:7d:20:4c:ce:a9:63:d1:69:43:8d:ed:
                    e8:7b:49:d8:6e:00:36:03:4f:3c:40:01:4c:79:87:
                    f7:0f:f3:ed:d3:ee:94:26:75:0d:46:30:ca:5c:1a:
                    17:73:7d:cc:1b:c7:1c:5c:bc:4d:1c:3c:c7:51:ce:
                    51:36:1d:19:ed:89:77:8b:4f:27:8e:a1:9d:63:39:
                    41:f9:82:58:b4:79:9a:1f:2c:31:5f:13:c1:db:8f:
                    a5:4e:63:66:7b:0f:f7:45:bb:3d:39:ca:19:d6:dc:
                    37:75:4a:1e:d6:ea:1d:a2:06:79:52:52:33:b5:98:
                    00:4f:18:31:cb:72:4d:88:f2:34:f5:ab:8d:89:73:
                    85:22:2d:0e:5d:ec:5f:9c:b6:db:82:5b:1d:e8:ca:
                    77:9c:32:6e:a0:3c:5a:2e:d7:62:29:d3:dc:5a:32:
                    60:04:f7:3b:e8:7a:fd:04:ed:b1:6a:4c:c2:a3:19:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:70:32:A4:9F:11:3C:EC:BC:26:4B:50:72:EC:E4:95:02:0C:40:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c4aeec0a-b1dc-3aea-9861-1e11f93695cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:d7:eb:f3:68:9d:e2:d5:29:b6:16:05:4c:35:98:e2:05:
         ff:bd:b1:11:62:d4:26:91:a9:8c:c6:7d:ca:4f:74:b4:d5:bb:
         e9:75:f1:ba:c7:d5:5f:96:dc:81:ed:0f:17:8d:ee:d9:bb:41:
         76:b4:9f:3d:5a:0c:d9:8b:18:53:26:f7:42:93:24:f8:25:24:
         b1:4d:9a:42:07:a0:18:22:78:41:bc:c4:63:4c:85:28:b9:60:
         0e:a0:ac:b6:ed:e8:67:b4:d1:c1:86:82:3c:62:49:71:c6:b0:
         27:fa:93:cf:b1:d1:66:67:a1:32:e3:f3:60:fd:0d:e9:e1:57:
         3c:ce:70:93:45:08:c5:ea:28:04:64:f0:24:5b:25:80:6c:3f:
         54:ec:69:be:a5:66:76:37:38:8a:0f:d8:d7:9e:51:20:ac:01:
         ba:f9:80:86:e4:59:b3:2a:3d:e8:3e:80:e8:09:40:1d:71:23:
         8b:a0:28:2a:09:04:87:b1:97:85:30:1a:d2:29:e1:c3:2b:b7:
         99:93:c9:04:d0:51:c3:02:d6:42:4b:6a:9f:1d:4c:64:6c:cc:
         55:34:2d:a3:c2:9e:be:1f:85:a2:9f:1d:b3:64:21:43:e8:ba:
         04:9b:9e:bc:03:94:17:90:01:5d:f1:5f:b4:d7:6f:a7:06:6a:
         04:08:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:14 2024 by rpki-client on console-fra.rpki-client.org