Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa
File:                     514de8d8-0941-3b05-a299-031e2f9ef5a3.roa (raw, json)
Hash identifier:          eqpsnsnDnBmCdHNp+89QbVzddA4omWF8p3YYqAr3GBo=
Subject key identifier:   CB:DD:1D:56:66:5E:40:E3:1D:5F:3F:47:1E:C1:87:D0:D4:1C:11:FC
Certificate issuer:       /CN=93c9071d-f6f2-44c2-9463-e96aef9a6188
Certificate serial:       010D0C9F43285845374803E95A52D239D5801400
Authority key identifier: 17:1B:B1:D3:1C:0B:33:1A:2B:B8:15:A0:C9:62:09:17:DE:27:B5:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     20281
IP address blocks:        207.7.96.0/19 maxlen: 24
                          66.185.160.0/20 maxlen: 24
                          66.171.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:48:03:e9:5a:52:d2:39:d5:80:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c9071d-f6f2-44c2-9463-e96aef9a6188
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=04e63938-5c49-4929-a0f4-d25272c11516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:f0:08:d1:87:22:e4:f9:31:b8:06:eb:04:
                    88:6f:fa:b8:a8:c7:17:f6:f2:a3:eb:ef:77:f6:44:
                    3d:3b:1d:de:80:d2:95:f8:cc:60:a0:74:fc:93:cc:
                    18:1c:eb:22:44:97:8c:85:62:9c:71:2d:f8:e6:62:
                    90:7c:2b:a8:47:31:b9:c8:fd:6d:39:bc:e3:5d:de:
                    3d:10:88:8f:33:11:28:aa:89:f0:0a:c6:65:ab:16:
                    d9:aa:e9:79:57:87:bd:c2:52:09:32:06:53:d0:20:
                    7e:47:0e:c3:da:ac:7f:30:ad:12:40:2b:e7:91:c0:
                    30:b9:ad:1b:3d:69:24:0b:26:4f:96:f3:67:bf:7b:
                    d2:e5:5f:8b:c8:0c:89:38:06:6c:25:8c:2e:e8:1c:
                    40:0f:16:b1:f9:d2:8d:3c:db:8a:dc:9f:0d:36:6b:
                    79:a0:8c:92:c9:31:99:07:a2:33:98:e4:df:2d:ba:
                    75:53:12:b2:92:5c:92:f8:33:0a:d3:57:cf:c3:5c:
                    2a:74:d7:3a:9d:f0:77:88:b5:4d:b2:0d:5c:72:23:
                    7c:f8:68:de:1c:ea:b4:a6:18:1b:c2:34:42:7b:20:
                    3b:61:06:7f:87:9b:1f:99:8d:c5:b3:2a:ca:f9:b0:
                    2b:e1:b7:92:71:4f:32:81:69:ec:c4:5d:af:9d:e4:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:1D:56:66:5E:40:E3:1D:5F:3F:47:1E:C1:87:D0:D4:1C:11:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/514de8d8-0941-3b05-a299-031e2f9ef5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188/93c9071d-f6f2-44c2-9463-e96aef9a6188.crl

            X509v3 Authority Key Identifier:
                keyid:17:1B:B1:D3:1C:0B:33:1A:2B:B8:15:A0:C9:62:09:17:DE:27:B5:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93c9071d-f6f2-44c2-9463-e96aef9a6188.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.144.0/20
                  66.185.160.0/20
                  207.7.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:53:d2:cf:1f:0f:bc:64:90:1a:8f:58:d0:94:56:58:2e:bd:
         ca:79:4f:b0:e9:46:0d:c4:e1:10:3e:33:c8:59:99:86:35:8f:
         6a:a3:5d:14:06:04:db:1d:67:10:ee:54:66:5f:36:39:f5:eb:
         e9:0c:da:62:06:bb:5a:36:7c:57:7f:64:d7:46:7d:b6:e0:76:
         35:f9:b6:ba:a3:27:0a:01:aa:dc:ba:72:a9:82:68:1e:1f:41:
         11:3e:38:ba:06:70:a6:2f:3a:aa:64:53:4f:70:84:fd:6d:61:
         56:9e:b4:bf:dc:04:35:da:50:b7:ef:c0:99:bc:17:a2:20:3d:
         2f:4c:01:b2:64:ec:e7:f0:ec:07:6a:70:cf:a5:96:2a:87:47:
         ae:32:02:e4:36:ba:64:77:7b:0e:c6:71:ab:d2:4e:3f:72:7e:
         75:f1:b3:32:57:d4:4a:57:dd:a9:62:1d:66:ba:2d:5e:db:e0:
         32:a5:28:1c:80:44:1b:28:4f:c9:ef:18:4b:59:ed:cc:a0:96:
         d7:44:8f:4e:15:2d:8c:90:7d:12:23:ac:db:42:5d:db:62:71:
         e1:5e:81:a0:d2:5e:6c:42:79:aa:b0:f9:3e:fc:70:61:76:9e:
         cb:e3:18:b8:44:b8:a0:fe:46:26:17:91:59:b3:ba:00:5b:7d:
         4f:85:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:25 2024 by rpki-client on console-ams.rpki-client.org