Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa
File:                     06d4b122-7a26-3109-a4c6-1f7987347027.roa (raw, json)
Hash identifier:          anQzJupL2b+hRbbi3XJwu9lnb1IYj7yX5/WWytsjoN4=
Subject key identifier:   C2:6A:E2:AA:7D:FB:D1:34:12:CE:A7:DD:FC:DC:68:0E:54:C5:9E:9E
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F4328584589A326A5AF3C257968A05304
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     400718
IP address blocks:        168.102.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:26:a5:af:3c:25:79:68:a0:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=3bef10c8-f6fb-4b4d-8465-2749f88b4d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:f9:5b:1b:a9:5e:c2:ce:67:6f:22:2c:d9:
                    0b:6e:c4:7f:93:c0:38:6c:aa:f5:d8:27:28:d1:a3:
                    34:aa:80:84:36:3e:15:7a:1b:6c:d4:3b:bc:df:51:
                    af:66:0c:e9:66:10:da:fe:20:b4:f7:98:6c:68:e8:
                    b1:dc:36:e1:fb:7d:44:84:d0:d9:9e:5b:01:c2:0c:
                    85:7c:1d:e9:d3:97:0d:dd:02:ef:d9:bc:81:9e:66:
                    27:1e:91:5f:e0:d8:0e:f3:d3:a4:f8:0a:c4:93:ea:
                    92:80:d0:48:88:12:8e:43:12:8f:d7:9f:df:4d:ee:
                    ae:ea:b6:6b:c0:ad:81:da:b2:8f:0d:ff:36:54:f2:
                    a4:5f:f6:9b:33:7e:8f:50:70:ca:3e:dd:79:51:97:
                    9d:86:88:37:36:0a:e8:55:2d:ef:a3:1e:de:74:b1:
                    0b:01:b2:b0:5c:fd:67:e3:fd:d1:09:07:09:8c:ab:
                    48:1a:f7:20:13:47:44:3b:c0:52:65:5d:0e:b8:0c:
                    93:ec:6b:6a:5c:d8:55:a9:cf:9f:7d:2e:83:99:b1:
                    ac:58:08:91:10:b5:82:40:5e:44:f0:6f:8a:c2:6a:
                    36:0a:0d:2b:5a:68:62:54:7c:9f:c5:38:36:98:9c:
                    a1:0d:d3:70:74:08:94:63:66:fe:96:00:e0:e1:ee:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:E2:AA:7D:FB:D1:34:12:CE:A7:DD:FC:DC:68:0E:54:C5:9E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.102.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5b:c0:13:c2:a1:74:2d:a1:69:10:e8:02:f8:34:91:8c:3a:
         ef:ad:fc:7c:a5:5b:e2:9e:a0:54:5d:ee:df:b6:73:20:81:66:
         9d:43:22:09:0a:10:88:03:43:26:40:18:2e:0c:54:3b:64:ee:
         ad:69:c0:55:17:4c:89:71:fd:31:fc:09:96:04:ea:7b:89:3a:
         28:72:32:aa:ae:19:e1:d3:d8:59:99:86:99:d2:05:3e:f6:7c:
         e0:c6:69:9a:26:02:4c:c6:56:60:f2:35:0d:45:dd:59:09:d1:
         d3:ad:08:c0:b2:00:97:7e:10:9c:42:05:18:7a:a1:73:3f:65:
         e0:4b:03:3f:de:26:bd:f4:84:c3:45:10:32:c5:e6:18:84:cf:
         65:cd:63:9a:9a:76:1a:d7:9c:5f:5c:1f:35:6a:12:ca:09:2a:
         58:5f:b6:c3:ba:a5:b8:52:c4:80:d8:47:41:ef:eb:74:ff:50:
         e6:6a:9d:a0:78:2b:5b:96:83:c3:03:97:c4:65:15:3c:f3:e6:
         67:ce:58:19:94:9c:9e:27:43:5f:2e:be:b1:1a:8f:a8:de:fb:
         77:28:b2:27:9d:15:37:d9:6a:42:43:f4:54:17:eb:87:49:fb:
         36:4e:6f:df:c3:cf:af:c5:65:14:c8:54:dc:28:89:a6:3a:38:
         5c:cb:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:13 2024 by rpki-client on console-fra.rpki-client.org