Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa
File:                     abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa (raw, json)
Hash identifier:          sqRoWAhAE1GRX8uA1DXQOEysYF2qmSDWvRanXZ/nYUQ=
Subject key identifier:   03:5C:F1:97:73:AD:B4:42:83:4E:65:EC:D5:F9:49:42:4C:96:C0:8A
Certificate issuer:       /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial:       010D0C9F43285845E193CDC443F1641DCA57B640
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     53597
IP address blocks:        204.11.135.0/24 maxlen: 24
                          204.15.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cd:c4:43:f1:64:1d:ca:57:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=ac3e1ee6-a721-48f0-a907-256ebea0068e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:04:b2:a1:07:a4:0c:5e:f2:9f:1b:0d:d5:
                    d8:ee:fc:49:ff:78:f1:70:ba:9f:72:01:60:a1:6e:
                    af:29:0d:ca:9a:67:56:1b:b5:0b:ac:79:df:1d:1b:
                    66:6f:76:76:32:f7:9b:ee:a0:10:a9:50:90:2d:3b:
                    2a:cf:4f:7f:f4:e5:a9:99:35:e0:a7:1c:77:f3:17:
                    ca:10:22:d5:7a:5d:7c:c9:c2:17:f0:0e:f5:9f:f7:
                    13:18:7c:23:0e:06:15:42:34:6c:84:30:0e:bc:cd:
                    1a:99:b8:d1:e2:c1:f8:d0:86:81:82:ab:00:41:58:
                    2f:cc:bd:86:4f:c8:58:15:7e:45:03:bb:25:39:dc:
                    11:a0:42:fd:91:47:c4:6a:e8:16:db:52:3e:62:4c:
                    76:cf:e1:8e:61:bc:44:72:6b:40:25:0a:10:1d:47:
                    b7:76:5c:49:f4:d4:2c:e3:37:df:d8:21:b2:d6:9a:
                    2e:c3:60:d4:88:3d:0b:d5:07:d6:53:71:c5:f3:82:
                    28:cf:f7:61:bd:96:59:f0:d9:7f:b7:25:2b:11:54:
                    cf:c5:65:6c:4a:63:31:17:94:ea:73:d2:a3:33:cb:
                    f1:71:53:47:c0:90:f6:c8:f5:e7:e0:21:82:26:b6:
                    13:9a:53:98:11:ee:02:01:7e:e0:0a:39:5a:70:8f:
                    9a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5C:F1:97:73:AD:B4:42:83:4E:65:EC:D5:F9:49:42:4C:96:C0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl

            X509v3 Authority Key Identifier:
                keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.135.0/24
                  204.15.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:8c:08:64:18:eb:a4:86:02:c9:77:aa:8e:e1:a3:95:75:
         1e:e8:b5:4f:f8:06:b6:65:12:da:2b:25:78:58:44:26:b1:06:
         71:56:23:76:91:39:91:22:69:07:f9:a0:63:52:88:6d:0e:1e:
         83:71:b9:36:bd:fa:f2:67:8d:5b:bf:ba:75:0f:d8:2f:7e:01:
         8d:2b:2e:dc:6f:56:b1:ee:9a:ee:4a:38:eb:df:eb:4b:3c:24:
         e9:3a:23:de:d6:1c:d8:5d:51:fc:db:9a:c8:a3:75:6e:41:b1:
         7c:fa:eb:aa:82:cb:e5:14:e3:9b:34:83:67:0d:9e:d9:14:00:
         b4:c9:3f:ef:f1:88:c5:86:24:15:db:74:01:c7:62:dc:14:6b:
         a4:36:e8:2b:88:da:73:f7:74:05:91:d6:4c:55:77:a5:f0:9d:
         d1:25:f1:7d:f4:dc:34:5f:d2:43:f2:85:ec:35:f8:3a:3e:eb:
         a9:b3:09:31:ba:5f:85:78:68:ae:2e:b3:b9:6b:dd:5c:fc:42:
         a9:64:f8:46:24:7d:fe:96:2e:e4:00:aa:59:0a:0e:c6:4e:c7:
         38:0e:45:61:ff:2f:96:79:36:d7:9c:0f:76:59:8c:b2:e4:df:
         8a:a2:fc:04:e8:9e:35:0b:3d:cb:85:fe:a1:8d:00:e7:00:9a:
         69:7b:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:19 2024 by rpki-client on console-ams.rpki-client.org