Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1f68b9c7-1570-3bbd-80ac-653f99961a7d.roa
File:                     1f68b9c7-1570-3bbd-80ac-653f99961a7d.roa (raw, json)
Hash identifier:          Yn3q3u7AbRj5JbjnmJhMfQSKUnuXx6LZOKGWXwQSAmo=
Subject key identifier:   CE:50:B3:C5:E1:95:87:C0:CD:36:12:F0:F2:8C:A2:41:77:84:B7:20
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285845A2C342348705411537A70A00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1f68b9c7-1570-3bbd-80ac-653f99961a7d.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        206.191.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:42:34:87:05:41:15:37:a7:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=f5605e6a-a6c2-4733-9459-41ac8c88ea61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:ba:d7:0f:64:ce:ae:df:7e:7c:ad:37:31:
                    44:1f:e7:8e:ad:c9:bd:9f:a6:99:01:aa:5e:22:5b:
                    9a:47:b5:05:9b:dd:71:16:47:9d:f1:3d:c5:46:7f:
                    94:6b:b1:7f:bd:b6:26:ac:57:df:5d:86:33:96:63:
                    15:9d:0c:53:85:79:27:cb:b9:17:b3:19:90:e1:a5:
                    05:19:cf:40:42:28:91:de:d0:7a:04:b5:b2:fb:e4:
                    2e:fb:fb:7d:3b:a2:51:31:ff:5a:de:76:dd:f5:cf:
                    f8:58:85:ed:0d:f4:1c:4d:dd:24:57:7b:ff:dd:b9:
                    ea:4e:01:60:df:f4:9f:df:74:80:3c:30:be:89:35:
                    96:7a:63:b4:a9:c3:bc:c0:1d:7d:08:a1:ba:95:2c:
                    7f:62:8a:06:96:9b:46:44:6e:4b:da:d4:13:95:f3:
                    78:fa:62:9e:bb:1e:63:c1:43:c9:7a:d4:21:e8:43:
                    2c:09:cc:0e:25:77:4e:59:81:d4:b7:81:d5:4c:e1:
                    57:62:73:a3:28:c7:5d:13:e5:5c:b4:4c:a1:af:f3:
                    9b:39:f9:89:50:81:0c:66:58:dc:82:5d:4a:fe:b5:
                    26:f6:5f:87:85:f6:37:fa:44:85:ec:9e:b3:51:d9:
                    62:40:fd:1a:c4:4e:db:fa:e1:0a:25:64:4d:ec:b1:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:50:B3:C5:E1:95:87:C0:CD:36:12:F0:F2:8C:A2:41:77:84:B7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1f68b9c7-1570-3bbd-80ac-653f99961a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:55:96:66:3c:48:80:c8:13:dc:a1:0e:f4:4f:d7:2e:5c:25:
         4c:ce:48:ee:11:15:89:b5:58:fd:91:ce:d2:a5:70:1f:57:4d:
         89:32:9f:94:5d:ed:6b:1c:75:51:cd:56:47:2d:43:82:8f:17:
         7f:d2:68:7c:35:25:c5:85:dd:eb:ad:de:d1:be:bc:fc:29:67:
         88:c6:50:d0:5f:d3:f9:6b:ad:0a:fd:cd:9e:35:b8:b1:5f:91:
         9e:16:83:66:2d:48:cf:9d:c8:48:18:a0:e7:ca:38:52:96:f2:
         dd:79:08:f6:3b:58:71:f3:bf:08:ff:7c:69:90:e7:00:87:ae:
         43:7c:30:e9:0d:04:98:d6:7f:1c:91:85:24:7d:2d:f3:82:cf:
         0c:a0:c0:a4:6f:ce:52:4e:fe:bb:b1:a8:11:63:76:d5:5e:98:
         58:21:0c:8e:c3:0f:2b:b8:e7:03:81:fa:46:d5:5d:ed:06:ce:
         7b:5c:96:1b:82:12:11:ec:16:8b:37:c4:8f:e7:0b:c7:9f:98:
         da:76:58:16:a5:d9:59:5f:25:92:47:bf:c2:de:7f:37:a0:83:
         5d:22:dc:7a:5f:72:6a:09:ea:be:5d:f7:6f:b1:69:03:38:1e:
         dc:3a:12:50:43:26:db:09:fc:c8:50:2a:81:3e:20:fe:6d:2a:
         dc:27:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:58 2024 by rpki-client on console-fra.rpki-client.org