Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5a3ad58d-e8b4-33be-a938-4edda01898c1.roa
File:                     5a3ad58d-e8b4-33be-a938-4edda01898c1.roa (raw, json)
Hash identifier:          qUiF2Ie6QRPMxJ3fCFI9UikK5tL1OE3zBrbnIqe1ZZY=
Subject key identifier:   C3:C9:DD:46:97:5F:1A:36:F5:BE:3A:B4:E2:3D:F4:3C:A8:C4:A1:08
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285845839A76E28B07A8E18A4D2980
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5a3ad58d-e8b4-33be-a938-4edda01898c1.roa
Signing time:             Thu 11 Apr 2024 21:08:12 +0000
ROA not before:           Thu 11 Apr 2024 21:08:12 +0000
ROA not after:            Wed 10 Jul 2024 21:08:12 +0000
asID:                     6461
IP address blocks:        199.212.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:83:9a:76:e2:8b:07:a8:e1:8a:4d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 11 21:08:12 2024 GMT
            Not After : Jul 10 21:08:12 2024 GMT
        Subject: CN=a68dc2a6-92e3-4b71-b561-812fedf84878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:b3:3e:8d:cb:aa:12:4a:e6:54:26:85:5f:
                    38:f3:08:98:5f:bb:64:f6:b1:1b:8f:3d:cb:a2:e4:
                    05:71:56:97:68:2d:10:7c:ef:5f:e5:5f:e0:f5:5b:
                    f9:00:ad:37:51:07:66:a8:ff:41:64:fc:eb:12:fb:
                    48:c7:16:26:58:72:81:78:ea:77:54:5c:9e:10:5a:
                    25:77:73:c2:3c:f9:ca:12:cf:ad:54:fe:6f:37:34:
                    49:14:36:f3:f7:23:bd:5f:7a:6f:15:96:c2:be:cf:
                    27:e7:ff:1b:55:7f:ba:87:ec:b5:83:14:6f:64:a2:
                    da:22:59:5b:94:aa:11:be:f3:64:5c:1b:12:eb:01:
                    37:b0:5d:82:b5:e0:f1:7b:f5:ea:be:8b:b7:2b:34:
                    81:c4:c9:e3:31:fb:e6:c4:a2:97:33:40:3a:cf:04:
                    dd:61:68:6b:fa:fc:df:8c:ad:41:e5:29:d1:19:16:
                    c5:25:c3:c3:6d:1f:d0:c3:99:d1:eb:e7:c8:bb:c9:
                    e7:ad:c2:92:80:61:61:a9:e9:fd:77:b8:5c:dc:df:
                    f7:e0:53:9a:70:80:4f:d9:ef:11:92:c2:a2:4e:c0:
                    82:b5:55:8e:a3:04:ca:01:38:2a:79:1d:a8:5c:95:
                    b8:67:5b:20:ed:61:fc:3a:49:76:b3:f2:f7:98:88:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:DD:46:97:5F:1A:36:F5:BE:3A:B4:E2:3D:F4:3C:A8:C4:A1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/5a3ad58d-e8b4-33be-a938-4edda01898c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:7b:ed:27:3a:62:0b:59:f8:cf:76:0e:cd:0f:56:00:f5:
         3d:c1:14:d0:ce:f7:cd:a4:4c:bc:73:6e:f6:a0:b6:ac:13:d9:
         d8:72:11:26:02:9d:0a:a0:8f:66:da:55:04:62:fc:2c:0f:e3:
         3a:7f:ec:0e:f5:1e:66:23:19:0a:de:e5:08:e3:1e:2b:a2:b2:
         54:0b:16:4d:d2:08:a7:00:b1:73:0e:57:24:0b:97:fa:4d:25:
         2f:2a:61:34:8a:25:7d:02:f0:a6:1c:e1:13:2b:8a:5c:39:5d:
         35:f7:96:8e:52:e5:ae:d7:69:56:16:4a:b9:1a:0a:ab:60:b5:
         b3:1d:dc:2f:80:b3:c2:20:e8:b1:e4:45:c4:14:db:c7:3f:40:
         61:43:5d:a8:4a:d0:40:0e:b6:4c:02:66:11:39:75:96:d2:f7:
         d4:ac:b1:fa:94:ae:43:f0:d8:ea:d5:58:6a:3e:fe:57:ee:27:
         51:c4:58:07:5c:8f:e0:c6:da:cb:f3:e4:0d:d2:63:a2:d7:69:
         41:55:39:7b:f4:05:61:5b:6b:30:66:0f:30:f0:87:c1:28:15:
         e2:85:b6:71:56:87:d4:a7:56:35:87:c8:55:fb:46:9c:e0:d8:
         2f:56:e4:26:b8:92:53:5c:f9:79:61:fb:a7:5a:fa:0d:78:61:
         e2:1a:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:50:35 2024 by rpki-client on console-ams.rpki-client.org