Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cffbd94a-211e-3b29-bde8-76840353621b.roa
File:                     cffbd94a-211e-3b29-bde8-76840353621b.roa (raw, json)
Hash identifier:          zfvttII53jG+tZo52B7r80IWEOUzguFm+1jl3ahnHrU=
Subject key identifier:   2B:D3:DC:8F:52:5D:A3:F9:CB:CC:97:5A:C7:28:7E:69:3B:9A:AE:3F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285845A2C3418A48213E86B42BE320
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cffbd94a-211e-3b29-bde8-76840353621b.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        162.223.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:41:8a:48:21:3e:86:b4:2b:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=43fe45ac-365f-4328-92ec-248ef59cd212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:06:50:8b:8d:27:97:37:d9:0d:d3:07:b5:
                    6d:4f:d4:81:a7:66:fb:1b:e3:9e:9b:ce:33:53:8b:
                    97:79:27:d6:a1:44:8d:4b:72:28:f5:c3:a3:67:de:
                    3a:71:dc:1f:ee:6c:83:2e:9d:8d:98:44:5e:ba:e7:
                    b6:d8:e5:82:e4:54:cb:44:fb:6f:a3:3c:79:bb:cf:
                    47:24:80:98:08:0b:fa:1a:7e:71:49:15:b9:44:c3:
                    5b:20:15:ed:2a:98:03:05:22:7e:01:ec:eb:ba:87:
                    bb:01:26:7d:f1:8b:68:d4:67:ae:99:f0:ff:ee:8a:
                    d1:7c:9b:69:cb:de:dc:87:ce:c4:17:ec:0f:0c:e5:
                    d5:7c:d6:76:f3:bb:21:52:52:9a:f2:b7:ab:f0:7c:
                    4f:ef:47:ff:ff:54:ee:a7:83:f9:a1:79:3a:72:25:
                    af:d9:3d:35:96:12:c4:ef:1c:12:ec:07:ed:f6:93:
                    f7:0f:1a:00:74:21:e0:86:db:e2:5f:50:bb:1e:a8:
                    98:93:46:ae:55:6d:f5:be:68:61:bd:ac:8e:5e:69:
                    b7:84:d4:06:86:41:48:30:9c:bf:06:82:85:d7:7b:
                    59:b6:28:0e:34:61:6f:43:82:97:b1:47:c0:7d:83:
                    c2:49:86:e1:22:90:3e:02:32:57:db:af:76:25:8b:
                    46:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D3:DC:8F:52:5D:A3:F9:CB:CC:97:5A:C7:28:7E:69:3B:9A:AE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cffbd94a-211e-3b29-bde8-76840353621b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:38:a4:16:91:d0:30:29:d3:af:b2:e4:4b:3a:46:d4:01:4f:
         95:8d:e6:28:e9:f2:ec:c2:55:27:6c:83:41:c6:75:8e:ff:a2:
         66:6f:96:ca:df:e0:e3:cd:24:f6:1f:6d:7d:78:67:8f:ed:7a:
         58:b7:54:91:e1:74:4c:cd:f7:42:35:ff:99:9e:b7:e5:41:6d:
         0b:a2:72:f3:67:fa:30:bf:1d:fa:31:32:88:3d:3b:3b:a8:dd:
         55:36:fa:7c:62:d4:d6:d5:e9:36:40:71:1f:9b:3a:b7:42:d5:
         60:5c:e9:48:91:e4:be:fe:e5:c6:f4:45:15:4c:cc:31:e0:ee:
         97:99:cf:27:ce:18:9b:ac:a3:6e:4d:0d:23:53:28:51:51:a6:
         b7:ea:15:c1:c5:12:a7:3c:1a:7c:85:5f:f1:6b:39:a2:54:68:
         9d:1b:42:bb:b9:51:dd:3d:0a:ad:b7:37:c0:5f:a2:dc:96:b7:
         2d:7d:79:5b:f4:02:61:be:d5:ab:8b:72:5a:ce:a5:74:33:11:
         e2:99:c7:8b:cf:26:e5:29:25:89:9f:9f:43:5b:ff:67:75:7c:
         e0:04:2c:59:95:24:7d:d7:fd:69:7d:a3:2c:82:14:22:bd:47:
         78:b0:78:90:ba:cc:5a:f7:2a:d6:3b:82:37:3e:18:01:00:12:
         33:eb:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:59 2024 by rpki-client on console-fra.rpki-client.org