Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa
File:                     bb19269d-3510-38f5-9589-0b117cf4dc1f.roa (raw, json)
Hash identifier:          Fq/oPlAjTTcbyO2FRS3kYPAl9HoCJ/r/MXn7eSnWV0g=
Subject key identifier:   50:4B:B9:72:B3:E9:E6:DF:DF:9B:52:41:15:63:0D:EC:7F:8E:54:F3
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285845ECBE80B5D1E706F67FCECDC0
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     5650
IP address blocks:        172.85.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:80:b5:d1:e7:06:f6:7f:ce:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=6daf2ac5-9ab4-44b9-8309-6ce8b1c28469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:81:72:0e:19:98:18:01:ec:83:ec:16:6d:
                    73:02:ec:43:3c:87:93:47:b9:57:bd:f6:c3:af:46:
                    cd:76:36:36:b1:f6:fc:9f:b9:2b:45:34:fa:76:5e:
                    fa:dc:23:c4:7d:51:e1:5e:04:e3:00:57:fd:fa:fd:
                    c6:1b:28:cd:64:17:77:57:e9:b7:f3:cd:19:a9:9a:
                    da:06:a0:cc:8c:3a:34:7c:d4:70:f9:10:67:54:ab:
                    ed:d1:00:89:c9:61:93:2c:ce:84:8e:88:4b:1e:9b:
                    bf:c1:a4:e6:2c:a8:b7:66:25:2e:8f:ac:35:c1:48:
                    87:95:95:9a:0b:80:a5:e6:e7:16:e7:e8:a6:0b:6c:
                    33:7c:c5:01:e4:c6:91:ca:c1:07:ab:39:0d:24:e9:
                    d8:9e:d5:bf:9c:d0:a2:df:88:ac:b9:30:4b:22:6a:
                    7c:e0:8f:5e:6f:3b:22:c3:39:9a:90:51:85:38:c4:
                    d9:45:a7:53:a4:09:a0:ff:65:31:1e:96:1b:31:62:
                    22:6e:0d:62:3c:73:70:bb:0e:a9:8b:55:4f:49:1d:
                    4e:5b:26:e1:d8:3e:e9:d9:ef:73:50:af:09:10:cf:
                    4a:d2:d8:e7:b8:76:1f:07:44:dc:3c:6d:dc:ba:59:
                    b9:86:d9:1c:a5:c0:7d:ed:da:62:ab:20:00:63:a9:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:B9:72:B3:E9:E6:DF:DF:9B:52:41:15:63:0D:EC:7F:8E:54:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:5e:c0:1a:1d:f9:5e:05:93:30:ed:d4:2b:23:7b:57:7d:
         4a:b6:e2:ec:72:e8:26:26:70:2f:aa:a4:2e:64:a4:3d:18:94:
         b9:6e:49:19:44:57:ec:f4:f0:f8:be:97:b1:ae:d0:dc:9a:1f:
         d6:f2:fb:68:34:e3:85:7c:84:9f:54:37:db:4c:8f:94:94:20:
         f4:d8:8b:30:26:db:c7:54:6b:ec:bd:a6:0d:ad:e9:ee:f9:30:
         dd:03:0d:1b:8d:a6:e4:aa:24:d9:9d:b9:fc:2b:83:64:62:da:
         e9:82:a4:0e:07:3a:c2:50:5c:eb:ea:49:11:ea:44:73:88:8d:
         54:86:76:2a:b7:a2:ec:6b:d6:db:2f:b0:91:fe:3d:01:77:94:
         b4:ae:17:52:5d:1d:f2:ce:98:5f:c2:88:28:59:02:de:47:b5:
         d8:69:b0:13:84:3c:63:bf:32:6d:9e:37:ae:a5:ac:0a:65:14:
         11:45:0d:9d:75:ce:e7:0e:0b:3f:fd:e9:74:c2:fb:c2:de:f2:
         a0:0a:f4:79:0b:e1:53:d7:7d:73:c9:26:66:1f:db:17:04:8b:
         9d:48:d1:91:d4:fc:0d:9d:56:75:59:de:df:ea:b9:31:a5:9b:
         1b:5b:ed:4a:a3:bd:34:b4:90:e9:57:0f:5c:21:96:c1:40:63:
         2d:00:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:35:45 2024 by rpki-client on console-ams.rpki-client.org