Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b574c0f5-cc72-3c73-a351-d71904dc03ad.roa
File:                     b574c0f5-cc72-3c73-a351-d71904dc03ad.roa (raw, json)
Hash identifier:          B1R1potF3jiGF6E7m72gSrwVI9bRU6SEhWvIR8KUVUQ=
Subject key identifier:   AF:50:92:F0:07:D8:54:4E:E3:43:BD:86:B7:D8:18:3D:26:91:CC:F8
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455762CEA65A8CA931A8A2B080
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b574c0f5-cc72-3c73-a351-d71904dc03ad.roa
Signing time:             Wed 27 Mar 2024 01:00:26 +0000
ROA not before:           Wed 27 Mar 2024 01:00:26 +0000
ROA not after:            Tue 25 Jun 2024 01:00:26 +0000
asID:                     397422
IP address blocks:        69.1.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:57:62:ce:a6:5a:8c:a9:31:a8:a2:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 27 01:00:26 2024 GMT
            Not After : Jun 25 01:00:26 2024 GMT
        Subject: CN=ca79cbd5-e0be-4f03-a58e-6b1485406a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:c4:0a:ca:82:80:1b:8e:e8:33:f9:63:5c:
                    e5:86:c7:5e:51:20:89:82:b4:1f:e9:b3:f2:07:fa:
                    8d:47:55:e1:63:36:39:c5:05:27:5b:5a:8c:dd:a8:
                    cf:f8:c1:aa:2e:9a:e5:cf:7a:30:93:aa:50:4d:57:
                    54:be:0c:d2:7e:41:ab:32:81:dd:7a:0e:93:42:9e:
                    c4:01:16:5a:da:a9:60:5f:5a:4b:fe:c8:63:59:3f:
                    f4:f4:54:ee:cc:96:7b:33:7f:dc:91:35:4a:94:1d:
                    73:95:be:8e:ad:32:1c:9f:0e:62:9e:d2:b9:57:f1:
                    ab:a2:b0:0c:b7:e9:00:f8:b5:51:92:9f:17:52:33:
                    f4:5e:50:cc:6e:67:e7:dd:a4:ec:2d:57:b2:23:52:
                    9c:1d:66:b7:0e:b1:53:d9:c6:c8:74:e1:0d:79:e1:
                    5d:92:fd:7b:c2:89:51:ff:f2:85:4b:ca:c4:c3:d9:
                    af:b9:1a:16:43:b4:0f:55:cb:d8:4e:ba:0c:da:e1:
                    5f:1f:45:11:0d:87:15:bc:47:51:57:95:a1:a6:51:
                    40:f5:cc:c7:9d:0d:20:42:a5:96:e0:5a:51:35:8d:
                    e8:7f:32:0b:79:3e:a5:02:b1:d7:50:4e:b2:57:52:
                    3f:04:62:b3:36:f8:46:da:72:f7:64:40:47:c1:32:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:50:92:F0:07:D8:54:4E:E3:43:BD:86:B7:D8:18:3D:26:91:CC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b574c0f5-cc72-3c73-a351-d71904dc03ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:97:4c:fa:2f:70:2b:31:c5:7f:db:58:3e:19:0a:b4:3a:
         71:33:26:2d:c5:1e:d6:d4:f2:17:69:ba:ce:4e:67:6b:ca:6f:
         d7:53:1a:ab:9e:cc:1c:bf:56:46:0f:f9:a6:78:de:0c:a7:6a:
         f9:27:76:ea:2b:0b:d3:b0:30:2c:3a:13:63:9e:3b:2b:19:8a:
         1e:c8:58:63:76:2c:dd:b8:b6:9c:62:ea:ea:95:5a:70:ac:42:
         32:8b:74:93:98:ac:54:3e:58:ec:87:61:68:b2:10:0e:bf:30:
         9e:77:7e:c1:51:52:e6:72:fb:1d:f0:69:a8:4f:c9:b3:e6:30:
         c9:c0:74:13:b3:c0:37:da:d1:02:e8:a4:9c:85:97:39:62:0d:
         f7:9a:d3:f0:90:f2:f8:76:d6:7a:d5:70:49:e2:9e:99:40:a2:
         94:2e:52:6e:32:0f:9d:78:a1:29:9c:07:13:34:6f:75:25:a5:
         d8:e2:62:9c:4b:15:42:d4:b0:54:92:48:c7:09:72:59:13:bd:
         44:00:bf:2b:5d:9f:fd:71:35:47:8a:45:9a:5b:eb:8e:ab:e1:
         db:e6:9c:da:0a:f7:53:e3:de:c2:0b:cd:2c:b0:1f:f1:10:e4:
         7a:7f:3e:fa:f3:0f:a0:b8:30:58:e2:e5:5a:2a:3a:4f:87:9a:
         ba:81:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:33:32 2024 by rpki-client on console-fra.rpki-client.org