Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa
File:                     bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa (raw, json)
Hash identifier:          1++dJSBY1GEJ5VPrER0TYNKFsUGfJKQOvAnV1IXWPlM=
Subject key identifier:   4C:DF:85:DB:FC:AA:F5:5F:0F:AD:E3:3A:0E:D6:57:0F:F9:8B:CD:40
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455498293FA8AB762A4F17AD40
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     13692
IP address blocks:        69.1.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:29:3f:a8:ab:76:2a:4f:17:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=d87c236a-3739-4e53-bfdd-ec701b86e426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:f8:bc:85:f8:08:a1:70:76:af:07:52:b0:
                    36:e0:b2:64:cb:ee:7a:40:0a:c0:68:a1:aa:a1:0a:
                    85:3d:00:2b:df:79:e6:2f:90:32:5a:c9:23:c0:f5:
                    98:78:bb:1f:bb:10:30:3b:52:5d:24:c7:a9:75:4e:
                    7e:e3:f9:38:02:52:1f:98:39:69:15:92:3a:53:29:
                    2d:5e:4d:32:4b:b2:ea:74:98:a2:44:dc:a1:b4:ae:
                    1a:15:9a:9c:15:00:58:b6:c2:5b:c3:3d:d6:2c:69:
                    49:a3:5d:c6:bb:f1:78:1c:f8:7e:e6:13:7c:36:37:
                    55:0e:cf:69:9a:65:af:5c:d5:a4:53:2b:a7:c0:c8:
                    e4:9f:9f:eb:4a:69:0f:d2:6d:7b:31:cd:ce:f2:cf:
                    92:fb:cd:f1:ed:8e:38:e6:15:a6:46:f5:f1:be:d3:
                    d5:f3:8d:9f:f7:c7:fd:a3:63:86:cf:da:21:2c:b4:
                    3c:2c:6a:c4:01:f4:2f:06:25:6c:46:6b:4d:ec:88:
                    62:41:c1:98:b3:16:5c:22:fe:f8:17:cc:ad:b3:6f:
                    8c:54:88:27:46:a5:94:30:68:1f:41:0c:a3:c7:8b:
                    75:9e:96:9e:50:4e:55:1b:32:55:00:7d:3d:92:6f:
                    b0:0d:53:69:c7:82:2e:3b:7f:4f:24:34:e7:c1:01:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DF:85:DB:FC:AA:F5:5F:0F:AD:E3:3A:0E:D6:57:0F:F9:8B:CD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf6ea6d9-5cac-3031-b9b0-7f5ce3e80324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ab:9c:85:28:23:29:23:c1:51:f4:35:94:4f:08:a2:47:b1:
         e1:f3:5f:25:84:63:5b:28:09:d8:fa:4e:7c:17:bc:ed:67:30:
         44:b3:6d:c2:90:90:20:a1:c3:6d:a1:c3:71:11:ed:6d:ec:df:
         41:50:a7:bc:76:32:32:44:18:13:5e:e6:b4:51:c8:90:eb:f5:
         62:cb:e3:71:28:92:0d:15:22:0e:bf:0c:c4:96:9e:99:ad:16:
         3a:50:3d:74:5b:85:e0:7d:9e:8c:df:44:84:28:08:25:a5:35:
         c9:8c:41:db:b4:aa:bf:da:f0:78:63:2c:11:fe:b8:55:ef:a0:
         a5:80:f4:7d:ea:ed:c2:42:50:00:5a:74:47:10:cc:10:52:84:
         70:ed:9d:31:60:31:ee:ee:bc:43:a6:05:08:22:ed:8b:c4:be:
         55:77:a8:e0:08:fb:51:2e:69:46:91:fe:a2:20:74:57:fc:c9:
         26:d9:76:bf:e8:02:d6:92:55:c3:a7:a1:a9:45:e0:99:ff:0b:
         94:0b:d6:52:2c:97:3d:9b:57:3b:a8:0d:36:4a:60:66:31:88:
         36:18:8f:92:ff:c2:f3:bc:9e:7c:99:21:8f:35:15:fb:c1:ef:
         10:14:7b:f2:8d:3d:62:d0:09:38:82:95:32:26:02:59:7d:7b:
         f8:9b:8a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:04:25 2024 by rpki-client on console-ams.rpki-client.org