Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
File:                     1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa (raw, json)
Hash identifier:          vBs2qIIN/Is4RURztV9arghnYF/c6JXtDhRzyjzAXkQ=
Subject key identifier:   CE:2C:E4:02:82:C1:B4:CD:77:F1:0A:3D:44:5E:8D:E2:BA:0E:D0:6F
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285845734DB65202F8BD2E48FE5D80
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     11650
IP address blocks:        155.94.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b6:52:02:f8:bd:2e:48:fe:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=69bc0457-6297-407d-a630-5c0644dee8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:f0:e2:d4:50:c0:9a:57:f4:c8:0d:14:c6:
                    78:a8:65:93:b3:2d:30:e3:a2:67:d3:38:45:2d:41:
                    99:bd:35:0a:d8:8e:90:46:f7:14:89:ce:23:42:f2:
                    cd:81:53:67:a2:c2:1c:77:8f:50:b3:aa:87:76:26:
                    12:4f:f4:c2:d8:67:a1:ed:ad:b0:44:c8:6f:e5:0d:
                    a6:a3:50:45:b4:47:af:ce:0a:83:a0:83:92:0c:6a:
                    12:b8:72:f4:9f:7a:75:3f:28:2a:8a:04:6c:c2:ce:
                    cc:06:02:ac:e7:15:89:5c:57:75:c4:11:df:07:03:
                    a0:31:30:79:25:e4:18:40:d9:2f:db:b1:21:bd:e3:
                    95:e3:c4:96:93:01:80:77:ee:48:94:5f:92:c4:b0:
                    76:05:20:12:f8:7a:f9:e0:0a:04:e9:5d:e2:5a:16:
                    3d:9a:32:21:88:12:19:b3:99:b8:27:98:7c:7b:46:
                    66:31:ca:bf:33:45:58:51:62:79:9f:0f:6b:ac:5d:
                    48:32:af:d4:11:6a:ec:10:1e:88:b8:4f:36:b6:07:
                    33:ab:42:9e:03:39:49:8b:b1:00:65:eb:90:3b:af:
                    c4:9e:40:25:8a:e9:0c:21:1b:58:2c:90:00:d5:0a:
                    11:1b:c0:1f:13:0c:23:c0:37:8c:2c:64:41:86:38:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:E4:02:82:C1:B4:CD:77:F1:0A:3D:44:5E:8D:E2:BA:0E:D0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:50:b7:e9:b9:8a:ae:56:dc:c8:99:b8:3d:f8:b1:02:31:51:
         3e:18:20:63:d2:a0:3d:90:1d:5c:48:4f:48:9e:c2:0c:03:23:
         de:90:ee:5d:39:7f:27:bd:cb:28:58:c5:7c:08:92:80:21:b3:
         59:6f:f4:cb:c9:1d:74:20:1f:02:c9:21:d5:b2:b4:00:11:2e:
         8c:8c:32:79:f8:23:1d:9f:75:6b:7f:43:28:b3:7a:f7:50:60:
         d6:c0:e2:e7:2b:cb:d4:0b:3c:64:a7:b9:2e:66:fa:4d:b9:16:
         40:a0:67:6d:2e:d8:95:a4:75:44:bd:30:09:11:a1:dc:12:1b:
         68:88:ac:dc:88:86:14:ef:71:83:37:09:a6:d5:4e:d3:37:8f:
         fb:29:f6:6f:3a:43:4e:78:74:88:10:72:de:7b:73:03:02:08:
         29:ef:f5:1e:f1:3f:51:95:97:0c:80:09:90:d0:84:dc:5c:b1:
         bf:6a:5a:c3:c0:6b:f5:52:3a:59:b2:ec:50:9d:22:06:95:7f:
         65:3d:bb:4e:66:9a:a2:79:75:48:e1:03:71:bf:ad:45:c0:ce:
         b1:9d:15:49:e9:0f:9b:48:0e:d0:90:0f:01:48:54:59:04:a9:
         0a:92:cf:44:26:f8:4f:e2:57:73:68:cd:b6:3f:33:d9:dc:8b:
         b3:89:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:32 2024 by rpki-client on console-ams.rpki-client.org