Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20683793-359f-32a5-baf7-6d5f7f679684.roa
File:                     20683793-359f-32a5-baf7-6d5f7f679684.roa (raw, json)
Hash identifier:          thQsW4plCvjut2AVjqcWW+ujZVT+o5e6FHiZ+zBN1Zw=
Subject key identifier:   B3:AE:14:E1:29:FE:27:B5:F8:E8:BA:73:E8:F6:5F:95:E4:14:C4:14
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E4F755C9037C11A6B7400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20683793-359f-32a5-baf7-6d5f7f679684.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        67.52.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:4f:75:5c:90:37:c1:1a:6b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=b6c57133-920e-40e5-b580-187a71b79da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:f2:3f:1a:08:ff:07:bf:f3:d6:6a:91:e6:
                    84:38:a3:9f:3b:38:90:b6:99:08:85:05:07:78:1c:
                    ca:87:3c:74:44:e8:11:9d:2e:df:a2:72:2b:59:30:
                    fb:52:f9:da:92:6c:25:5d:05:26:55:ae:d1:0c:a5:
                    34:6a:0c:b4:fa:7e:89:ba:c9:3f:aa:72:52:5b:63:
                    00:90:d5:02:3a:3a:5f:7a:9d:f1:fa:34:36:a2:97:
                    65:9a:e8:da:84:e2:72:74:60:c8:60:fa:77:cb:13:
                    d9:1e:e8:11:99:aa:73:69:ba:a0:1c:a0:ad:a7:91:
                    24:ba:c0:64:e6:45:48:92:f0:bd:10:68:7d:06:ac:
                    a8:de:7b:9f:0c:2b:b4:1d:a8:28:db:5d:27:dc:84:
                    e8:f9:81:a5:3d:d0:e7:a9:f2:d5:28:46:50:d7:b2:
                    63:3c:8f:f1:3d:ad:86:03:ab:a5:c6:1a:57:39:07:
                    7e:6d:bd:2d:a6:92:3e:a5:5b:43:68:2c:81:6f:c6:
                    17:4c:64:1d:ad:c2:05:50:fe:a0:02:74:8c:b3:16:
                    31:86:28:0b:c4:9e:59:ff:78:4f:24:4a:d1:fa:c1:
                    fd:ed:0a:e5:a6:6c:5a:ab:1e:ca:f6:63:2a:3d:41:
                    d5:dd:8a:32:8c:95:04:ab:4f:e9:2b:ba:be:a1:29:
                    65:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AE:14:E1:29:FE:27:B5:F8:E8:BA:73:E8:F6:5F:95:E4:14:C4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20683793-359f-32a5-baf7-6d5f7f679684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:bc:bc:fb:28:69:4a:63:ae:d8:19:b4:c6:03:85:cc:8b:
         08:4e:96:e7:98:06:eb:41:26:62:63:a6:18:dd:a2:ec:52:9a:
         27:2b:60:46:c8:c6:72:f6:de:22:2f:77:a4:8f:4d:bd:7c:35:
         2a:cd:15:ff:01:64:81:b6:91:4a:f7:5b:76:9a:11:e7:54:7f:
         12:69:f6:6e:78:50:1c:75:13:02:be:b0:19:5e:2d:f5:51:3c:
         49:5d:4d:d7:dc:77:31:71:7d:fc:e5:67:73:4f:73:f9:bd:bf:
         b6:f0:99:7d:0a:ff:93:9a:ee:77:55:0d:72:92:53:85:9f:1f:
         de:0e:d4:4f:91:ec:28:b5:1e:d9:03:bd:e6:cc:19:b4:37:cc:
         38:1c:ad:c5:11:a7:0a:f3:d5:99:91:a1:0a:2e:d7:d6:16:0c:
         a3:37:d9:a0:f5:5b:05:22:23:9c:d0:dc:e4:71:8e:89:2f:70:
         b3:62:c4:a6:6d:b7:12:b3:d4:f6:27:39:de:d6:2b:f4:d4:99:
         87:d0:20:09:6d:ce:21:39:2c:9d:19:14:0d:36:2d:0c:93:de:
         6f:4c:37:17:bb:9a:d8:5a:7f:eb:a0:49:92:db:5e:20:dd:1b:
         a7:d4:78:54:25:e9:4d:bb:f1:39:c7:76:2b:67:db:92:85:85:
         b7:b9:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:43 2024 by rpki-client on console-fra.rpki-client.org