Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2620841d-f8d9-3631-9cc3-0ae02c8aa0fa.roa
File:                     2620841d-f8d9-3631-9cc3-0ae02c8aa0fa.roa (raw, json)
Hash identifier:          tKkWrwjrz+wMbnFYmvReS6RZALpxqHKmFQWV8Ho6EpU=
Subject key identifier:   48:EE:68:69:7A:FA:D1:DA:92:28:2D:5A:E1:E1:D9:BE:F2:C3:32:93
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E60DC5C9FD473F8076C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2620841d-f8d9-3631-9cc3-0ae02c8aa0fa.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        67.52.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:60:dc:5c:9f:d4:73:f8:07:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=80b0bb09-1c68-4494-ac88-44df373a9313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:35:dc:3c:82:74:a3:10:52:85:8d:10:ff:
                    02:bc:61:d0:f0:b2:f9:9e:18:ef:f0:ec:6c:d5:4d:
                    c2:55:43:e7:6e:f1:5b:52:bf:4e:c5:f1:53:02:e7:
                    9b:e2:5b:e9:3c:2f:f7:b5:da:5f:b9:45:2e:56:68:
                    b1:9d:3f:1c:7e:20:da:11:e6:9f:9b:0d:d8:e9:2f:
                    1c:c7:28:10:f4:ec:a9:60:ce:79:c9:22:75:5d:77:
                    63:01:08:05:78:bf:de:05:c1:f9:a9:83:95:c7:3a:
                    ec:84:ea:1e:b1:67:5c:57:bb:e1:dd:5f:9f:6e:e8:
                    49:30:be:54:f5:82:35:a6:06:ef:73:5b:78:ec:99:
                    6c:c6:23:e0:d7:71:b0:b6:a7:94:e2:cc:e0:43:06:
                    13:4a:75:e6:aa:4f:35:0c:40:a8:11:59:23:58:78:
                    95:6b:4d:30:bc:65:e6:d7:83:58:d3:4c:57:bc:ea:
                    ca:7b:9f:62:d9:b6:81:cb:76:72:f6:d7:c9:79:9b:
                    80:29:5c:04:63:9d:87:14:76:02:2e:f3:30:b4:c3:
                    28:2f:4f:0d:c0:b3:f5:da:b7:1a:4f:1b:d4:7d:59:
                    ab:9e:d9:20:48:a0:4a:81:f9:89:38:71:82:9b:30:
                    d3:f7:12:d8:b1:fb:78:9d:b0:f9:51:55:f0:9a:56:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:68:69:7A:FA:D1:DA:92:28:2D:5A:E1:E1:D9:BE:F2:C3:32:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2620841d-f8d9-3631-9cc3-0ae02c8aa0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:9f:ef:60:58:ab:f8:18:05:18:2d:99:e0:47:c7:02:c2:34:
         a5:ed:ba:cb:7c:d0:ed:25:cb:57:55:4c:0b:b5:84:3b:9b:a7:
         66:c0:a6:0a:d0:7e:33:7a:ab:10:c9:c7:e1:56:2a:74:18:12:
         19:d5:dd:16:8f:6b:46:c6:8a:ed:01:00:10:4a:a2:58:28:9d:
         9d:cd:57:28:f8:52:83:5e:bb:70:d8:52:8d:fc:44:f0:04:32:
         98:b1:2b:58:77:3f:a3:ee:95:ba:11:3c:e3:ec:eb:f4:ab:08:
         e8:30:ca:4c:96:0f:27:28:95:4e:c1:c6:02:32:a6:f3:6b:24:
         22:49:43:15:e9:15:ea:e0:c1:40:f3:7d:31:ad:27:3f:be:b4:
         32:51:04:30:58:92:4b:90:b3:f1:9c:65:4b:8b:a6:b2:1f:14:
         cc:99:1c:3e:fd:6d:3b:d0:35:fc:7a:ca:4d:52:a6:80:9f:43:
         70:bc:0a:79:b5:d6:e6:e1:00:e8:ed:46:5e:0e:38:08:b0:dc:
         f3:28:4e:c1:a0:67:31:11:42:c7:f4:5b:c7:21:83:3d:d8:5c:
         a3:e9:27:a4:b9:e5:ed:59:82:b8:8b:4e:54:71:6f:3e:4a:ef:
         42:3b:72:d0:96:a0:75:80:46:a6:0c:50:f2:b3:14:9a:35:15:
         be:57:9a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:44 2024 by rpki-client on console-fra.rpki-client.org