Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cfacfcee-d06b-359a-a5a9-3f63fd165fb2.roa
File:                     cfacfcee-d06b-359a-a5a9-3f63fd165fb2.roa (raw, json)
Hash identifier:          K8685OpSYhnxEpDgcKg3ATdPpMhAY/lFNH8Iv1XbLvU=
Subject key identifier:   80:F5:ED:00:A4:2D:8F:30:7F:C5:CD:A9:5F:21:07:57:C4:68:BA:94
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E4E9E210898B116C3D100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cfacfcee-d06b-359a-a5a9-3f63fd165fb2.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        67.53.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:4e:9e:21:08:98:b1:16:c3:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=8ce998c5-9f84-474e-aeb9-cc82b7177f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:b2:08:bc:a5:5b:aa:ef:74:9d:d0:fc:c5:
                    a1:a0:46:93:c7:1c:3f:6d:9c:20:48:56:2a:cf:db:
                    04:67:33:37:2d:84:7c:b6:69:d3:cd:26:a8:90:f7:
                    68:50:4e:99:a7:09:00:04:c2:52:9f:3d:12:f0:30:
                    7e:f4:84:3c:64:a3:4a:3d:1c:fc:49:b5:03:85:09:
                    d0:fb:03:59:58:87:60:65:82:49:a2:14:1e:bc:f3:
                    cc:9a:60:73:52:8d:2a:b0:c4:30:a5:91:ac:bc:ca:
                    c4:50:66:9a:68:d6:db:ee:8a:bb:3f:ce:84:5f:21:
                    b9:7a:f3:cf:44:2d:5e:9d:db:df:ae:2a:03:35:3c:
                    0c:ce:6a:af:53:6d:01:fc:bc:26:2b:b2:88:37:e8:
                    ef:6a:8b:e9:68:b0:a4:0a:1f:cd:ab:8e:85:ae:c5:
                    02:be:bc:1b:9b:50:93:8c:13:fe:da:79:4b:88:a7:
                    0b:d8:c1:1a:a0:74:9d:ee:23:ed:9d:b0:35:9c:f8:
                    13:19:70:68:09:b9:eb:97:83:ce:3b:cf:1e:fd:26:
                    ac:ba:49:40:c9:95:b9:40:2b:90:c1:4c:07:75:a1:
                    e7:e2:36:c0:dd:bc:55:e2:90:a5:b7:3b:b8:31:ae:
                    b7:ce:8e:f2:90:b4:ac:58:73:ca:f4:e5:3f:35:8b:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F5:ED:00:A4:2D:8F:30:7F:C5:CD:A9:5F:21:07:57:C4:68:BA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cfacfcee-d06b-359a-a5a9-3f63fd165fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:f8:93:e1:4e:5a:54:1f:a8:c9:7f:77:08:fc:3a:c8:98:
         f7:bc:d6:5e:17:58:47:59:85:82:5e:95:e1:4d:e3:a3:a3:21:
         1f:b0:d7:42:c4:94:97:e8:d4:12:d5:9f:24:b5:db:df:d1:6f:
         ad:99:e1:a5:3a:14:db:02:9c:fc:2e:8c:d9:e9:31:61:b3:f4:
         1d:9b:ce:a4:9f:aa:b4:33:be:64:a5:89:fd:c3:20:7a:29:84:
         b2:ca:17:cf:3c:52:d7:32:ca:ad:6a:4e:2c:da:7e:87:63:a1:
         ed:cd:96:0a:9b:1e:64:e5:78:95:93:1d:c9:92:48:0d:1c:f0:
         d2:b9:b1:25:70:b2:79:80:20:96:55:a3:13:9c:83:07:86:c1:
         9a:56:f6:c6:8b:a4:06:72:f4:f2:e7:c3:6b:7c:cd:77:c1:ce:
         25:99:ae:15:a1:6f:65:78:66:df:ba:37:97:1c:43:46:1b:be:
         f1:e0:9f:1d:8c:ab:a2:73:69:9c:e0:19:fb:c5:24:b3:5c:26:
         7f:5e:ae:79:17:91:c4:27:d9:f0:bc:74:02:28:52:66:96:87:
         4b:a8:1b:58:aa:d9:0d:1f:a7:f6:c6:b5:da:0d:d4:1c:ed:65:
         5f:0d:9f:9b:75:fb:ca:43:4f:2c:b9:06:4d:02:ee:a0:67:92:
         b2:11:c0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:44 2024 by rpki-client on console-ams.rpki-client.org