Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa
File:                     20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa (raw, json)
Hash identifier:          HEj+bWa95O7PVLsca0dwRJj2wNvH2fJK07XUhOU2fAQ=
Subject key identifier:   9D:2D:F9:C5:98:4C:35:DA:49:6F:B0:7C:25:96:C0:36:87:00:50:4B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858450A3245CEFC4257C8A78D6140
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa
Signing time:             Wed 28 Feb 2024 09:25:27 +0000
ROA not before:           Wed 28 Feb 2024 09:25:27 +0000
ROA not after:            Tue 28 May 2024 08:25:27 +0000
asID:                     7018
IP address blocks:        172.96.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:32:45:ce:fc:42:57:c8:a7:8d:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 28 09:25:27 2024 GMT
            Not After : May 28 08:25:27 2024 GMT
        Subject: CN=34d183e6-66ac-4b37-969a-6a9da9face9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4f:55:df:88:61:36:3d:cb:72:da:f8:ed:60:
                    6a:91:22:65:50:43:76:f8:69:56:e9:ca:d6:56:04:
                    98:84:83:a5:d8:54:0d:37:a8:25:00:50:71:c7:62:
                    7d:f9:21:21:52:af:6c:e1:17:0d:77:c1:37:69:96:
                    d8:98:99:ed:97:e9:5b:1c:16:2c:35:d6:61:ce:da:
                    ac:4e:42:9a:01:6f:21:d0:01:3a:ec:ac:fd:e6:eb:
                    ca:51:d8:d5:98:38:fb:8d:ed:b5:ca:26:3b:cd:5c:
                    b1:4d:63:90:8f:7c:ba:aa:87:df:5f:84:6c:b9:e7:
                    5b:c6:6e:10:a1:60:0a:48:53:f0:7e:23:a5:87:76:
                    74:29:cf:98:6f:ec:c4:69:a7:fd:72:9c:c2:de:21:
                    91:72:59:22:2e:d0:5a:19:ce:c6:ce:1f:a9:37:b8:
                    1a:0c:23:bc:e5:58:97:9b:3e:2e:aa:b0:35:1a:4f:
                    67:89:12:17:9c:5e:c1:a8:80:40:ac:e6:ca:41:29:
                    ee:9b:c4:92:38:42:8a:a9:52:fc:58:37:08:f2:7b:
                    02:9d:c8:d9:7c:ac:7d:85:c4:6b:cc:c1:ff:2b:bd:
                    c2:34:54:2f:7e:50:4f:88:3a:7d:90:40:02:ea:7f:
                    be:83:26:48:82:5f:ce:19:5c:6f:70:be:01:32:8f:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2D:F9:C5:98:4C:35:DA:49:6F:B0:7C:25:96:C0:36:87:00:50:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:7d:84:8f:91:a0:0a:12:ef:12:4d:5b:5f:7f:4a:fa:02:
         ea:fc:9d:1f:da:10:16:81:7b:51:c5:72:d9:71:56:eb:74:6c:
         0e:c9:a0:96:91:83:47:63:12:4e:d0:ae:b3:ef:98:2c:55:07:
         6c:d5:b7:38:4a:0e:5f:71:6f:b5:23:4f:88:fc:88:d2:88:ce:
         69:f8:7c:19:7d:65:65:a4:3f:c0:73:36:4d:5f:a0:f1:ca:31:
         37:89:9e:df:ba:7f:f3:ea:b1:b0:f5:2e:66:46:e5:08:08:6d:
         30:1d:60:62:9d:2a:08:c5:a5:0e:75:cd:09:18:51:f1:15:dc:
         c7:58:9f:dd:e9:38:34:73:ba:f4:d0:d5:e5:6d:6b:5d:57:d1:
         89:85:46:d9:f4:8d:e5:26:56:2a:af:80:cb:cb:65:70:4a:9f:
         6a:a5:e5:f9:fa:73:ea:8b:39:91:ea:17:45:2f:6d:41:3c:ac:
         07:ea:10:f3:d5:1c:a3:3e:17:9e:64:58:bf:89:81:0f:bd:7d:
         41:b9:30:cd:67:96:b1:80:f8:b9:30:af:0f:3f:82:28:c4:2e:
         f5:10:cb:f8:a2:0e:93:02:ae:af:3e:a2:71:6a:7b:b1:da:8b:
         f3:51:49:26:fb:f7:9d:e2:2a:3b:7b:b7:dd:77:7b:b9:35:80:
         2e:8b:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 13:20:50 2024 by rpki-client on console-ams.rpki-client.org