Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6f722a4e-62ef-394c-80eb-91d1908d71b9.roa
File:                     6f722a4e-62ef-394c-80eb-91d1908d71b9.roa (raw, json)
Hash identifier:          KW3SLdWF2aSiwENYxXanYZRUgdtotcJpWREbaw0jdZU=
Subject key identifier:   72:60:B3:4B:BD:88:5E:6A:40:19:09:48:33:A9:3D:74:9E:05:1C:82
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F432858453FA8058B706C2EC74E191920
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6f722a4e-62ef-394c-80eb-91d1908d71b9.roa
Signing time:             Mon 18 Mar 2024 13:00:30 +0000
ROA not before:           Mon 18 Mar 2024 13:00:30 +0000
ROA not after:            Sun 16 Jun 2024 13:00:30 +0000
asID:                     20249
IP address blocks:        169.196.248.0/21 maxlen: 21
                          169.196.176.0/20 maxlen: 20
                          169.196.219.0/24 maxlen: 24
                          169.196.128.0/19 maxlen: 19
                          169.196.160.0/19 maxlen: 19
                          169.196.220.0/23 maxlen: 23
                          169.196.240.0/20 maxlen: 20
                          169.196.240.0/21 maxlen: 21
                          169.196.128.0/18 maxlen: 18
                          169.196.220.0/22 maxlen: 22
                          169.196.222.0/23 maxlen: 23
                          169.196.160.0/20 maxlen: 20
                          169.196.224.0/20 maxlen: 20
                          169.196.119.0/24 maxlen: 24
                          169.196.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:a8:05:8b:70:6c:2e:c7:4e:19:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Mar 18 13:00:30 2024 GMT
            Not After : Jun 16 13:00:30 2024 GMT
        Subject: CN=0cb1ee51-d807-4e02-a5ac-6223012275a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:e2:fc:7c:8c:e7:5d:73:14:67:61:62:ca:
                    f8:34:78:47:a3:34:cc:41:b3:6d:13:6e:cb:1f:e0:
                    7e:8b:ff:b9:7b:a9:44:f8:46:d8:e3:91:47:25:61:
                    48:01:a9:a8:67:97:96:11:18:e0:cf:09:4f:16:c0:
                    5c:2b:1c:6c:9f:d3:54:76:0e:cb:43:d5:d0:1d:58:
                    18:a7:d6:b5:50:c0:84:7b:1f:b5:f8:52:16:11:84:
                    bf:d0:43:e5:12:7c:44:dc:af:4a:89:11:a2:c5:2c:
                    8d:c7:46:4e:f4:5f:e1:56:d0:e7:5f:e4:d0:de:f6:
                    cb:d9:4c:99:96:7a:3f:24:e2:67:50:59:1b:12:50:
                    1a:bb:44:6d:01:83:5f:db:f3:c7:ba:46:8a:9c:f4:
                    ad:2e:fc:5d:44:c6:33:15:f4:c4:b9:3b:ea:2b:60:
                    06:e8:ee:94:3c:62:ca:91:44:89:8e:d4:bb:b8:f5:
                    c9:d1:47:0f:f1:cb:f4:95:e6:4a:2b:c6:95:f7:f2:
                    eb:ca:26:8d:6c:e2:5d:b7:fb:d1:80:02:32:e0:17:
                    fa:28:94:25:36:1f:39:9f:39:8d:34:40:6f:8e:39:
                    c4:48:94:9f:6a:e0:c4:78:ee:4a:d5:94:9a:b7:fe:
                    1b:0f:ee:66:20:20:f7:14:8b:90:63:31:73:ca:b3:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:60:B3:4B:BD:88:5E:6A:40:19:09:48:33:A9:3D:74:9E:05:1C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/6f722a4e-62ef-394c-80eb-91d1908d71b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.119.0/24
                  169.196.128.0/18
                  169.196.219.0-169.196.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b1:2f:36:2b:97:55:9c:5a:82:3f:0e:04:81:a0:a9:32:71:
         1c:ff:d1:4d:c2:1c:68:e1:91:95:0d:b1:3c:cf:95:69:8d:e7:
         eb:9d:2b:a3:2d:b9:9b:99:1f:62:a1:de:3b:ab:b4:8f:ed:61:
         ba:8a:b3:31:61:e6:9f:74:e9:a1:54:fe:17:d2:34:c6:db:4b:
         49:f7:3f:04:e2:b6:67:ca:a6:ac:dc:85:f5:41:a2:e2:7d:da:
         09:d0:18:64:19:81:5c:59:17:c0:c5:a8:6f:f6:33:61:91:c3:
         3e:52:44:9a:47:3e:35:b0:df:e1:2d:c5:02:eb:94:61:b4:85:
         6a:ea:c9:69:61:2e:fc:83:f6:f6:5d:51:5d:af:39:b4:3a:36:
         ff:c5:e7:a0:f7:05:9a:4a:9e:c9:62:c3:eb:f4:86:fe:d3:47:
         bb:ed:9a:47:7f:7f:d3:cf:96:9d:1b:0c:8a:d6:84:e7:2d:1f:
         44:05:84:5a:7e:30:55:85:13:b6:f7:63:8f:5f:47:05:bd:70:
         ae:f3:38:97:a4:1f:40:32:fa:fe:1a:f3:b8:90:9c:a1:b1:17:
         3c:63:4a:11:ba:33:01:99:5e:65:5e:54:c3:4d:4e:e7:88:19:
         07:65:d4:2e:e8:d6:aa:a0:1b:af:a7:dd:d5:3f:de:3c:fc:a6:
         d6:0f:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:13:36 2024 by rpki-client on console-ams.rpki-client.org