Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa
File:                     b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa (raw, json)
Hash identifier:          w+iLZlCv52X+I9GBc3ZE1MBMo99FRCJ+RXmr5uIset0=
Subject key identifier:   30:2A:1C:6A:5A:81:8F:B6:F0:32:4F:4D:17:47:8E:23:C9:74:77:AA
Certificate issuer:       /CN=cd96b38e-1bc5-467e-872d-f7b20d4ff723
Certificate serial:       010D0C9F432858457083023211DBD73EB2D2B540
Authority key identifier: 35:91:0B:76:8A:16:69:8D:7B:10:D1:53:36:28:AD:2A:A8:17:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     11230
IP address blocks:        198.183.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:02:32:11:db:d7:3e:b2:d2:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd96b38e-1bc5-467e-872d-f7b20d4ff723
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=4aaa840b-2754-4f20-959e-3f0222f19d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:86:a5:6e:c7:3a:39:97:2c:41:a7:9a:6e:
                    29:da:10:56:6b:1e:e5:25:93:f0:87:62:f8:fb:d1:
                    0d:e4:47:42:ca:cd:c3:0b:b1:0b:3f:e3:ab:2f:7d:
                    58:e6:b0:4d:08:1f:1a:81:55:14:39:0a:d3:1b:70:
                    2e:67:b2:1f:f5:0b:d5:ce:fb:e4:03:03:c4:ce:14:
                    34:d9:cc:b7:3c:6a:84:cd:e3:5b:c9:9d:d1:6c:c7:
                    24:01:52:78:62:bb:c5:96:10:4d:e0:61:4f:0b:df:
                    fa:79:77:9d:6e:55:0f:b0:6a:6e:67:82:f1:e5:59:
                    59:ba:8f:8b:6a:c9:7d:b8:3b:16:0d:94:23:36:08:
                    2b:df:3b:b9:b8:8f:39:bc:c1:51:77:1e:c4:f1:a0:
                    0c:dd:9b:a6:7f:54:87:e7:fb:55:9a:98:8e:3f:8f:
                    c3:ee:df:32:d9:09:40:27:69:35:0a:3e:e4:b1:d2:
                    05:b4:ae:b4:34:66:dc:7a:2c:cf:86:f0:59:9a:24:
                    74:fd:b8:0d:ee:90:71:ee:da:92:74:2f:97:88:47:
                    c3:f3:fe:7a:e0:75:af:92:82:37:07:9b:b4:39:af:
                    bb:e1:15:96:bd:29:30:9b:51:28:39:54:05:ce:a6:
                    d4:62:93:14:62:32:b2:72:d3:64:7d:0d:64:f1:08:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2A:1C:6A:5A:81:8F:B6:F0:32:4F:4D:17:47:8E:23:C9:74:77:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/b0a65bd4-14ad-3a86-b2f6-6d79430646c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723/cd96b38e-1bc5-467e-872d-f7b20d4ff723.crl

            X509v3 Authority Key Identifier:
                keyid:35:91:0B:76:8A:16:69:8D:7B:10:D1:53:36:28:AD:2A:A8:17:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd96b38e-1bc5-467e-872d-f7b20d4ff723.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.183.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:98:51:59:cc:ae:3a:81:17:97:31:58:de:6b:1a:32:c1:
         4f:64:2d:5b:fc:b4:6b:8e:0f:da:2a:a8:27:a8:6a:99:3e:fd:
         b6:bf:9d:30:a1:b0:5d:7d:00:6e:2b:24:a7:1b:b8:67:7f:61:
         cc:89:6a:7b:73:1d:44:ae:26:f6:db:64:6d:77:1a:b1:89:c4:
         2b:dd:f2:9e:73:9c:19:c1:b6:cf:7b:61:e2:99:6b:d6:62:17:
         32:a4:0c:25:a9:37:87:73:61:86:94:6d:e2:7e:10:86:76:9f:
         10:87:d0:00:98:83:c5:6d:9b:c3:39:78:ba:23:92:3d:8f:c9:
         39:97:d1:ba:92:35:32:dd:44:2e:65:f7:fe:f1:a7:74:f3:3a:
         9e:d4:06:28:5c:6d:10:40:95:f7:48:87:5d:a2:ec:8f:be:f3:
         a8:67:5b:a2:25:99:2d:c1:fb:b7:af:d8:a2:9d:0f:69:b1:d3:
         d6:ed:a9:1f:c5:a2:94:45:8c:d5:aa:f5:0c:bc:f7:c0:51:0f:
         4d:55:ac:1b:1c:b0:71:78:67:cf:e6:03:38:33:06:84:9d:8d:
         a0:6c:ec:0b:d7:29:1b:e6:59:05:04:b9:6c:36:da:10:d9:9a:
         b8:82:a7:a8:88:7c:3c:30:8b:26:9b:ac:f9:ec:3d:d9:f8:a9:
         1f:e7:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:01:54 2024 by rpki-client on console-fra.rpki-client.org