Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
File:                     5dff6933-d238-3c65-b75c-6e090cc092e5.roa (raw, json)
Hash identifier:          mWu/DsHR5ehQ338O3QQz6uWfjEfJQdF9CZVFJ1We6uk=
Subject key identifier:   87:81:21:80:01:BB:93:AA:DE:6A:06:53:BB:56:EF:C3:40:10:97:B2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F762D8BAD829E42E0D20
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        172.222.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f7:62:d8:ba:d8:29:e4:2e:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=8c34fe09-3acf-4255-bad7-b5f729bf188d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:00:97:86:1f:98:4f:63:97:73:95:6c:49:
                    5a:7a:ba:bb:c4:ad:80:6c:03:d3:8c:f3:ce:7c:58:
                    7f:77:d4:29:0a:75:6d:48:ff:c7:ca:c6:04:52:9a:
                    65:ae:39:d7:67:67:9f:be:34:64:a9:f5:5c:b0:cb:
                    78:44:78:56:a8:df:b8:44:7a:af:bc:ab:9c:5b:c9:
                    44:1c:94:35:77:08:49:61:93:80:a1:cb:0e:62:6c:
                    03:b2:9d:43:73:1e:d2:2c:70:e6:a4:1f:e6:14:6e:
                    3d:65:b2:43:d2:3d:ce:64:40:ec:12:51:64:fa:9d:
                    49:d9:57:02:fa:93:f0:32:d4:a1:64:6f:2c:3f:e9:
                    ad:a5:f4:ed:d2:42:86:ac:63:b0:a5:fc:c6:11:74:
                    06:a0:21:7f:cd:98:6a:59:bd:40:63:21:77:fe:0f:
                    b5:fe:15:cb:b5:e7:98:59:85:04:97:53:a9:79:e6:
                    49:51:b6:13:6d:cc:0a:eb:de:cd:53:a9:09:26:d2:
                    70:7e:26:88:2e:f8:33:4d:2d:b1:d7:ee:45:90:50:
                    83:13:cf:b0:9e:3c:7c:42:10:a2:ba:df:f0:be:9a:
                    da:42:6c:60:88:1b:44:13:66:51:9c:6c:33:fd:03:
                    06:aa:14:25:e3:a4:3f:8f:49:ce:20:4d:ff:4a:fd:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:21:80:01:BB:93:AA:DE:6A:06:53:BB:56:EF:C3:40:10:97:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.222.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:de:da:66:a7:3a:8a:bb:90:2c:74:0d:a4:01:48:16:ce:53:
         48:6c:c7:ac:c4:cf:80:4a:1a:c2:b0:3f:9a:e9:0c:dc:a1:c1:
         49:84:5b:46:26:0f:10:33:b4:0d:38:84:86:85:16:dc:74:19:
         ee:ff:91:c6:19:17:66:12:36:c7:71:2e:79:8f:cb:ca:4c:ce:
         ea:03:6c:e1:20:86:c7:7c:fc:60:f9:7d:d8:8f:d8:e7:78:94:
         aa:f6:ff:e5:53:a5:41:26:77:32:05:f0:85:0d:61:d3:41:44:
         71:7e:d1:c2:44:9d:49:dd:bb:48:8b:dd:86:fa:21:06:73:53:
         86:96:5b:51:88:e8:2c:15:31:54:3d:86:50:e2:37:4f:f6:e4:
         e6:b1:8c:69:c8:ef:18:a7:ec:5e:98:3d:67:0c:23:62:d2:d5:
         19:4e:a5:ea:2b:15:fe:4f:bf:ba:6a:03:3a:21:db:da:54:8a:
         96:e4:75:08:da:f8:25:96:de:ff:d5:bb:83:9d:99:56:ab:df:
         5e:8c:16:46:bf:1a:08:58:ad:4c:ba:2c:37:14:dc:e9:1f:ff:
         27:66:92:1e:a3:12:ce:d3:3c:82:c5:3d:86:cc:20:2f:f5:f8:
         5e:83:6e:a2:94:c1:0d:06:c9:b2:3e:ab:ae:a4:22:1c:c6:07:
         64:aa:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org