Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f96582a3-bbb7-3682-8520-05a692e6c307.roa
File:                     f96582a3-bbb7-3682-8520-05a692e6c307.roa (raw, json)
Hash identifier:          0hvjJq1cvTUCJQD0YbpZj7O9xe5jLSY71k5IS1Jeg/8=
Subject key identifier:   FF:68:AE:80:0F:FA:7F:78:2F:CC:F7:E1:E5:67:27:BD:74:A2:85:EA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838398CA59CBF769F0FDE0FDD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f96582a3-bbb7-3682-8520-05a692e6c307.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     33588
IP address blocks:        172.221.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:8c:a5:9c:bf:76:9f:0f:de:0f:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=cf49f1f3-701d-49bd-b9ca-5e5905acf29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:5d:fa:03:c3:0e:d1:03:c2:d0:a5:0c:9d:
                    bc:ff:2e:9a:d0:f3:c4:8f:6b:72:18:cf:e5:b4:eb:
                    83:24:af:63:bc:16:8e:fd:94:c1:7b:9b:d5:0e:7f:
                    44:7f:0e:17:86:5f:5c:31:01:78:a0:da:ac:35:40:
                    6b:43:24:ae:7f:12:4c:b3:64:e2:a2:16:60:7b:6f:
                    60:33:90:c9:16:a4:2e:ee:60:43:d9:ca:11:67:e9:
                    9c:7c:e0:80:a7:ca:fa:1a:c1:c6:1e:04:07:ea:51:
                    cc:65:63:19:7d:29:eb:06:84:5c:bb:87:c4:d6:54:
                    01:b9:08:1e:71:bc:4f:73:4a:c4:20:cd:f7:fc:f0:
                    5a:a8:ee:a7:7e:bd:c6:6f:0c:32:d9:37:3f:c3:92:
                    0c:ac:a2:dd:b8:e9:8c:6c:da:31:c5:ff:41:61:96:
                    a9:e0:06:ad:d5:ae:47:99:5d:37:c8:ee:f6:fa:b9:
                    d1:eb:00:d8:7b:56:53:4c:df:36:fa:46:29:5d:f4:
                    ee:65:b7:19:b0:89:06:44:08:f0:26:0a:5a:4c:08:
                    50:42:57:09:8e:31:25:0f:64:52:0b:4f:75:c7:87:
                    ff:bf:62:d3:96:1c:64:36:41:e9:f1:8f:8d:94:6d:
                    35:53:ca:30:b3:b2:41:44:3c:7a:5e:7a:5c:23:c6:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:68:AE:80:0F:FA:7F:78:2F:CC:F7:E1:E5:67:27:BD:74:A2:85:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f96582a3-bbb7-3682-8520-05a692e6c307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.221.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:d0:ec:a6:29:26:5c:e8:69:dc:80:0e:dc:cb:eb:bf:17:
         e4:5e:4e:f6:fd:ef:e9:df:c1:ad:fd:39:51:89:7c:da:00:74:
         6f:05:26:0b:52:bd:9d:a8:89:e8:c0:63:e1:13:cc:fb:1f:4d:
         f0:a1:a1:14:75:00:4d:5b:63:52:82:3a:19:47:43:b5:64:77:
         17:14:be:b7:0c:61:d6:cf:ad:53:e6:2b:4e:07:af:11:fa:52:
         03:d0:c8:66:23:28:5f:02:64:4d:7e:41:29:ae:cc:26:8d:bc:
         f6:91:9b:5f:a1:56:53:ee:39:a9:56:83:b0:94:e2:2e:71:92:
         79:fc:c5:0b:56:a0:53:fe:7e:6c:69:12:39:96:52:48:78:04:
         45:1d:bc:ef:ad:10:ce:82:82:71:8d:02:26:da:75:2c:81:e1:
         4b:25:51:bc:78:c2:7e:7b:66:31:b0:97:50:fd:75:32:4a:2a:
         fa:2c:a3:38:43:af:7d:c0:e4:e4:27:2d:e3:a1:0b:16:9b:82:
         f4:6b:0f:b8:1c:5e:5e:ab:72:f3:93:d1:87:96:e4:a8:e8:ca:
         0a:b0:92:13:78:ed:3d:32:26:75:31:15:ea:c0:cd:c6:cb:c5:
         1d:b8:56:ef:f7:7a:53:85:4c:8c:19:69:fc:a8:31:33:bd:e9:
         63:2f:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org