Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6ef20f0d-b32a-35fd-9918-6feb7122156a.roa
File:                     6ef20f0d-b32a-35fd-9918-6feb7122156a.roa (raw, json)
Hash identifier:          p4jks5YG8TkJKNsdvBJczLPd3kdI31mJpsAFozQubm4=
Subject key identifier:   3F:20:8A:F7:B6:DB:CB:29:E5:F5:2A:F9:2B:62:14:3A:5B:FC:C5:8D
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584546273651C4D57C11AF4DBC00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6ef20f0d-b32a-35fd-9918-6feb7122156a.roa
Signing time:             Wed 20 Mar 2024 20:51:40 +0000
ROA not before:           Wed 20 Mar 2024 20:51:40 +0000
ROA not after:            Tue 18 Jun 2024 20:51:40 +0000
asID:                     36492
IP address blocks:        216.252.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:36:51:c4:d5:7c:11:af:4d:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 20 20:51:40 2024 GMT
            Not After : Jun 18 20:51:40 2024 GMT
        Subject: CN=4280d605-08a7-4e90-b945-2a16acc13db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:f8:76:3b:24:29:f6:87:03:7f:ef:16:cf:
                    8b:9d:53:fe:e2:bb:7d:18:a3:94:f2:f2:bf:5f:02:
                    c6:0e:7f:8d:91:b7:b3:76:0c:41:b2:2c:c3:d6:01:
                    63:67:29:a4:e1:7d:0c:7a:56:36:cc:f0:2c:a0:bd:
                    63:14:26:84:16:b0:32:4e:66:e8:3e:08:1b:f5:28:
                    ca:a8:24:18:5f:e7:09:45:23:87:34:9f:85:05:19:
                    ec:42:f7:3f:7e:36:53:5b:c8:03:73:86:cc:1c:2e:
                    89:a0:a4:5e:2a:81:44:ba:11:c0:b0:ac:85:8a:5f:
                    6d:08:df:20:d6:3b:b6:ab:a5:67:72:5e:8d:49:ca:
                    c5:b6:2a:08:2b:5f:b9:97:ee:b8:a5:8c:a7:83:a3:
                    67:4c:8f:d3:23:81:3b:f9:4d:09:26:67:f8:1d:dc:
                    ad:41:3d:a1:8c:d5:73:da:47:70:24:91:7b:24:c7:
                    92:29:47:d3:0c:3b:68:9e:84:d9:8f:af:fd:cb:8e:
                    e8:96:e1:c2:94:c5:48:d6:fe:51:48:cc:8e:08:86:
                    1f:18:7c:4b:3e:8e:7a:e5:0e:bd:de:bd:a8:d0:c7:
                    a2:1b:01:c4:c0:50:5c:a1:df:ec:4b:3f:65:13:7e:
                    d3:ad:39:4e:61:4a:1e:64:71:01:7f:10:cd:2f:4e:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:20:8A:F7:B6:DB:CB:29:E5:F5:2A:F9:2B:62:14:3A:5B:FC:C5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6ef20f0d-b32a-35fd-9918-6feb7122156a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:19:43:c8:19:7e:4a:f1:33:b9:82:26:80:14:e2:d3:d6:fa:
         66:a6:f1:8d:5f:ee:d4:f0:cd:47:91:4a:ed:53:21:56:0f:15:
         b5:a7:e4:01:5b:b5:dd:56:09:85:2e:84:47:94:7e:59:04:5a:
         d6:5a:97:1b:5d:26:a7:30:70:6c:cc:ba:8b:70:c9:30:be:e1:
         1a:3b:8c:10:04:ff:47:d7:ea:89:73:8e:7e:19:4d:30:a5:22:
         ca:f6:14:06:dd:f3:25:94:f5:e3:06:1e:cc:3e:0e:2c:03:1f:
         20:a6:79:9f:6e:b1:18:ff:6a:39:52:e5:1c:ec:ec:fa:fe:fd:
         3a:df:31:84:24:8f:5f:66:0c:02:bf:5f:f4:49:71:96:bc:f1:
         e2:88:df:86:6d:05:ca:ca:b8:e0:5a:78:b8:02:25:c9:54:15:
         a6:ff:61:57:2c:ee:3c:29:7b:f9:48:30:ec:3b:51:a9:26:d7:
         77:fb:07:1e:75:70:97:7a:a2:45:39:81:08:04:bb:61:1a:c7:
         c8:0c:09:07:06:ba:fe:ee:64:0e:51:0f:9f:78:8f:f9:11:1d:
         68:96:37:87:24:52:0a:d0:b5:66:cc:aa:0b:7d:a4:77:64:33:
         e3:dc:73:8c:66:ce:48:f9:95:74:b3:46:a3:a2:17:5f:cc:e4:
         f7:9c:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:06:18 2024 by rpki-client on console-ams.rpki-client.org