Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa
File:                     2176ae68-0f60-3e10-87db-4ff9df01701b.roa (raw, json)
Hash identifier:          5XzxWa5AYb7bAttm2NBCHghHCMGRFAoHMOpRAk3MxDc=
Subject key identifier:   1B:31:29:D1:2A:94:8A:9D:2F:9F:F2:08:53:03:80:19:68:66:94:9C
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F43285845AC88C3818125D5AEB39D4E80
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     53828
IP address blocks:        64.237.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c3:81:81:25:d5:ae:b3:9d:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=8522e3c2-7ced-4ebd-8bda-31480871d4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bf:e8:63:07:4c:e4:99:58:e0:01:06:fe:84:
                    57:a9:d6:c6:66:12:05:6c:40:8c:27:bd:46:b9:b6:
                    7b:2f:a0:bf:ec:80:b0:6c:7d:02:6b:5c:b3:25:a8:
                    95:51:16:3f:62:61:b1:f9:3d:dc:2e:7e:89:d4:a1:
                    42:de:e7:b1:39:e0:db:f6:a4:71:3e:28:be:ec:15:
                    78:b7:57:e7:db:11:1b:b8:0f:21:2d:05:de:45:e9:
                    f3:0b:05:f6:5a:dc:33:21:e0:27:c7:fb:54:88:c6:
                    3d:45:5a:6d:cd:22:10:22:ba:e8:60:61:a2:03:3a:
                    db:a2:ab:a3:05:e2:ae:3c:75:80:21:ff:27:10:79:
                    6e:bd:47:7d:82:3e:1b:15:3c:3c:72:12:7b:27:45:
                    72:6f:bf:c6:87:f7:5e:db:6d:f8:41:08:59:50:a3:
                    7b:9e:78:d9:74:27:f1:53:92:aa:aa:5f:2f:9a:86:
                    0b:f2:c8:8b:18:57:18:6f:7f:65:ba:bb:70:2f:a2:
                    70:e7:31:c5:3b:b7:17:00:1d:aa:7d:ee:a7:b8:75:
                    7c:9e:ef:5b:99:24:94:c1:ce:75:65:23:68:65:53:
                    42:ae:a6:71:0a:27:a5:2a:d5:6b:d7:75:5c:9c:72:
                    c8:6d:e5:38:31:15:38:50:8c:e2:c5:cb:21:77:e4:
                    1c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:29:D1:2A:94:8A:9D:2F:9F:F2:08:53:03:80:19:68:66:94:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:08:dc:2a:e3:f8:65:b5:d0:51:07:39:a9:3c:93:30:45:54:
         00:96:95:59:a1:2f:64:de:6b:d8:97:4e:f5:ac:95:56:41:1f:
         2d:db:aa:ca:06:1e:40:c8:4e:b3:16:5b:5c:27:0a:2b:24:98:
         37:d3:c7:d0:1d:ea:f1:44:a3:0b:fe:fe:67:69:48:7f:1c:13:
         7d:6c:85:03:90:5f:6d:69:57:1c:73:93:c5:52:8c:40:a8:92:
         00:67:22:c8:16:42:b1:e9:d0:87:82:98:59:8d:28:0c:d0:c3:
         55:50:0b:2e:a8:e9:a4:52:23:50:8f:bd:09:17:d8:c4:40:97:
         2c:5a:6e:1b:b0:97:60:9e:6e:9f:b5:9d:e8:02:e7:aa:a9:bd:
         a2:57:1e:3a:69:29:4d:11:ec:b4:2d:2a:aa:6a:c9:88:f0:c6:
         7c:12:9e:13:93:ab:c1:89:5f:59:c0:47:7d:93:28:5b:3d:12:
         f4:17:aa:ee:55:54:6b:d8:85:f7:26:06:13:e3:a5:f1:e1:e9:
         4f:40:a2:4d:a0:25:4c:a5:90:51:67:95:72:02:35:19:e6:b8:
         14:91:f6:38:d3:63:7f:ba:d0:93:49:4a:11:94:7b:28:a0:ec:
         03:c2:44:05:18:66:55:e9:a1:95:f9:26:5d:38:86:60:07:37:
         a4:10:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:09:09 2024 by rpki-client on console-ams.rpki-client.org