Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa
File:                     22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa (raw, json)
Hash identifier:          7HVnShz4k+Kx6QRcPVZdntjJFnK+tXld0gPrOjr29L4=
Subject key identifier:   A8:D2:08:94:14:CD:03:14:06:5B:6F:2F:B5:E8:3C:BF:82:E5:97:27
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285845777DBD8307D57B562C3A8C20
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     13984
IP address blocks:        209.151.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bd:83:07:d5:7b:56:2c:3a:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=de6fda12-64fd-4c6c-adfc-c9d9f1c14cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:fe:5d:fa:40:7f:e5:b7:d2:ca:a2:5f:7b:
                    fb:29:1e:0b:10:5b:a1:04:32:95:61:f9:62:ad:59:
                    0c:d7:ea:14:59:55:8b:1f:aa:cf:29:48:3b:7a:5c:
                    e6:55:8f:ef:ab:ef:a0:81:e2:2b:cb:eb:55:63:36:
                    34:7a:e3:af:44:2c:c1:41:c2:92:19:17:55:b6:21:
                    0f:84:23:13:fa:a0:6f:b6:02:99:e0:8d:30:c9:db:
                    c3:0c:54:02:cc:a9:d6:76:0a:30:19:7c:d0:87:32:
                    fa:c0:99:c8:48:a6:3f:86:92:93:bb:31:a4:7c:9c:
                    8e:b7:08:9e:e5:ef:0e:1a:85:45:e9:b9:c1:30:1d:
                    c5:c0:ff:97:e7:72:f3:30:4e:fe:e7:c8:ac:a8:ed:
                    82:f6:4f:11:86:0b:4e:dc:39:2a:59:9d:46:87:32:
                    64:c8:49:e9:dd:0b:88:a6:ac:0e:a5:94:8a:a1:e7:
                    fa:7d:21:24:1e:27:99:07:b8:49:18:49:8b:46:28:
                    db:2b:49:f3:7b:53:b2:0e:fc:6a:38:89:45:a1:45:
                    63:20:49:14:f7:d7:3e:7a:e7:00:18:e3:2c:0e:8b:
                    3d:26:57:e1:80:54:4e:37:5b:80:e2:43:0c:dc:01:
                    30:e1:d3:ce:c5:1c:2a:0f:56:67:ef:9c:76:1f:2b:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:08:94:14:CD:03:14:06:5B:6F:2F:B5:E8:3C:BF:82:E5:97:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/22c9e1f8-24a9-3f7a-ad8d-ff346e117286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:99:67:6b:90:cf:0d:38:22:3e:ac:6b:9f:68:33:cb:1a:
         e5:7e:45:d0:c3:08:42:d2:75:d0:0c:bc:bb:ad:ad:cd:cc:dc:
         d9:1b:1f:7a:04:70:ac:53:1d:fc:fe:65:35:96:b5:86:cf:ee:
         05:83:9d:38:45:9a:c0:20:a8:de:6b:8e:37:be:07:0e:88:00:
         e5:db:c5:00:39:55:b8:70:71:e5:ef:e7:98:99:b8:7a:06:a8:
         d4:07:1f:12:8f:d5:fb:7b:71:1b:0e:54:ef:83:9c:51:dc:52:
         b3:40:c4:7b:0b:d4:b4:c3:36:db:29:dc:cb:ce:ec:b6:a4:ce:
         35:8d:2a:70:11:34:1d:e1:d1:0b:12:73:3e:e9:64:05:54:22:
         30:48:f7:75:97:fb:06:f2:0e:a8:bc:73:67:40:de:b2:11:27:
         24:47:30:64:56:ae:4c:d6:6e:12:1f:8a:31:5c:34:c3:43:28:
         24:ea:ed:36:19:69:70:bb:d3:6a:3e:ad:c0:f2:12:b0:a6:0c:
         16:f5:3b:97:2f:f0:43:51:c8:16:1f:f2:f3:16:84:e1:ca:6f:
         fb:d7:e1:be:e3:c6:56:cb:b5:2a:36:4f:77:6e:88:75:23:5c:
         08:a1:df:90:45:88:6e:6b:c2:64:ab:d2:4a:29:8c:9e:1f:b5:
         aa:d7:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:17:51 2024 by rpki-client on console-ams.rpki-client.org